Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/v2-qZwUxrTn0JVG_vOubpUK_0WI.roa
File: v2-qZwUxrTn0JVG_vOubpUK_0WI.roa (raw, json)
Hash identifier: 64HCVXGZnZ/dhH1jS1Rnz/Xoq/NcB5M60q4LdrsT3C8=
Subject key identifier: BF:6F:AA:67:05:31:AD:39:F4:25:51:BF:BC:EB:9B:A5:42:BF:D1:62
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F2A39487B1306B1E39202650D928D6136
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/v2-qZwUxrTn0JVG_vOubpUK_0WI.roa
Signing time: Fri 03 Jul 2026 23:03:44 +0000
ROA not before: Fri 03 Jul 2026 23:03:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219498
IP address blocks: 13.143.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2a:39:48:7b:13:06:b1:e3:92:02:65:0d:92:8d:61:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 3 23:03:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf6faa670531ad39f42551bfbceb9ba542bfd162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:c5:df:c0:46:c3:db:2f:a2:8c:a1:3a:9f:
06:8f:68:1b:a4:8e:04:3b:0b:c3:58:77:fb:98:9a:
e2:9e:8a:bc:05:c4:0c:03:0c:2d:85:2a:49:92:ef:
52:a9:12:65:a7:64:65:8c:25:33:e2:50:fc:a9:da:
b1:23:4d:bb:63:3d:3e:4e:20:8f:e3:4d:ba:d2:79:
fe:4a:a4:56:a2:2b:eb:25:05:c9:9c:c3:0f:58:9c:
fc:76:ee:cb:9b:c6:68:22:22:34:f5:8e:32:3b:ad:
97:37:cb:6c:0f:b3:21:59:c3:7c:f1:eb:e3:cf:16:
7c:77:81:8d:4b:0e:c3:0f:5f:9d:8a:c9:36:01:d5:
9f:ec:a9:bf:51:42:ab:96:8d:98:53:b5:d7:1c:3c:
dd:ac:8a:38:d6:96:bb:f3:03:a2:fa:f0:20:84:79:
96:91:56:a5:80:1f:89:28:ac:a4:e8:5d:d2:a0:36:
e1:40:f3:28:80:fe:e0:f3:8a:62:62:21:f7:5f:ec:
88:27:95:24:b3:cb:25:de:6b:6a:12:2b:5b:47:99:
b8:e5:0e:26:e3:92:22:d3:69:54:6c:9f:03:01:c8:
07:64:d3:b6:80:18:6c:3b:85:1e:d7:82:8a:f6:bc:
d2:d1:18:8d:fd:9c:ed:91:5e:11:7f:f4:2c:a8:fc:
fb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6F:AA:67:05:31:AD:39:F4:25:51:BF:BC:EB:9B:A5:42:BF:D1:62
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/v2-qZwUxrTn0JVG_vOubpUK_0WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.136.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:fd:29:19:93:ff:78:54:a8:ef:5e:5a:85:8f:49:f1:68:da:
a8:7d:04:cf:48:49:c1:e6:f0:0a:18:f2:02:93:e3:19:89:22:
d1:4e:39:f4:7e:d3:05:30:d4:35:37:f7:b4:36:99:4c:ac:9e:
4d:7b:0e:ca:66:8b:a0:52:78:ea:e8:d8:35:7b:21:5b:ea:f1:
a3:a4:12:bb:2b:92:f5:70:30:a8:8e:22:ff:7b:a7:a5:54:de:
00:95:5f:ea:d4:95:19:b0:ae:77:78:80:76:cc:c4:74:12:a5:
d0:7d:17:c9:27:54:54:53:a1:79:bd:60:95:d2:73:f6:b0:5d:
31:f6:04:b6:cc:ad:64:2e:4e:c4:b7:b9:51:c4:e1:f0:83:af:
0c:be:ab:17:54:8e:a1:39:59:b0:2a:dd:b6:51:a6:e9:6c:bf:
53:23:09:6e:39:87:4d:2d:6a:bb:ab:15:8b:ed:72:b4:65:f5:
6c:49:fb:93:7b:d4:3f:18:ca:a9:96:38:2c:2f:3a:e8:88:1e:
80:ae:50:4f:ae:75:a9:85:63:45:cd:a0:18:c2:ae:af:43:41:
0f:57:62:3d:cc:c5:ca:21:d1:a7:74:a6:08:63:ba:cb:39:7b:
54:7c:c5:14:81:5c:ed:ca:a9:7d:0f:7e:b5:9d:4b:23:39:f2:
fc:da:d3:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8qOUh7Ewax45ICZQ2SjWE2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNzAzMjMwMzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjZmYWE2NzA1MzFhZDM5ZjQyNTUxYmZiY2ViOWJhNTQyYmZkMTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqovF38BGw9svooyhOp8Gj2gbpI4E
OwvDWHf7mJrinoq8BcQMAwwthSpJku9SqRJlp2RljCUz4lD8qdqxI027Yz0+TiCP
40260nn+SqRWoivrJQXJnMMPWJz8du7Lm8ZoIiI09Y4yO62XN8tsD7MhWcN88evj
zxZ8d4GNSw7DD1+disk2AdWf7Km/UUKrlo2YU7XXHDzdrIo41pa78wOi+vAghHmW
kValgB+JKKyk6F3SoDbhQPMogP7g84piYiH3X+yIJ5Uks8sl3mtqEitbR5m45Q4m
45Ii02lUbJ8DAcgHZNO2gBhsO4Ue14KK9rzS0RiN/ZztkV4Rf/QsqPz7nQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL9vqmcFMa059CVRv7zrm6VCv9FiMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvdjItcVp3VXhyVG4wSlZHX3ZPdWJwVUtfMFdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADY+IMA0G
CSqGSIb3DQEBCwUAA4IBAQAe/SkZk/94VKjvXlqFj0nxaNqofQTPSEnB5vAKGPIC
k+MZiSLRTjn0ftMFMNQ1N/e0NplMrJ5New7KZougUnjq6Ng1eyFb6vGjpBK7K5L1
cDCojiL/e6elVN4AlV/q1JUZsK53eIB2zMR0EqXQfRfJJ1RUU6F5vWCV0nP2sF0x
9gS2zK1kLk7Et7lRxOHwg68MvqsXVI6hOVmwKt22UabpbL9TIwluOYdNLWq7qxWL
7XK0ZfVsSfuTe9Q/GMqpljgsLzroiB6ArlBPrnWphWNFzaAYwq6vQ0EPV2I9zMXK
IdGndKYIY7rLOXtUfMUUgVztyql9D361nUsjOfL82tNZ
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:05 2026 by rpki-client