Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/96LUOBxvb4kywmhYaiA5kp1Tx7o.roa
File: 96LUOBxvb4kywmhYaiA5kp1Tx7o.roa (raw, json)
Hash identifier: ZqFKi1ov0LYAotRbluuraj8gHdx2OH7aA2l/3XSeh5Y=
Subject key identifier: F7:A2:D4:38:1C:6F:6F:89:32:C2:68:58:6A:20:39:92:9D:53:C7:BA
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FA46E276A8ABCDB4C95076390BF91CFB4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/96LUOBxvb4kywmhYaiA5kp1Tx7o.roa
Signing time: Mon 27 Jul 2026 16:35:10 +0000
ROA not before: Mon 27 Jul 2026 16:35:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199742
IP address blocks: 2.27.58.0/24 maxlen: 24
13.143.138.0/24 maxlen: 24
31.76.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:6e:27:6a:8a:bc:db:4c:95:07:63:90:bf:91:cf:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 27 16:35:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7a2d4381c6f6f8932c268586a2039929d53c7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7f:40:9f:d7:6a:37:b6:69:0c:ff:38:00:84:
05:b2:8a:51:45:c7:2b:c2:7b:37:a1:9f:41:93:4e:
5e:a1:d6:53:a2:f3:50:c0:8f:e0:c6:18:d3:d7:de:
4a:ed:fd:9d:df:1d:7a:96:f6:df:78:dd:90:6e:87:
68:d5:58:27:4d:eb:3b:8e:bb:1b:6c:c2:e3:00:54:
f3:e1:8e:8b:12:58:11:8b:b1:46:1d:aa:67:9d:46:
87:ac:c4:93:a5:44:5b:05:24:98:9f:7e:7f:7b:fa:
bb:f4:8a:7c:e9:5c:62:0f:e2:c2:71:7a:a0:a6:0a:
ca:39:17:4a:d2:f4:d8:08:56:89:8a:38:57:92:60:
54:65:2d:8e:15:d3:ce:3f:b1:24:d7:3e:ad:9e:97:
56:e0:0e:be:33:5d:d2:41:eb:e5:4d:2f:43:a7:3f:
c6:fc:d9:ec:76:33:d6:d6:ff:25:ca:45:0d:f0:df:
82:e0:4b:02:92:8a:4f:d7:ed:6f:39:bc:16:14:5b:
f3:81:2f:40:a6:1b:c0:14:ef:12:46:10:42:2e:49:
30:38:06:4a:83:1c:25:93:d4:b0:e0:ca:cd:6d:76:
2e:63:65:d7:09:38:2b:8a:f1:58:e5:4a:88:2b:4b:
f9:09:ea:47:bc:2a:52:74:dc:66:b8:fb:5c:23:5b:
8a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A2:D4:38:1C:6F:6F:89:32:C2:68:58:6A:20:39:92:9D:53:C7:BA
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/96LUOBxvb4kywmhYaiA5kp1Tx7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.58.0/24
13.143.138.0/24
31.76.250.0/24
Signature Algorithm: sha256WithRSAEncryption
26:a1:2a:b4:94:2e:ea:0d:a2:9c:78:8c:00:4b:73:03:e0:b5:
95:bf:9b:4f:cd:ab:ee:08:cc:ad:ed:4a:f9:5d:98:da:90:87:
24:2d:9d:dd:c4:ca:41:e8:70:0c:a3:9f:c1:6f:03:25:0a:15:
29:5f:53:01:45:97:08:9e:bb:05:fe:58:e1:e1:0a:d8:39:40:
c2:92:7c:75:2c:69:60:82:28:4f:b3:46:84:6a:7f:88:f0:23:
ff:f5:b0:22:3c:84:5b:84:71:28:64:5d:b2:e2:d1:8a:57:42:
62:c3:58:3d:bc:aa:e2:68:93:14:ae:f0:d7:5a:eb:28:50:8d:
6b:3a:bc:9c:63:21:f1:33:51:f1:22:58:b8:72:4c:d1:8a:30:
81:3b:0e:bc:d6:60:17:0b:99:97:b7:5b:52:02:5c:ce:42:26:
45:e5:60:b1:35:65:cc:85:00:5c:b6:61:46:a0:42:0d:8c:56:
9d:d2:84:9f:e1:94:e4:30:5a:f0:5b:fd:a3:50:99:62:40:ae:
e2:ed:a6:57:ce:eb:f7:39:a4:ab:ed:4f:3e:ea:60:1d:ee:84:
50:2e:68:35:65:0a:00:79:62:50:bf:5c:19:26:f6:56:2d:97:
44:3b:ac:a1:50:09:2f:fd:fa:49:6f:80:46:a2:b3:77:4c:09:
13:98:46:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:28:17 2026 by rpki-client