Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/AREJI-f2ovyXu6sXesIyvWbFGrE.roa
File: AREJI-f2ovyXu6sXesIyvWbFGrE.roa (raw, json)
Hash identifier: QM6UuqkpOo5qTstkI38Ygwerq25+8ITMxdqFDrOWXWY=
Subject key identifier: 01:11:09:23:E7:F6:A2:FC:97:BB:AB:17:7A:C2:32:BD:66:C5:1A:B1
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0B54F9A394351141FE938B2C1FE779774
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/AREJI-f2ovyXu6sXesIyvWbFGrE.roa
Signing time: Fri 18 Sep 2026 16:18:07 +0000
ROA not before: Fri 18 Sep 2026 16:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19318
IP address blocks: 13.143.144.0/24 maxlen: 24
13.143.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:4f:9a:39:43:51:14:1f:e9:38:b2:c1:fe:77:97:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 18 16:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01110923e7f6a2fc97bbab177ac232bd66c51ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e3:e0:b0:8a:22:9e:5f:4a:a0:03:9c:19:22:
24:cc:3d:e2:f7:88:fc:64:a4:42:c6:81:97:f2:f2:
dc:c4:90:97:3c:31:f3:1b:fc:7f:66:78:09:3c:3f:
e0:7b:1f:c1:14:be:ba:0d:ab:06:3a:83:7a:3e:78:
ff:be:32:78:9b:df:6d:3c:e9:1c:3c:d5:95:06:17:
db:04:cd:7c:1a:12:b1:31:82:b3:33:df:ad:28:d5:
53:18:85:32:62:07:f7:b6:6e:ec:7a:7c:87:c0:92:
cf:59:00:d8:fa:7c:14:be:b4:26:1f:5e:9a:02:91:
ca:aa:85:81:d0:86:a8:b7:f4:13:45:7d:c5:67:b7:
f8:9f:c9:35:6f:4b:b5:77:a1:3f:45:5e:b9:ff:07:
bc:13:52:e1:2f:4e:ef:3c:d1:37:b4:b7:44:1e:ed:
a0:9d:e5:82:cc:c5:24:78:3d:94:29:04:43:c3:d9:
79:ed:ea:e4:5a:ed:e1:df:73:fe:32:6d:5f:59:fb:
d0:87:2d:af:49:10:09:da:af:f6:b3:09:98:dc:66:
2e:08:eb:f4:3e:0a:1a:85:6e:ec:4a:1c:55:03:9c:
f7:4c:16:84:72:4f:aa:d6:e2:2c:7e:1d:ae:74:7a:
45:9f:50:29:8e:32:39:01:6f:4b:1e:66:34:8b:55:
81:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:11:09:23:E7:F6:A2:FC:97:BB:AB:17:7A:C2:32:BD:66:C5:1A:B1
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/AREJI-f2ovyXu6sXesIyvWbFGrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.144.0/24
13.143.247.0/24
Signature Algorithm: sha256WithRSAEncryption
75:70:67:41:b4:11:21:ba:83:49:a9:db:dc:33:0d:bf:86:9d:
a3:9d:68:df:cc:01:bd:c7:14:8d:ad:7a:1f:c2:4b:b2:82:67:
81:d1:ea:c1:df:95:6f:c0:e4:0e:c3:d8:79:4d:e3:d1:16:62:
ab:27:78:f4:55:c9:81:1b:ed:52:f1:35:57:a6:95:79:29:7e:
6b:39:05:b0:70:75:c9:4e:de:87:cf:ec:aa:a8:98:40:ce:c9:
51:d5:49:1c:38:1d:be:2f:64:0f:4c:44:22:3b:cc:7b:82:85:
0c:75:3c:6b:b3:2f:62:ab:d2:60:86:c3:c8:fa:d2:c1:99:5e:
0b:ed:d6:5a:58:53:ce:4e:05:13:11:5c:be:43:04:1a:5f:fc:
70:05:06:41:85:6d:c2:ab:75:89:5d:6b:fc:8f:dd:9f:3e:3b:
6e:f6:65:69:e2:45:d4:a0:25:f0:34:80:b7:ca:3a:de:7f:a8:
14:7e:4e:0a:ec:2b:03:17:08:27:a9:bb:3f:78:9c:18:5f:7d:
2a:5b:46:cf:06:fd:91:e7:2d:fa:4d:f4:fd:cd:25:07:77:05:
99:af:8c:68:81:4c:2c:83:c1:23:bc:fe:ec:8a:62:23:e0:13:
8d:ee:f1:d4:b2:ec:42:74:6f:10:1f:b4:b4:08:99:1b:9d:ed:
bd:4f:46:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:31:53 2026 by rpki-client