Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Cgbk8XOkVITQSmSUZjkhAEeFG0Q.roa
File: Cgbk8XOkVITQSmSUZjkhAEeFG0Q.roa (raw, json)
Hash identifier: sHnlnmg0t2tCZMR2yfHDtMSAxSJcFHNy3vxAwPyczIs=
Subject key identifier: 0A:06:E4:F1:73:A4:54:84:D0:4A:64:94:66:39:21:00:47:85:1B:44
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0C58871D3AEADA81BB307586513B3A20E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Cgbk8XOkVITQSmSUZjkhAEeFG0Q.roa
Signing time: Mon 21 Sep 2026 19:54:08 +0000
ROA not before: Mon 21 Sep 2026 19:54:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219336
IP address blocks: 13.143.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:88:71:d3:ae:ad:a8:1b:b3:07:58:65:13:b3:a2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 21 19:54:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a06e4f173a45484d04a64946639210047851b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:15:67:44:a6:8a:4c:d2:e5:be:e3:54:ba:
66:8c:7a:88:b0:0f:74:b8:dc:e9:67:05:0a:69:1c:
a9:d3:0b:00:ea:97:23:17:95:20:60:41:9f:54:ea:
f8:aa:8a:e1:79:f7:50:e4:57:c3:11:04:6d:57:2c:
c3:aa:5c:c6:40:97:45:ac:75:0c:82:d3:73:d7:0e:
29:fb:9e:cc:2c:bf:87:66:2a:0f:c6:0d:c1:ee:4d:
e8:1e:58:96:df:f4:1d:82:42:3f:4c:80:1a:0e:d6:
85:4a:f3:05:d8:cf:0a:d7:09:59:96:f4:68:27:75:
ca:97:1f:e8:f5:ea:2e:d4:97:0a:67:c0:6b:ec:fd:
37:6b:1d:dc:63:e0:f7:34:9c:39:bb:67:bb:3f:6a:
57:dd:f7:94:4e:b7:b6:0a:eb:77:14:63:40:34:06:
ff:e5:3c:ae:a5:dd:eb:e9:5f:3d:b8:be:69:60:a6:
ae:2c:c0:7d:6d:23:ef:73:82:47:47:f9:53:b2:e8:
b0:f3:03:a5:09:1b:ab:3c:55:07:d3:88:7c:c1:1c:
f2:8b:e5:f8:0d:94:45:be:d4:b2:9a:d7:1b:9b:7a:
4f:c4:1c:be:59:67:c1:83:d2:6f:3e:a4:a7:38:45:
23:43:17:95:97:f5:da:21:b1:ca:90:5d:a8:d1:71:
19:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:06:E4:F1:73:A4:54:84:D0:4A:64:94:66:39:21:00:47:85:1B:44
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Cgbk8XOkVITQSmSUZjkhAEeFG0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.171.0/24
Signature Algorithm: sha256WithRSAEncryption
49:3c:1c:9f:71:ac:b7:fb:c3:c7:89:11:e9:6a:76:78:56:25:
19:8a:ac:de:6a:fe:8d:3c:81:1f:9e:db:c7:74:c0:c4:02:a1:
07:a3:7c:b9:b3:5c:05:b2:d6:be:1d:06:c3:ac:55:93:8f:ed:
3a:5b:76:85:61:eb:0c:24:89:3e:6a:51:bd:37:cd:b6:2d:8f:
b6:90:65:df:dd:89:fa:84:52:09:9b:9e:75:63:2a:15:dd:41:
42:d4:4e:90:22:30:c4:25:6b:5c:f3:66:4f:e7:12:dd:19:40:
3b:f4:28:10:4e:69:cc:26:45:e3:73:fa:62:13:8a:80:73:ae:
fc:76:7a:8e:09:92:d1:ac:52:24:c5:31:eb:c3:b8:93:b1:db:
c8:61:2f:e5:4f:9b:e5:de:ec:e5:77:fe:f5:c7:ae:28:f9:a2:
2b:8a:00:46:93:0f:2c:8d:78:69:02:12:09:32:3d:ca:78:15:
f0:d0:36:8b:c9:fd:c3:b9:c7:2c:b6:c4:9f:49:3f:a3:0a:dc:
35:98:8c:1f:0e:f6:6d:b4:15:54:8b:8a:08:cc:96:b9:fa:89:
1a:1b:6e:6d:6a:12:83:52:5d:29:f6:5c:7a:0b:cb:d5:e3:df:
98:11:33:8d:e5:c9:92:7a:f8:5f:84:95:f5:83:30:b1:ae:d6:
e9:e8:05:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:48:55 2026 by rpki-client