Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/D0BT5P1p5kpUtiEIaNFMHR3V33Y.roa
File: D0BT5P1p5kpUtiEIaNFMHR3V33Y.roa (raw, json)
Hash identifier: 3TJpRygEyWGRaM24tYNF4YpzkYm3GluupRXJZLb8qUE=
Subject key identifier: 0F:40:53:E4:FD:69:E6:4A:54:B6:21:08:68:D1:4C:1D:1D:D5:DF:76
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FA9774CBDA1E2B8EF93E424943F97C835
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/D0BT5P1p5kpUtiEIaNFMHR3V33Y.roa
Signing time: Tue 28 Jul 2026 16:03:15 +0000
ROA not before: Tue 28 Jul 2026 16:03:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4766
IP address blocks: 13.143.88.0/22 maxlen: 24
13.143.92.0/22 maxlen: 24
13.143.96.0/22 maxlen: 24
31.77.176.0/23 maxlen: 24
31.77.182.0/23 maxlen: 24
31.77.190.0/23 maxlen: 24
177.202.126.0/23 maxlen: 24
179.198.0.0/22 maxlen: 24
179.198.12.0/22 maxlen: 24
179.198.16.0/22 maxlen: 24
179.198.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:77:4c:bd:a1:e2:b8:ef:93:e4:24:94:3f:97:c8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 28 16:03:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f4053e4fd69e64a54b6210868d14c1d1dd5df76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:56:b2:f2:b3:3f:fd:27:ed:8d:ab:8b:1f:
77:94:4d:21:52:ac:0e:8b:e3:ec:8c:73:8e:f4:1d:
4d:dd:f4:8e:fb:c3:ca:a1:bd:0f:e8:f2:8f:ca:03:
4a:90:63:cb:3a:73:a4:ba:1b:5e:64:26:3b:80:cb:
78:d8:98:29:c5:7a:2a:ff:4a:bf:d1:1c:08:6c:eb:
2e:24:0f:fa:e2:dd:2b:33:78:e9:5e:0a:e6:37:54:
2f:7f:37:bf:c1:8f:02:94:d7:b3:2d:0a:12:86:e6:
92:9c:a0:e1:8a:1a:f2:07:80:91:71:51:51:a9:e2:
4b:61:3a:7c:5d:1f:23:cc:28:5c:e4:24:e9:6a:39:
1d:b6:70:b1:c7:bb:47:43:fc:a5:2d:e0:04:56:86:
48:11:b4:0a:df:e6:46:05:cc:04:2a:1c:3a:8c:8d:
05:24:d6:de:fe:a8:5a:84:b8:5a:47:c5:28:76:fb:
2e:49:2c:98:a8:d0:3b:d5:af:88:c5:41:a4:79:ea:
de:cd:41:75:09:fd:2b:43:68:fe:5d:34:42:73:f4:
42:ae:e1:14:08:7d:fd:d1:5c:2c:f5:6b:90:e2:a0:
a5:8e:9f:18:78:1e:0b:9c:74:ce:f2:dd:14:f1:6f:
3f:26:f1:46:90:27:d2:72:b0:66:aa:fb:6c:5a:3a:
db:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:40:53:E4:FD:69:E6:4A:54:B6:21:08:68:D1:4C:1D:1D:D5:DF:76
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/D0BT5P1p5kpUtiEIaNFMHR3V33Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.88.0-13.143.99.255
31.77.176.0/23
31.77.182.0/23
31.77.190.0/23
177.202.126.0/23
179.198.0.0/22
179.198.12.0-179.198.19.255
179.198.24.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:1f:be:de:2e:a4:7c:33:ed:3b:f1:f8:2b:de:f8:79:76:80:
66:f5:32:66:26:d6:01:47:40:ad:53:7c:45:d3:60:fd:fa:42:
bc:56:b9:58:7f:3a:5c:91:28:de:92:84:86:46:f1:7d:7b:46:
8b:12:7c:25:1e:6b:2a:fe:ae:77:26:62:de:91:45:a0:b9:50:
d9:61:d1:bd:42:cd:2a:76:eb:da:7e:12:f9:b1:67:f5:2c:7e:
dd:59:e2:a1:f7:10:56:10:5b:c1:86:e4:8e:21:3c:f6:39:0f:
73:b3:ff:ee:6c:82:f4:d6:e5:f2:1c:03:d2:1f:94:f9:52:d2:
5f:9f:e0:cc:79:21:59:3f:90:cb:90:62:3a:9f:b3:70:57:ef:
95:be:e1:d8:02:f1:44:15:9a:89:63:10:7a:a3:49:62:0a:f8:
1e:e8:da:0d:31:98:20:40:c5:e4:58:88:75:38:77:e6:76:e3:
ce:d6:03:65:72:ec:3a:20:3e:63:78:b7:e9:ba:cc:66:18:08:
3c:ab:af:5c:67:cc:0e:a9:70:ab:b1:63:8b:c5:90:f0:37:b9:
42:68:42:31:84:0f:8b:27:aa:e1:c8:25:75:2b:73:03:ce:bc:
20:e1:84:8b:c5:30:e7:35:c5:d8:3d:ba:bd:c0:51:1b:91:25:
ff:a9:d2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:36:56 2026 by rpki-client