Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JVtczVDPRXscQV_iiUSlE50lGrY.roa
File: JVtczVDPRXscQV_iiUSlE50lGrY.roa (raw, json)
Hash identifier: 0xLCzcSzoiLM2nCHMMdl/I3UnSyufdWf0ySv2qq8FhY=
Subject key identifier: 25:5B:5C:CD:50:CF:45:7B:1C:41:5F:E2:89:44:A5:13:9D:25:1A:B6
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FA97CCA6D5AE601BB8ADD4B128489A24F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JVtczVDPRXscQV_iiUSlE50lGrY.roa
Signing time: Tue 28 Jul 2026 16:09:15 +0000
ROA not before: Tue 28 Jul 2026 16:09:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 13.143.110.0/23 maxlen: 24
179.198.4.0/22 maxlen: 24
179.198.20.0/22 maxlen: 24
179.198.32.0/22 maxlen: 24
179.198.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:7c:ca:6d:5a:e6:01:bb:8a:dd:4b:12:84:89:a2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 28 16:09:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=255b5ccd50cf457b1c415fe28944a5139d251ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:46:73:cc:b4:43:7c:bd:8b:a2:78:3c:71:09:
bd:bd:34:01:d2:91:8a:99:6c:20:fe:99:10:ab:d2:
0f:42:86:81:32:4c:09:30:86:e0:01:a0:01:bc:3e:
58:3f:f2:21:71:77:34:da:03:8c:5b:ff:4b:4d:75:
e0:12:62:8b:c2:e2:c3:31:91:2e:14:e0:8c:ad:b3:
a0:75:55:ac:c4:34:d6:bd:42:6b:0c:69:d7:bc:a8:
13:02:a4:1a:ae:99:3b:a8:3b:64:4b:50:1d:62:28:
9c:36:1e:2f:6e:9c:20:f2:b7:b7:a0:14:42:e8:11:
88:6b:94:07:31:47:da:e9:a1:cc:7d:44:7e:3a:06:
50:45:1e:0d:5e:93:63:4a:12:9d:00:c0:90:7f:d7:
fe:ba:a6:39:d5:73:73:2c:3b:fc:5c:34:aa:1d:6a:
71:ac:fe:3d:2d:03:62:b4:c9:a7:85:46:4d:24:03:
e1:64:d6:5d:15:8a:a9:94:fc:9d:25:b6:fa:9b:32:
9e:37:21:67:b4:7e:03:d0:a7:79:b0:80:74:43:b8:
b6:0f:f2:0d:99:b6:5e:ef:87:ca:fb:42:94:f5:56:
e5:89:d3:38:4d:03:e8:dc:e7:9a:9c:a4:2b:91:78:
80:13:c3:4d:f9:f2:69:3e:1a:60:45:d0:98:ac:cf:
03:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5B:5C:CD:50:CF:45:7B:1C:41:5F:E2:89:44:A5:13:9D:25:1A:B6
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JVtczVDPRXscQV_iiUSlE50lGrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.110.0/23
179.198.4.0/22
179.198.20.0/22
179.198.32.0/22
179.198.44.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:7c:51:8d:98:59:ec:fe:97:2c:65:39:f7:07:26:29:19:c1:
f3:3b:29:3e:fb:65:4d:00:54:3e:00:f4:4e:fb:a4:06:6f:24:
8d:fc:47:56:72:66:61:31:b0:b1:90:eb:d3:47:19:48:72:a9:
51:79:93:43:7f:40:30:97:54:cf:16:43:1c:8a:f8:78:a0:d6:
10:1a:88:30:10:52:dc:47:55:05:0f:0a:2e:bc:0d:14:61:b0:
ea:dc:49:48:e6:89:23:67:ee:d8:88:1f:c3:88:dc:16:42:83:
43:c6:09:8f:18:80:0e:87:32:7f:7f:e7:96:77:2c:9e:95:64:
37:ef:d7:f1:af:36:71:ea:6e:af:a2:d7:41:75:75:19:a4:80:
27:aa:78:90:04:db:4f:89:88:b6:d4:43:ad:d2:e1:0b:b4:4c:
62:6d:c8:d8:bd:b3:c1:d8:87:4d:e4:fb:b3:1a:8b:a8:13:83:
4f:52:f1:0a:e6:08:56:9b:be:bb:b7:5a:82:b9:30:8c:5b:7a:
f9:7a:2c:d7:87:ce:d2:7a:6a:7d:ef:3d:fa:9c:94:49:fa:5b:
84:d2:f7:bc:48:bc:5c:1a:36:e1:b3:fa:2d:01:e4:80:b2:5e:
41:07:ee:ff:78:00:0d:d2:ce:6f:4c:7f:c0:b0:1f:f1:ba:9b:
b5:cd:ea:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:36:55 2026 by rpki-client