Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YjcxMTFU9HGBikgI1Hn2XsHDGOs.roa
File: YjcxMTFU9HGBikgI1Hn2XsHDGOs.roa (raw, json)
Hash identifier: dNIWCrDawSabQLzKHSnixD1Vt1o4vq7U7aLN6ZGUZGs=
Subject key identifier: 62:37:31:31:31:54:F4:71:81:8A:48:08:D4:79:F6:5E:C1:C3:18:EB
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F9AC47B04F253382AB7A67A6A61629D0B
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YjcxMTFU9HGBikgI1Hn2XsHDGOs.roa
Signing time: Sat 25 Jul 2026 19:33:15 +0000
ROA not before: Sat 25 Jul 2026 19:33:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219443
IP address blocks: 13.143.140.0/24 maxlen: 24
177.1.194.0/24 maxlen: 24
177.1.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9a:c4:7b:04:f2:53:38:2a:b7:a6:7a:6a:61:62:9d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 25 19:33:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=623731313154f471818a4808d479f65ec1c318eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:1c:54:12:84:c9:cc:26:36:7b:43:32:cd:
ce:97:2b:9a:01:0a:8a:a5:a3:b9:1d:82:ae:68:a7:
97:74:7e:49:fc:d4:02:fb:2a:f0:4d:48:48:b0:b4:
d3:57:7d:9a:df:27:3d:ad:1a:c1:8f:f9:9f:58:69:
8a:cb:4f:16:a0:76:8a:77:42:fb:c2:13:dd:64:10:
12:19:96:fd:1f:2c:60:df:f9:08:ca:05:c1:cb:d0:
92:dd:79:8b:df:e1:08:f6:06:43:fc:e6:be:13:51:
2b:d0:72:29:14:2d:2b:18:1a:27:65:c3:ef:a1:21:
02:41:8e:c4:00:c9:6a:53:11:11:a9:1a:f7:3a:84:
f0:db:e3:6f:1f:62:a6:4c:f5:c1:92:37:c1:a1:9b:
a6:8a:7f:cd:99:f3:8c:7c:d4:1a:86:eb:2d:b6:e2:
c9:e4:19:54:fc:48:93:8d:7b:a4:06:c1:c1:e6:4d:
97:2c:19:00:c9:a5:a3:14:8a:f9:c9:ae:5a:1c:ab:
5f:a7:78:50:05:cf:69:a2:60:af:09:ec:4b:c2:c5:
6d:5e:1d:3d:fa:e4:46:9c:48:2f:d0:f8:3a:1b:ef:
51:fc:cf:19:c1:7f:ef:cf:9d:8e:92:59:3b:a6:b9:
a7:11:50:2c:b3:ed:b9:fb:dc:fb:ee:b8:76:8f:a9:
77:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:37:31:31:31:54:F4:71:81:8A:48:08:D4:79:F6:5E:C1:C3:18:EB
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YjcxMTFU9HGBikgI1Hn2XsHDGOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.140.0/24
177.1.194.0/24
177.1.197.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:0a:4d:10:9c:67:b4:ff:fd:22:4b:ea:a8:e0:a7:af:65:45:
2b:e7:e6:58:01:85:26:1c:56:92:7f:f6:30:a2:5f:f4:19:f1:
42:97:d7:40:53:b3:88:d3:24:0f:fe:2b:c3:d4:3e:28:d5:b8:
66:00:c0:59:8b:a9:55:21:fe:59:73:94:1c:0a:5e:73:5f:b3:
82:91:58:e4:35:21:45:7f:d5:2c:82:8c:20:18:e9:4b:1f:5f:
61:69:b3:38:3b:1a:1d:e8:e9:83:63:6e:74:ef:c5:58:fd:ff:
fb:d1:8e:3c:ce:46:77:81:f1:f0:78:88:31:b6:67:a8:ef:3c:
d3:08:4a:ad:ed:3c:e8:22:af:74:48:16:07:d2:31:08:c4:0d:
76:c7:25:9d:2a:4f:ce:d5:a1:d9:2a:04:33:07:76:ef:67:93:
69:6a:79:6e:08:2c:ef:2c:27:6a:10:a4:c2:ce:5c:0f:77:8c:
3d:ac:d9:75:51:f1:fd:6c:88:cb:0d:23:1a:18:b4:2c:24:80:
75:e3:58:55:63:c3:e2:28:fa:ff:63:53:91:ea:b9:61:1e:cf:
67:61:3b:42:a2:3c:78:d6:bf:40:77:20:8b:a3:15:7f:60:8a:
d7:8d:e0:ed:7c:72:11:5b:f3:0b:20:7e:13:44:d2:ce:62:50:
49:c4:87:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:08:21 2026 by rpki-client