Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fUhh5T8GfxMIMst6AFzHbj-xUJI.roa
File: fUhh5T8GfxMIMst6AFzHbj-xUJI.roa (raw, json)
Hash identifier: z2Idv9UX+3fdSFXSiwuGiwOYhllb04lwhfuhnuDp8z0=
Subject key identifier: 7D:48:61:E5:3F:06:7F:13:08:32:CB:7A:00:5C:C7:6E:3F:B1:50:92
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F9644BF209ED18E34050DDE0D4881C41E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fUhh5T8GfxMIMst6AFzHbj-xUJI.roa
Signing time: Fri 24 Jul 2026 22:35:15 +0000
ROA not before: Fri 24 Jul 2026 22:35:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400402
IP address blocks: 13.143.52.0/22 maxlen: 24
31.76.88.0/24 maxlen: 24
31.76.89.0/24 maxlen: 24
31.76.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:44:bf:20:9e:d1:8e:34:05:0d:de:0d:48:81:c4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 24 22:35:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d4861e53f067f130832cb7a005cc76e3fb15092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:8d:14:2d:d3:5d:f0:97:66:75:9a:6f:ab:
10:b3:f9:01:9f:83:79:23:28:97:64:99:bb:d2:c3:
1c:68:8d:01:42:64:d4:a4:5d:df:99:c5:94:9a:7f:
95:c4:80:49:0c:d1:32:bb:9a:3d:01:00:72:24:6c:
b4:cb:35:8e:d5:07:7c:6d:bd:1b:e2:da:0c:e8:5f:
0b:ec:a0:2b:7b:8d:89:81:d0:34:4a:47:d9:b7:ff:
bf:ad:aa:3c:92:61:11:ac:28:f4:ab:fc:cf:05:9f:
33:8d:fb:a4:bd:aa:78:32:cf:ae:8d:14:9f:0f:84:
b7:66:be:cd:78:54:f5:7d:ae:70:9e:75:e2:e5:76:
1f:62:67:8f:a5:fd:4b:de:c2:36:6e:01:3b:06:ab:
b6:15:d5:2a:9b:1e:3d:76:38:1a:a8:9b:c8:76:64:
9f:90:90:5a:41:3a:10:fa:c8:9b:55:9d:51:4e:05:
45:e6:71:98:6b:d2:00:74:79:d6:fa:7d:51:39:d4:
26:78:cc:d4:93:2d:2b:19:48:87:7b:ed:db:2b:ec:
c4:9f:80:fb:b6:3c:c2:aa:ac:21:59:0f:67:32:92:
0b:56:f1:4e:ec:bd:f5:ea:5c:96:31:a9:c0:39:e9:
87:f3:8a:c1:a1:c1:ad:5d:d1:9f:77:e1:03:64:0b:
25:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:48:61:E5:3F:06:7F:13:08:32:CB:7A:00:5C:C7:6E:3F:B1:50:92
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fUhh5T8GfxMIMst6AFzHbj-xUJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.52.0/22
31.76.88.0-31.76.90.255
Signature Algorithm: sha256WithRSAEncryption
ac:78:56:ae:5f:42:b0:62:b5:36:c6:81:09:2c:7e:ff:4c:83:
ad:fd:65:93:67:2c:6b:ab:c6:27:a8:bd:9d:a1:86:56:81:58:
89:e5:2e:f6:4a:81:6d:b0:3b:23:cb:91:23:04:54:6b:00:8d:
06:0e:f1:8b:4b:aa:99:dd:3f:71:89:e6:6c:50:9b:36:e1:1a:
82:1c:72:22:b4:b1:4f:36:c5:a7:7f:d4:e9:f2:14:7c:90:60:
7a:84:0a:ab:02:97:ca:e8:f6:74:c8:ff:be:74:6b:4e:89:a5:
73:41:35:47:b8:d3:e6:a6:83:ec:0e:31:ac:ca:4e:c3:87:ce:
bd:8c:62:69:19:92:dc:50:3f:66:d9:e9:67:46:e6:04:ac:07:
fb:6d:c5:3c:2f:d9:d5:55:6b:41:42:36:30:60:27:94:32:b4:
c2:39:f8:71:42:ce:b2:a7:c4:5b:87:b3:60:ad:47:94:7d:f6:
b0:35:67:ac:6d:8f:eb:e4:51:b1:39:f6:ce:2d:e8:9c:9a:9b:
62:96:8b:70:e5:84:f2:2b:dc:47:22:06:ed:bd:31:b5:83:7f:
ad:7c:bc:7b:b1:19:0d:6b:c7:1f:05:69:bb:62:4c:5c:7b:f1:
5a:78:b3:1e:52:05:a4:8b:2d:ef:00:0d:e5:2a:d0:61:91:f7:
84:a7:d2:65
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ+WRL8gntGONAUN3g1IgcQeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNzI0MjIzNTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDQ4NjFlNTNmMDY3ZjEzMDgzMmNiN2EwMDVjYzc2ZTNmYjE1MDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1SNFC3TXfCXZnWab6sQs/kBn4N5
IyiXZJm70sMcaI0BQmTUpF3fmcWUmn+VxIBJDNEyu5o9AQByJGy0yzWO1Qd8bb0b
4toM6F8L7KAre42JgdA0SkfZt/+/rao8kmERrCj0q/zPBZ8zjfukvap4Ms+ujRSf
D4S3Zr7NeFT1fa5wnnXi5XYfYmePpf1L3sI2bgE7Bqu2FdUqmx49djgaqJvIdmSf
kJBaQToQ+sibVZ1RTgVF5nGYa9IAdHnW+n1ROdQmeMzUky0rGUiHe+3bK+zEn4D7
tjzCqqwhWQ9nMpILVvFO7L316lyWManAOemH84rBocGtXdGfd+EDZAslxQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFH1IYeU/Bn8TCDLLegBcx24/sVCSMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvZlVoaDVUOEdmeE1JTXN0NkFGekhiai14VUpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCDY80MAwD
BAMfTFgDBAAfTFowDQYJKoZIhvcNAQELBQADggEBAKx4Vq5fQrBitTbGgQksfv9M
g639ZZNnLGurxieovZ2hhlaBWInlLvZKgW2wOyPLkSMEVGsAjQYO8YtLqpndP3GJ
5mxQmzbhGoIcciK0sU82xad/1OnyFHyQYHqECqsCl8ro9nTI/750a06JpXNBNUe4
0+amg+wOMazKTsOHzr2MYmkZktxQP2bZ6WdG5gSsB/ttxTwv2dVVa0FCNjBgJ5Qy
tMI5+HFCzrKnxFuHs2CtR5R99rA1Z6xtj+vkUbE59s4t6Jyam2KWi3DlhPIr3Eci
Bu29MbWDf618vHuxGQ1rxx8FabtiTFx78Vp4sx5SBaSLLe8ADeUq0GGR94Sn0mU=
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:55:19 2026 by rpki-client