Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/skI7gGa6nTuULdZizW79KWG1_y8.roa
File: skI7gGa6nTuULdZizW79KWG1_y8.roa (raw, json)
Hash identifier: xA7zCHhLyIpYPBBqSfl9t4xDVd3Y2wrf46fNbkRYGtk=
Subject key identifier: B2:42:3B:80:66:BA:9D:3B:94:2D:D6:62:CD:6E:FD:29:61:B5:FF:2F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0B54F9B3E050ED24257D18D7DCE169705
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/skI7gGa6nTuULdZizW79KWG1_y8.roa
Signing time: Fri 18 Sep 2026 16:18:08 +0000
ROA not before: Fri 18 Sep 2026 16:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210558
IP address blocks: 13.143.144.0/24 maxlen: 24
13.143.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:4f:9b:3e:05:0e:d2:42:57:d1:8d:7d:ce:16:97:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 18 16:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2423b8066ba9d3b942dd662cd6efd2961b5ff2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:03:67:4a:04:eb:3a:33:63:01:3b:89:37:8c:
59:53:0d:5e:3a:f3:71:cd:3d:60:d8:de:c5:e5:22:
9e:51:56:d5:62:2f:05:78:c2:f5:a8:74:01:87:98:
02:b1:61:f8:fc:36:42:5b:55:f0:c7:f9:38:c6:71:
c0:84:32:7a:fe:66:7a:d0:43:f4:4f:9b:25:ed:9c:
38:15:40:25:d7:1c:6b:7e:fc:3a:17:f2:17:e7:54:
dd:1e:b3:92:10:65:ab:3f:73:43:53:95:df:19:fd:
34:7d:5f:31:01:1e:59:87:8c:96:eb:e7:c1:c4:b0:
99:ee:6e:c5:9d:cf:1a:e6:85:2a:dc:a7:04:b4:4d:
94:aa:dd:1c:75:38:9f:52:19:8d:07:fa:53:b5:aa:
79:0b:6d:82:2f:eb:76:a3:4e:49:e3:95:bf:65:82:
46:df:89:2a:48:f9:eb:fa:69:fc:00:24:49:0a:ea:
20:1c:a3:75:e4:1e:da:12:a9:4b:68:8b:db:20:3c:
14:38:bd:ae:35:da:7d:95:09:76:39:ff:5a:f2:c4:
6b:fa:07:a0:2e:4e:4f:d5:5e:88:cb:93:70:14:38:
dc:eb:b1:9a:77:0b:5d:01:33:b8:fb:97:7d:39:b5:
67:f1:d8:44:e3:b4:e5:7d:5f:fd:99:81:40:d0:ca:
a2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:42:3B:80:66:BA:9D:3B:94:2D:D6:62:CD:6E:FD:29:61:B5:FF:2F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/skI7gGa6nTuULdZizW79KWG1_y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.144.0/24
13.143.247.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:6f:0a:a4:5a:ef:bd:fd:e4:8c:e7:ba:00:91:db:86:37:fa:
21:4e:18:07:71:bc:fb:11:ad:2a:2c:ac:b0:6a:df:fc:0c:d3:
aa:0e:21:fd:b5:70:3f:3a:69:af:77:31:db:94:61:5e:80:e8:
ed:82:73:50:18:3a:0e:cf:99:d5:56:9c:52:43:4f:3c:1e:82:
3b:13:e8:29:b8:9e:c8:16:35:08:6f:cf:06:c3:5a:de:37:6b:
e4:73:24:81:b7:e2:bc:95:c0:a3:a1:62:5f:47:c3:30:d0:2a:
82:56:d8:3b:bb:bb:5f:a4:c4:84:71:df:88:1e:12:14:71:1c:
50:6d:71:8a:a6:94:14:b6:ab:ee:3f:15:14:25:81:57:27:69:
dd:06:b0:3b:7e:30:09:09:26:b2:71:27:8c:d1:5c:87:e2:59:
8a:63:75:22:e1:d5:79:2e:bd:3d:ad:85:8a:97:df:10:0c:4f:
bc:c1:01:7e:d2:68:a9:ea:8c:2e:e7:36:c0:44:36:5b:c9:39:
3d:7d:6b:e4:72:71:48:b3:00:2b:bc:8a:bd:f3:1b:81:24:f4:
d7:83:54:02:05:7b:dd:c2:f7:0f:98:e0:e1:bd:ad:fc:b0:50:
a1:01:ea:49:8f:b5:bb:2f:f3:ef:5d:bc:98:ce:dc:ba:5f:a4:
cf:cb:2d:9c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaC1T5s+BQ7SQlfRjX3OFpcFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwOTE4MTYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjQyM2I4MDY2YmE5ZDNiOTQyZGQ2NjJjZDZlZmQyOTYxYjVmZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QNnSgTrOjNjATuJN4xZUw1eOvNx
zT1g2N7F5SKeUVbVYi8FeML1qHQBh5gCsWH4/DZCW1Xwx/k4xnHAhDJ6/mZ60EP0
T5sl7Zw4FUAl1xxrfvw6F/IX51TdHrOSEGWrP3NDU5XfGf00fV8xAR5Zh4yW6+fB
xLCZ7m7Fnc8a5oUq3KcEtE2Uqt0cdTifUhmNB/pTtap5C22CL+t2o05J45W/ZYJG
34kqSPnr+mn8ACRJCuogHKN15B7aEqlLaIvbIDwUOL2uNdp9lQl2Of9a8sRr+geg
Lk5P1V6Iy5NwFDjc67GadwtdATO4+5d9ObVn8dhE47TlfV/9mYFA0MqibwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLJCO4Bmup07lC3WYs1u/Slhtf8vMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvc2tJN2dHYTZuVHVVTGRaaXpXNzlLV0cxX3k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQADY+QAwQA
DY/3MA0GCSqGSIb3DQEBCwUAA4IBAQBebwqkWu+9/eSM57oAkduGN/ohThgHcbz7
Ea0qLKywat/8DNOqDiH9tXA/OmmvdzHblGFegOjtgnNQGDoOz5nVVpxSQ088HoI7
E+gpuJ7IFjUIb88Gw1reN2vkcySBt+K8lcCjoWJfR8Mw0CqCVtg7u7tfpMSEcd+I
HhIUcRxQbXGKppQUtqvuPxUUJYFXJ2ndBrA7fjAJCSaycSeM0VyH4lmKY3Ui4dV5
Lr09rYWKl98QDE+8wQF+0mip6owu5zbARDZbyTk9fWvkcnFIswArvIq98xuBJPTX
g1QCBXvdwvcPmODhva38sFChAepJj7W7L/PvXbyYzty6X6TPyy2c
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:24:27 2026 by rpki-client