Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/0IDKHfIgYVe1ti4NJVSLTuZUGyk.roa
File: 0IDKHfIgYVe1ti4NJVSLTuZUGyk.roa (raw, json)
Hash identifier: LYo58+8aeprpuJlm1zTQdxdMT7WLCg/yDQ7s78PDZPM=
Subject key identifier: D0:80:CA:1D:F2:20:61:57:B5:B6:2E:0D:25:54:8B:4E:E6:54:1B:29
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A17D7D782EEA5C357D7DA90628A0021767
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/0IDKHfIgYVe1ti4NJVSLTuZUGyk.roa
Signing time: Tue 27 Oct 2026 13:12:17 +0000
ROA not before: Tue 27 Oct 2026 13:12:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 131.222.203.0/24 maxlen: 24
131.222.206.0/24 maxlen: 24
131.222.222.0/24 maxlen: 24
153.56.216.0/22 maxlen: 24
153.56.220.0/24 maxlen: 24
153.56.223.0/24 maxlen: 24
153.56.228.0/22 maxlen: 24
153.56.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:7d:78:2e:ea:5c:35:7d:7d:a9:06:28:a0:02:17:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Oct 27 13:12:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d080ca1df2206157b5b62e0d25548b4ee6541b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:82:3d:40:64:22:dc:4c:a3:f2:23:d2:e9:
de:a4:96:58:15:44:e5:85:e9:3a:a3:4d:cd:a2:da:
95:2e:9b:2b:30:78:87:ce:43:77:10:8a:07:f9:59:
fa:ac:de:81:37:79:60:35:04:85:80:34:1b:4b:10:
b8:26:57:fe:17:a3:ae:0d:bc:2a:84:02:26:23:6f:
cb:10:68:1b:4d:ff:91:1a:bc:1b:72:2e:a6:42:96:
78:f7:a2:2e:59:2c:eb:84:71:e1:0c:fc:79:dc:34:
fe:99:52:f0:08:df:75:2b:c8:8d:4d:d8:71:af:66:
99:f8:48:1e:24:1a:f4:55:ac:e8:85:ee:67:5a:76:
18:1b:dc:9d:14:15:23:37:54:10:10:14:35:2e:21:
4c:46:cc:79:95:69:ea:86:35:a3:7e:30:a1:25:7a:
57:b3:bd:f2:fa:11:db:1f:2b:d8:f0:3b:fa:f3:85:
71:03:dd:ab:97:f0:4f:17:30:c5:c8:8e:99:88:90:
9c:65:63:c8:fe:2f:14:60:0d:94:37:90:3c:fc:a2:
a1:97:67:0e:e9:b8:c6:b0:4a:b7:ce:1e:c5:df:f1:
1d:14:02:7e:62:00:58:1b:51:88:98:af:4e:98:71:
96:90:a7:40:db:89:b7:b5:02:e3:cd:c6:83:46:df:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:80:CA:1D:F2:20:61:57:B5:B6:2E:0D:25:54:8B:4E:E6:54:1B:29
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/0IDKHfIgYVe1ti4NJVSLTuZUGyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.203.0/24
131.222.206.0/24
131.222.222.0/24
153.56.216.0-153.56.220.255
153.56.223.0/24
153.56.228.0-153.56.239.255
Signature Algorithm: sha256WithRSAEncryption
12:cb:48:90:98:0d:69:78:d3:4e:94:aa:34:dc:51:bf:18:24:
f6:e2:8e:6c:49:86:ae:a2:c9:0b:b2:e8:10:ae:f7:e4:03:de:
35:a7:d7:7f:10:f1:7c:58:fa:29:59:b4:4d:d2:7b:40:e4:f9:
37:06:6e:38:91:59:55:b1:6d:4b:6b:b6:09:f6:34:58:b1:70:
46:d1:e3:d0:2b:24:c0:c3:59:6c:85:d9:9c:fa:81:3c:d8:db:
2e:36:e2:92:f7:c6:44:c8:96:38:20:00:1c:ce:c7:74:b8:39:
50:f0:f0:40:c4:7f:9f:ec:6f:c1:eb:1f:58:fe:70:0c:ca:44:
1b:97:3e:a9:2f:a4:e2:9a:84:d2:7d:9a:74:11:db:f0:a4:c7:
a5:e0:05:92:61:1a:3c:93:25:48:bb:47:20:2c:fa:0d:04:96:
f3:3e:19:07:e9:35:c2:b7:a2:9d:34:65:d7:c5:5a:6a:50:a3:
0e:24:ab:39:a9:3f:59:3c:73:c0:be:a6:8d:fb:18:42:0b:6f:
67:1f:c7:d6:73:89:cf:63:a6:84:21:dc:e8:00:01:18:1e:2c:
74:2c:ab:ed:20:37:48:37:f7:87:60:8e:0c:ac:ed:5e:dd:20:
37:73:7c:f7:99:45:42:6d:d4:fb:47:fe:76:ff:bd:ec:3f:f3:
83:89:0a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:02:54 2026 by rpki-client