Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/246t8tITYAyw5xkMmEUrB-DKjWQ.roa
File: 246t8tITYAyw5xkMmEUrB-DKjWQ.roa (raw, json)
Hash identifier: 131JbPsay5gnj8P2waHLD9VfGrgYXPjf59o+Gj4+vJM=
Subject key identifier: DB:8E:AD:F2:D2:13:60:0C:B0:E7:19:0C:98:45:2B:07:E0:CA:8D:64
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 019E8882C808C9BBBC2E220F36CCC6DB4022
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/246t8tITYAyw5xkMmEUrB-DKjWQ.roa
Signing time: Tue 02 Jun 2026 13:25:32 +0000
ROA not before: Tue 02 Jun 2026 13:25:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 131.222.203.0/24 maxlen: 24
131.222.206.0/24 maxlen: 24
131.222.222.0/24 maxlen: 24
153.56.176.0/20 maxlen: 24
153.56.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:82:c8:08:c9:bb:bc:2e:22:0f:36:cc:c6:db:40:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Jun 2 13:25:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db8eadf2d213600cb0e7190c98452b07e0ca8d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9b:bc:e1:02:82:5f:dd:e3:5c:cd:e1:5f:f0:
f6:f5:ee:4c:10:1c:3d:d3:03:b9:81:70:4b:9d:fb:
8a:64:eb:e5:f1:76:cf:7b:07:03:4e:75:d6:bf:39:
c0:ca:97:c8:b4:50:57:e3:b8:bc:35:12:82:b4:fd:
9a:91:b7:43:be:f6:32:71:d4:fc:66:b3:12:a6:d7:
71:56:1f:58:c1:79:49:3e:a6:37:44:44:26:fc:4b:
c6:f2:bf:32:2e:4f:5f:f5:ef:49:1f:01:dc:02:d3:
5a:6e:b6:b5:b8:d6:6a:bc:65:85:ad:e3:1c:c7:1d:
64:6d:3c:cf:f5:41:96:01:c1:44:75:19:bb:75:9b:
fb:04:18:f1:9c:c8:56:61:be:a3:71:c3:d1:39:60:
15:aa:02:2a:18:56:09:8d:83:8c:c5:db:e6:ee:83:
12:88:b1:3f:ec:77:fc:dc:95:ae:0b:ec:48:e1:59:
18:35:42:2f:9c:4d:55:20:62:3a:7d:ea:d4:d6:40:
9e:84:8f:2e:74:8f:02:5a:76:6e:a4:45:d1:0f:c8:
7b:96:06:41:5e:a7:53:55:5f:60:0c:67:95:53:b8:
06:09:2e:ed:24:91:96:ab:66:63:58:9b:44:07:bd:
36:09:13:e0:28:f8:b7:f5:13:17:ec:b1:bb:ec:00:
f8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8E:AD:F2:D2:13:60:0C:B0:E7:19:0C:98:45:2B:07:E0:CA:8D:64
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/246t8tITYAyw5xkMmEUrB-DKjWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.203.0/24
131.222.206.0/24
131.222.222.0/24
153.56.176.0/20
153.56.208.0/20
Signature Algorithm: sha256WithRSAEncryption
c5:30:e1:36:48:7b:93:d5:88:0c:62:6e:d3:37:5d:18:9c:aa:
10:ba:57:8e:cb:8f:8c:31:7f:de:4c:49:61:af:e0:eb:a7:1e:
80:80:b1:d9:aa:df:23:d8:78:73:66:3e:4a:ee:7a:69:c1:71:
96:02:3c:65:18:dd:05:78:1d:fd:ca:15:f1:a0:3e:44:8d:3e:
96:63:00:c8:20:ab:96:e3:85:94:b3:39:5e:3b:31:28:46:58:
09:5b:5a:43:87:6a:0f:11:17:56:a0:ac:b3:9c:84:6b:e2:5b:
d1:b6:ba:8b:b8:bb:74:07:fb:b2:c0:4b:1a:55:2b:21:e5:6d:
73:6c:80:61:3f:1d:0e:3c:7d:e7:3e:d0:9e:d4:58:cb:3f:df:
cb:73:d6:bd:36:f3:5c:19:6b:74:c1:6d:54:8c:be:fc:64:47:
d3:67:b4:71:e9:2d:40:80:2f:c9:43:8b:18:0f:a8:7a:e1:8f:
8a:8d:79:32:25:18:25:87:01:c3:6d:24:84:5d:f8:18:c9:aa:
d5:cf:e1:92:56:59:64:6e:18:61:9e:61:14:26:da:81:48:ed:
60:d6:cf:b8:29:39:03:a6:f5:2e:80:1b:38:f9:cf:8c:df:04:
1d:f4:cc:95:ba:2f:9b:5f:98:7c:7d:b3:8e:97:a4:a1:e2:44:
80:da:56:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:16:59 2026 by rpki-client