Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/H_2gpmhQDq_mVC_9vxdHEC4fi_0.roa
File: H_2gpmhQDq_mVC_9vxdHEC4fi_0.roa (raw, json)
Hash identifier: Nrh/eIR21YwjN8KyDugS1TAN+T52PR2ViNuGnzibQis=
Subject key identifier: 1F:FD:A0:A6:68:50:0E:AF:E6:54:2F:FD:BF:17:47:10:2E:1F:8B:FD
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 019EB7615D531B177A43C8A6A54C1DDA445A
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/H_2gpmhQDq_mVC_9vxdHEC4fi_0.roa
Signing time: Thu 11 Jun 2026 15:51:11 +0000
ROA not before: Thu 11 Jun 2026 15:51:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 131.222.203.0/24 maxlen: 24
131.222.206.0/24 maxlen: 24
131.222.222.0/24 maxlen: 24
153.56.176.0/21 maxlen: 24
153.56.185.0/24 maxlen: 24
153.56.186.0/23 maxlen: 24
153.56.188.0/22 maxlen: 24
153.56.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:61:5d:53:1b:17:7a:43:c8:a6:a5:4c:1d:da:44:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Jun 11 15:51:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ffda0a668500eafe6542ffdbf1747102e1f8bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:e9:03:1c:6f:57:ea:85:fc:fe:16:4b:81:
3f:8e:05:5f:b4:4b:02:e9:70:5b:3d:fd:b6:42:9f:
fc:85:8d:7d:40:55:75:dc:ed:3b:81:3b:94:44:34:
f8:3c:a0:02:f3:22:0c:a2:d4:4e:cb:86:cf:50:a9:
e0:6c:f9:8b:29:56:fe:4b:4c:5f:d2:63:33:d8:76:
64:23:4b:80:08:30:31:61:88:80:fc:ed:9f:df:e7:
1b:a4:9f:18:c4:34:48:cb:df:ec:26:33:6c:7a:e9:
9f:46:45:1d:a8:ae:f2:36:0c:76:99:ef:9d:a6:1a:
43:9c:c9:54:ff:81:0e:4e:8b:ea:1e:70:ae:e7:00:
5d:42:df:fb:39:d2:de:8f:31:44:f0:cf:d3:43:f6:
19:6c:50:7d:4e:26:d2:d3:1b:e1:b8:6e:2e:52:72:
b9:f6:85:ac:70:82:98:e3:49:92:db:05:5c:eb:9f:
7f:7e:a0:6f:6c:a1:82:17:49:2e:d1:22:5d:95:a2:
d6:86:4a:f2:dd:d0:c4:4c:42:b6:af:fb:d8:c7:ad:
5b:c3:e5:a2:cf:40:df:9e:cb:4e:51:4c:62:4b:31:
a9:5a:16:1e:e9:7b:f6:0d:77:de:6a:91:78:d5:6d:
bf:c9:f8:74:31:92:e9:ad:9d:ab:af:21:8d:c9:df:
23:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FD:A0:A6:68:50:0E:AF:E6:54:2F:FD:BF:17:47:10:2E:1F:8B:FD
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/H_2gpmhQDq_mVC_9vxdHEC4fi_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.203.0/24
131.222.206.0/24
131.222.222.0/24
153.56.176.0/21
153.56.185.0-153.56.191.255
153.56.208.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:8c:8c:51:65:bd:c9:27:2a:5c:39:2b:cd:ad:1b:92:73:3a:
2a:df:5e:f0:e3:cb:55:07:4a:29:e3:cb:5e:49:cf:60:75:f5:
7c:1c:f9:5f:7c:c4:d7:6b:40:ce:5a:ac:0a:54:a0:67:1e:ef:
4a:b3:6a:09:21:cd:86:26:80:dc:e9:de:f4:8a:40:7c:ed:84:
dd:57:65:2c:ce:01:66:ab:0a:71:f6:8a:8e:18:f3:dd:3c:2b:
6c:79:cf:5e:93:ff:f9:68:0d:e0:82:f5:1c:f6:0c:55:f6:2d:
97:ea:11:62:c7:c9:4c:f9:2f:09:c7:99:35:37:4d:c9:26:0f:
4d:d1:c8:74:25:47:86:ec:00:c2:29:b3:3d:af:56:f6:20:6e:
60:52:01:d7:12:55:4b:7b:fd:1f:6c:b4:4a:cc:3e:d0:29:00:
d4:3a:02:17:b0:44:3a:0d:67:d0:a7:5c:74:4c:1f:dc:16:e2:
11:2f:e2:a5:42:86:73:01:18:77:87:be:ab:87:6e:03:ce:72:
6e:78:6a:db:b7:35:1d:3a:f7:18:f0:09:5a:59:89:2d:6a:b8:
e8:d7:54:9b:27:d1:e8:0d:aa:d5:d2:a6:89:2b:cf:31:80:d4:
3a:8f:5e:2a:b6:2b:cf:4b:95:77:69:67:49:4a:2c:40:9a:96:
c7:09:9a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:58:42 2026 by rpki-client