Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Jqd9n-XZPEdiLUATrAO0UNi7xjA.roa
File: Jqd9n-XZPEdiLUATrAO0UNi7xjA.roa (raw, json)
Hash identifier: 9cuNi2UUB3uoW2G4GMhdugeWXWqlYW8/ZVXdji7vqm8=
Subject key identifier: 26:A7:7D:9F:E5:D9:3C:47:62:2D:40:13:AC:03:B4:50:D8:BB:C6:30
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 019E49E6B4B8BCCC897F85A6AC8BB336738F
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Jqd9n-XZPEdiLUATrAO0UNi7xjA.roa
Signing time: Thu 21 May 2026 09:38:36 +0000
ROA not before: Thu 21 May 2026 09:38:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207474
IP address blocks: 131.222.207.0/24 maxlen: 24
131.222.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:e6:b4:b8:bc:cc:89:7f:85:a6:ac:8b:b3:36:73:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: May 21 09:38:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26a77d9fe5d93c47622d4013ac03b450d8bbc630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e4:c1:63:48:f9:3a:be:3f:49:d7:d0:bf:89:
32:93:88:2d:fc:74:b0:c1:32:3e:d2:91:6d:37:52:
84:5e:0f:e2:2f:e3:c9:2b:8c:c1:46:47:b2:f0:ae:
a2:7a:2d:dc:8e:8a:56:82:f5:b7:59:14:3b:25:84:
0f:c7:ac:cd:ce:48:92:a3:64:fb:f9:98:c1:a6:ce:
21:de:30:d3:9a:bf:5c:31:b2:3f:de:e3:62:94:28:
a5:3c:ff:f5:fb:db:30:7a:6f:01:e5:7a:72:e9:5a:
cc:50:26:14:86:d2:9a:7f:b5:ae:71:ca:37:1f:a1:
fa:1d:b3:96:64:42:71:f0:05:d6:31:ce:ff:03:4b:
e6:ac:08:d2:df:7f:2e:a0:f2:fd:7b:d3:d6:6f:ce:
c4:e7:c3:b6:e7:90:33:bd:6d:2f:3c:ca:11:60:61:
b8:81:24:a4:8a:87:aa:3f:d8:46:56:07:a8:26:f8:
58:b7:46:a3:04:c0:4a:ed:58:1c:1d:ca:9d:38:45:
d1:6f:9f:0e:19:21:d9:84:f3:bb:a2:f6:a5:e6:06:
8d:89:af:aa:08:24:0e:6c:83:88:22:fb:3d:7b:72:
2a:db:26:61:d3:02:2e:f6:d7:2b:0a:b9:35:c2:3c:
e8:ad:41:e1:c8:58:e0:a5:a2:1e:06:6d:0b:cd:70:
e0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A7:7D:9F:E5:D9:3C:47:62:2D:40:13:AC:03:B4:50:D8:BB:C6:30
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Jqd9n-XZPEdiLUATrAO0UNi7xjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.207.0/24
131.222.223.0/24
Signature Algorithm: sha256WithRSAEncryption
09:e6:62:c9:60:fb:e5:9a:c4:53:07:ef:13:96:3a:0e:aa:c1:
a7:2a:9e:4a:df:f4:03:c8:be:18:5a:7b:39:f9:0f:a7:4f:7c:
50:3f:be:0e:65:cd:ac:15:b4:c5:02:1e:50:7c:02:13:9e:f8:
d3:86:cd:a5:ea:da:82:97:89:91:e2:c9:00:61:1e:34:ae:c5:
29:42:5f:c8:3d:c3:1a:61:63:6e:a6:5a:37:35:11:d9:63:ce:
bb:64:eb:c2:a4:7e:7e:fe:35:fe:8a:da:34:d2:b8:a7:aa:c8:
e3:39:e8:01:e1:14:85:40:3d:db:46:1a:ab:46:ab:d3:f7:0f:
16:88:49:8d:c4:2d:b0:b4:fd:ad:e4:79:b9:be:dc:b2:38:40:
3f:a2:26:f4:4e:dd:e9:a7:11:b9:a4:ae:f6:33:fb:db:60:3d:
43:b8:2c:14:82:d8:db:53:ac:9b:4e:71:61:23:a4:c5:4e:db:
ea:db:28:36:ec:b3:3f:0f:7d:0a:fe:17:4e:2b:f2:88:e5:6e:
d8:aa:1f:b5:b6:e4:2e:15:5d:37:51:67:f7:65:be:e6:1d:14:
65:72:3b:83:24:0e:50:c4:fd:d1:54:d2:47:e9:e1:c7:83:75:
cd:92:16:b2:e8:32:21:5e:86:27:2e:69:6c:c4:30:65:29:8d:
99:5a:b9:f6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ5J5rS4vMyJf4WmrIuzNnOPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4
ZjMzYTcwHhcNMjYwNTIxMDkzODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmE3N2Q5ZmU1ZDkzYzQ3NjIyZDQwMTNhYzAzYjQ1MGQ4YmJjNjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeTBY0j5Or4/SdfQv4kyk4gt/HSw
wTI+0pFtN1KEXg/iL+PJK4zBRkey8K6iei3cjopWgvW3WRQ7JYQPx6zNzkiSo2T7
+ZjBps4h3jDTmr9cMbI/3uNilCilPP/1+9swem8B5Xpy6VrMUCYUhtKaf7Wucco3
H6H6HbOWZEJx8AXWMc7/A0vmrAjS338uoPL9e9PWb87E58O255AzvW0vPMoRYGG4
gSSkioeqP9hGVgeoJvhYt0ajBMBK7VgcHcqdOEXRb58OGSHZhPO7oval5gaNia+q
CCQObIOIIvs9e3Iq2yZh0wIu9tcrCrk1wjzorUHhyFjgpaIeBm0LzXDgVQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCanfZ/l2TxHYi1AE6wDtFDYu8YwMB8GA1UdIwQY
MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt
MmI3OGIxOWI1YTg3LzEvSnFkOW4tWFpQRWRpTFVBVHJBTzBVTmk3eGpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3
LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAg97PAwQA
g97fMA0GCSqGSIb3DQEBCwUAA4IBAQAJ5mLJYPvlmsRTB+8TljoOqsGnKp5K3/QD
yL4YWns5+Q+nT3xQP74OZc2sFbTFAh5QfAITnvjThs2l6tqCl4mR4skAYR40rsUp
Ql/IPcMaYWNuplo3NRHZY867ZOvCpH5+/jX+ito00rinqsjjOegB4RSFQD3bRhqr
RqvT9w8WiEmNxC2wtP2t5Hm5vtyyOEA/oib0Tt3ppxG5pK72M/vbYD1DuCwUgtjb
U6ybTnFhI6TFTtvq2yg27LM/D30K/hdOK/KI5W7Yqh+1tuQuFV03UWf3Zb7mHRRl
cjuDJA5QxP3RVNJH6eHHg3XNkhay6DIhXoYnLmlsxDBlKY2ZWrn2
-----END CERTIFICATE-----
Generated at Thu Jun 4 05:17:04 2026 by rpki-client