Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/M2QX6dAVS5wwzzWZwpLXly9elxA.roa
File: M2QX6dAVS5wwzzWZwpLXly9elxA.roa (raw, json)
Hash identifier: bvmp7xgEGFSuKnfY+ZgLpQZkSldpNhB9a4dh8SjeeL4=
Subject key identifier: 33:64:17:E9:D0:15:4B:9C:30:CF:35:99:C2:92:D7:97:2F:5E:97:10
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 019F5A708B92E23217380F375683B340677F
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/M2QX6dAVS5wwzzWZwpLXly9elxA.roa
Signing time: Mon 13 Jul 2026 07:45:52 +0000
ROA not before: Mon 13 Jul 2026 07:45:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 131.222.203.0/24 maxlen: 24
131.222.206.0/24 maxlen: 24
131.222.222.0/24 maxlen: 24
153.56.176.0/21 maxlen: 24
153.56.208.0/21 maxlen: 24
153.56.216.0/22 maxlen: 24
153.56.220.0/23 maxlen: 24
153.56.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:70:8b:92:e2:32:17:38:0f:37:56:83:b3:40:67:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Jul 13 07:45:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=336417e9d0154b9c30cf3599c292d7972f5e9710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:e0:45:66:99:db:e4:7a:c4:1d:2c:a5:ba:
0c:46:31:95:7b:11:ac:d1:85:47:4a:f8:4e:5e:7c:
e2:bb:6d:da:eb:12:93:b4:c3:48:1a:f6:38:d2:19:
f4:53:12:4c:f9:90:84:e2:aa:7b:4d:98:c8:ba:b0:
28:a7:56:36:0f:81:c7:b9:a8:8d:3f:ac:8b:31:4b:
2c:84:0e:d9:2d:7d:74:1f:c3:d6:a5:96:53:10:76:
36:1a:c2:fd:be:fe:8e:8a:75:db:c0:00:36:dd:54:
34:9e:3b:c9:11:97:08:dd:1c:9b:35:02:59:fe:83:
8e:10:7e:71:fd:ee:58:d4:81:5f:6c:54:5f:5e:74:
22:c5:b6:c9:41:44:e2:31:85:97:58:da:2a:61:d6:
f9:ca:2b:41:73:df:5a:6a:0f:d9:05:66:fe:83:65:
d1:0a:65:dc:56:6f:e5:54:33:50:58:5a:16:b1:e5:
57:e2:3e:56:c0:55:23:e4:67:a0:6a:29:de:9a:86:
ef:87:81:ee:2a:12:53:0a:1a:7f:08:da:f0:d4:dd:
e1:9e:e1:de:1e:0d:e7:54:d0:21:5f:f4:c5:a7:bd:
17:e8:1a:93:89:86:92:68:89:71:78:80:84:27:8a:
bd:c0:7b:4b:da:3d:4f:d7:30:48:7b:3f:e1:2e:d4:
bf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:64:17:E9:D0:15:4B:9C:30:CF:35:99:C2:92:D7:97:2F:5E:97:10
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/M2QX6dAVS5wwzzWZwpLXly9elxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.203.0/24
131.222.206.0/24
131.222.222.0/24
153.56.176.0/21
153.56.208.0-153.56.221.255
153.56.223.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:c9:c4:a0:4a:8e:97:35:2c:c1:e7:96:f3:d3:2c:b5:f1:af:
27:aa:d0:df:25:65:25:91:f8:81:f8:0b:4f:14:50:fa:30:b5:
23:46:3a:e1:64:b3:b9:94:e6:c3:71:60:8a:d3:9e:74:1e:83:
22:8d:e3:92:b2:c2:3e:aa:9a:2e:be:2a:36:a6:7c:29:1d:1d:
cc:38:31:a1:4e:72:84:c4:a5:16:e2:4a:0c:cc:bf:80:19:0d:
d5:0c:00:05:68:cc:86:ba:dd:5f:10:98:22:00:68:7e:ab:d5:
33:05:1d:18:f5:94:14:77:62:48:86:14:de:f8:42:c8:be:f5:
ce:7c:f7:3d:e2:63:6d:37:6a:ca:97:d8:9b:3a:2f:b8:51:19:
d5:89:4a:cc:a9:cb:cb:fb:ce:47:80:9f:29:12:91:b1:7d:25:
ba:f1:ff:1e:bc:56:fe:36:98:d8:ec:94:af:8a:5e:0f:ab:11:
2c:a2:10:70:e8:a6:c7:16:de:a3:18:ed:7c:5a:93:7a:49:41:
07:13:a1:73:d0:aa:1f:ea:c6:aa:08:be:ff:2b:5f:a0:2c:f6:
fa:72:3f:6c:b1:da:95:62:cf:18:22:48:59:40:a6:60:c2:01:
e4:a4:f3:15:25:00:35:8b:d0:f9:e6:81:35:ef:72:47:b7:62:
21:92:1e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:26 2026 by rpki-client