Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/h5O81Nq_ZSvJena_a_ThPMfthY4.roa
File: h5O81Nq_ZSvJena_a_ThPMfthY4.roa (raw, json)
Hash identifier: g12zYlmsbIRu9Qfr6AGXpN6t5CHiJ7BAj4yabaMI6dQ=
Subject key identifier: 87:93:BC:D4:DA:BF:65:2B:C9:7A:76:BF:6B:F4:E1:3C:C7:ED:85:8E
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A00FCC62031985A2E7D14748B1F66A6BBA
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/h5O81Nq_ZSvJena_a_ThPMfthY4.roa
Signing time: Mon 17 Aug 2026 12:57:27 +0000
ROA not before: Mon 17 Aug 2026 12:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 131.222.203.0/24 maxlen: 24
131.222.206.0/24 maxlen: 24
131.222.222.0/24 maxlen: 24
153.56.212.0/22 maxlen: 24
153.56.216.0/22 maxlen: 24
153.56.220.0/23 maxlen: 24
153.56.223.0/24 maxlen: 24
153.56.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:cc:62:03:19:85:a2:e7:d1:47:48:b1:f6:6a:6b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Aug 17 12:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8793bcd4dabf652bc97a76bf6bf4e13cc7ed858e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:51:52:77:47:76:38:be:5e:04:99:03:84:
ba:49:03:e2:d9:56:a2:a6:18:a1:63:76:e7:3a:ab:
df:58:11:16:96:7e:41:c3:ce:10:05:e4:41:7b:d3:
2e:81:14:37:e3:5c:22:f5:60:b0:86:15:55:ca:82:
25:44:5e:ac:d8:66:f3:8a:f1:ed:f9:63:15:8f:24:
ce:cc:a0:80:f2:77:ec:85:0d:38:c3:d7:06:12:a6:
79:bc:63:3d:f4:98:49:13:32:d7:50:f0:2b:bb:c2:
cd:66:ce:f0:6f:5c:fa:98:ac:80:19:70:49:aa:92:
f8:e6:03:57:96:71:5f:2d:41:ea:c3:ff:85:17:7c:
58:21:38:93:de:69:cb:12:39:d7:57:18:89:63:08:
cb:80:76:b9:79:12:72:b1:cf:e9:dd:ed:79:2f:bf:
34:2a:7d:2b:50:ca:7b:e1:a3:48:fd:b8:3b:df:bf:
72:58:7a:53:dc:0e:cb:e1:3f:a3:10:4a:97:b6:fc:
e9:4b:16:6c:05:34:e3:fc:df:5c:cb:87:d8:9a:a0:
da:57:ef:69:98:07:98:56:c6:4c:92:5b:31:5c:6b:
3f:1d:de:f8:f0:1d:b8:09:73:47:18:3d:f9:0d:dc:
41:0e:f2:f2:c1:90:30:05:80:2d:57:a6:1b:9e:ba:
90:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:93:BC:D4:DA:BF:65:2B:C9:7A:76:BF:6B:F4:E1:3C:C7:ED:85:8E
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/h5O81Nq_ZSvJena_a_ThPMfthY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.203.0/24
131.222.206.0/24
131.222.222.0/24
153.56.212.0-153.56.221.255
153.56.223.0-153.56.255.255
Signature Algorithm: sha256WithRSAEncryption
c2:3e:86:ce:4a:63:66:5f:4f:74:2a:1d:92:b0:7e:25:6d:0f:
f0:85:c4:45:15:f2:76:2f:ff:3b:a5:14:27:de:49:07:f9:56:
27:d5:35:73:ae:75:44:cd:01:65:42:42:76:85:10:d1:a6:4a:
e2:23:5c:63:27:98:d5:ad:fb:3c:4a:57:9e:1b:d3:01:ff:e7:
5a:80:9c:1f:da:82:69:54:13:0b:3e:74:ce:de:01:00:41:3a:
d4:2f:b2:65:6c:da:c5:73:28:56:6c:f1:d6:5a:97:4d:12:7b:
6c:d0:b3:33:59:78:10:68:4f:42:0a:72:09:4b:57:02:9a:b5:
6a:49:ee:9e:3a:cd:a2:ab:01:75:f8:1c:b2:c5:f6:87:2a:b2:
e1:fb:37:e1:4c:7f:9a:f6:cf:96:77:19:df:09:a4:d8:b4:be:
1a:7b:2f:d8:a4:af:32:a4:88:73:65:41:57:68:39:c7:79:0a:
46:31:38:1d:41:bb:c7:75:39:74:e8:71:fe:40:65:0f:a6:a9:
8d:ef:d1:53:ba:4d:d6:64:12:69:20:f6:97:b7:b6:f7:4b:6f:
b2:51:aa:5f:8c:a4:ce:fa:d7:88:0e:83:02:1a:f1:d4:9b:51:
1e:ce:ef:68:84:8c:59:3a:24:a5:0b:79:d0:10:d4:b9:27:a5:
da:68:ed:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:15 2026 by rpki-client