Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/laeIdUFf3eVNy5ZEtw4IzOFTrTg.roa
File: laeIdUFf3eVNy5ZEtw4IzOFTrTg.roa (raw, json)
Hash identifier: GOGW4/W6989pRX2ITbpQ9Xgw0v9K8LAoNgND2P0L6Sg=
Subject key identifier: 95:A7:88:75:41:5F:DD:E5:4D:CB:96:44:B7:0E:08:CC:E1:53:AD:38
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A15D3473FE9300F4F5976F505513AC01A3
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/laeIdUFf3eVNy5ZEtw4IzOFTrTg.roa
Signing time: Wed 21 Oct 2026 06:44:41 +0000
ROA not before: Wed 21 Oct 2026 06:44:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 131.222.203.0/24 maxlen: 24
131.222.206.0/24 maxlen: 24
131.222.222.0/24 maxlen: 24
153.56.216.0/22 maxlen: 24
153.56.220.0/24 maxlen: 24
153.56.223.0/24 maxlen: 24
153.56.224.0/23 maxlen: 24
153.56.228.0/22 maxlen: 24
153.56.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:34:73:fe:93:00:f4:f5:97:6f:50:55:13:ac:01:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Oct 21 06:44:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95a78875415fdde54dcb9644b70e08cce153ad38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1e:82:20:9a:87:7a:91:c3:8a:c5:50:5a:8f:
c5:d1:0e:00:cd:45:c2:7c:ff:a4:55:27:7c:8e:1e:
47:65:9a:20:26:eb:db:e3:c2:91:f9:f5:0e:90:90:
04:04:01:4a:3d:bd:42:04:5c:03:2f:5e:05:d0:80:
e0:99:57:7d:5a:ef:97:17:a8:13:4f:6d:bf:e5:70:
b0:b0:9f:97:46:15:f2:b3:6e:6b:24:1e:1c:b1:06:
92:50:8a:af:a4:35:0a:e1:04:93:9f:6d:c3:df:fa:
90:da:ce:cb:3b:71:fa:97:1f:39:a9:8f:3b:73:61:
76:bf:bd:59:a7:25:d0:08:91:1c:c4:ba:a9:59:de:
a2:bf:ea:a1:4f:bb:08:49:41:db:71:75:88:b6:41:
42:66:1e:f1:af:4d:91:28:7b:3b:a3:c1:4e:24:92:
fa:4b:5e:ef:ac:b3:14:21:aa:03:89:af:4a:6a:48:
76:6b:e8:ce:f2:03:90:ce:b6:2f:87:a7:84:9c:65:
0b:2e:10:01:0b:8f:da:6d:19:82:51:65:9b:dd:bc:
3a:91:53:75:fe:c1:5a:3d:22:a3:a9:a4:9a:93:47:
69:fb:27:3d:81:71:92:3e:dc:c0:a7:32:12:70:97:
bf:0b:11:fd:d6:b2:82:5b:a8:db:98:06:32:e7:d0:
3a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A7:88:75:41:5F:DD:E5:4D:CB:96:44:B7:0E:08:CC:E1:53:AD:38
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/laeIdUFf3eVNy5ZEtw4IzOFTrTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.203.0/24
131.222.206.0/24
131.222.222.0/24
153.56.216.0-153.56.220.255
153.56.223.0-153.56.225.255
153.56.228.0-153.56.239.255
Signature Algorithm: sha256WithRSAEncryption
33:27:3b:e9:6c:35:6f:89:28:3b:06:75:15:10:b7:28:39:81:
f2:cf:82:9d:33:e5:ec:73:db:24:8d:ad:50:96:f2:36:c5:7d:
d6:66:f8:5b:34:2d:c3:c4:93:b6:f2:ea:8b:25:21:f1:1c:d8:
d4:ad:59:89:e8:94:d1:cc:ab:21:80:85:ef:08:fc:55:da:3c:
8c:23:c5:e9:d4:70:64:e2:70:c8:3b:1c:74:e2:bf:e5:c8:6f:
c4:4b:42:fd:e4:1d:89:83:53:3c:6c:9b:36:27:8f:d1:0a:15:
fb:b0:20:7d:9e:f2:b9:a2:1a:3d:a4:24:12:6e:9f:07:3d:f3:
8c:40:69:8d:ed:0c:c0:ba:88:8a:c9:57:e9:1a:c7:27:ef:ec:
e5:37:46:cb:7a:8f:51:de:8d:f0:b0:25:0f:3b:41:ec:26:04:
8b:45:8b:1f:ca:a5:20:57:98:e0:87:7d:a7:bf:df:98:1b:c4:
49:f8:8c:63:99:ea:41:bd:a8:d2:58:98:4d:f6:80:a0:a7:d2:
c0:bc:a4:40:f5:db:27:98:26:d4:84:f6:84:6b:e5:eb:e5:57:
c0:6d:a0:57:63:d8:c4:b8:65:1c:2f:5b:77:e8:c1:bf:60:bb:
d4:eb:01:d3:b3:2a:95:2c:52:5d:31:dd:b5:68:a6:fa:36:58:
b7:2a:1e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:11:34 2026 by rpki-client