Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/0SZpO8hQhxghYG9qjQvc5aMflAw.roa
File: 0SZpO8hQhxghYG9qjQvc5aMflAw.roa (raw, json)
Hash identifier: n5vkBMK7PYoaa/v9cgCaKMBqHzU0fbw0xS+uWkoDyn8=
Subject key identifier: D1:26:69:3B:C8:50:87:18:21:60:6F:6A:8D:0B:DC:E5:A3:1F:94:0C
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A17D609C5CBFC14CC3FEFCF9F359ABDFC5
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/0SZpO8hQhxghYG9qjQvc5aMflAw.roa
Signing time: Tue 27 Oct 2026 12:40:45 +0000
ROA not before: Tue 27 Oct 2026 12:40:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 131.222.209.0/24 maxlen: 24
131.222.210.0/23 maxlen: 24
131.222.212.0/24 maxlen: 24
131.222.214.0/24 maxlen: 24
131.222.224.0/24 maxlen: 24
131.222.246.0/23 maxlen: 24
131.222.248.0/22 maxlen: 24
131.222.252.0/23 maxlen: 24
185.157.219.0/24 maxlen: 24
185.186.54.0/24 maxlen: 24
185.186.55.0/24 maxlen: 24
2a05:d740::/30 maxlen: 30
2a05:d744::/30 maxlen: 30
2a06:e900::/30 maxlen: 30
2a06:e904::/30 maxlen: 30
2a07:4a04::/30 maxlen: 30
2a0b:9800::/30 maxlen: 30
2a0b:9804::/30 maxlen: 30
2a0c:74c0::/30 maxlen: 30
2a0c:74c4::/30 maxlen: 30
2a0c:7540::/30 maxlen: 30
2a0c:7544::/30 maxlen: 30
2a0f:3380::/30 maxlen: 30
2a0f:3384::/30 maxlen: 30
2a0f:4580::/30 maxlen: 30
2a0f:4584::/30 maxlen: 30
2a0f:c784::/30 maxlen: 30
2a14:4080::/30 maxlen: 30
2a14:4084::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:60:9c:5c:bf:c1:4c:c3:fe:fc:f9:f3:59:ab:df:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Oct 27 12:40:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d126693bc850871821606f6a8d0bdce5a31f940c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4d:04:dc:98:38:79:1b:f9:76:39:5a:71:47:
1b:65:24:f7:ba:65:24:7b:21:ab:90:2d:f8:82:5f:
3c:9d:c6:d1:64:e7:a2:13:ef:79:e2:83:c6:c6:fc:
a5:16:12:8a:92:5d:28:04:10:78:8c:bb:92:17:66:
8d:88:c5:4a:de:ab:1c:06:c2:8b:ce:b7:c2:ed:e1:
d9:b0:f6:d0:f5:1a:c7:01:f2:5f:64:22:3e:c2:7e:
f8:81:ca:17:de:b3:06:ac:f7:eb:7a:81:f0:71:55:
e3:24:5d:b2:e1:71:c7:46:0b:e2:b8:c6:8c:f8:b1:
a6:82:59:d6:24:30:0b:eb:f8:f0:df:d3:cf:14:16:
47:db:c7:4a:13:b8:3a:2a:7b:2a:3c:b2:0e:bc:06:
4e:c0:bf:ee:0f:05:bc:89:88:03:3b:fc:09:18:c9:
7c:0f:03:ab:53:93:67:3e:36:a7:fc:a7:aa:f0:5c:
ce:c6:03:63:d4:bb:58:53:0b:4b:31:ed:90:19:53:
06:d6:77:9d:9a:18:5f:39:66:0d:4a:40:d9:16:b7:
c3:df:60:43:ae:5e:76:04:0f:72:4d:a0:b5:ad:be:
fd:74:76:f0:99:aa:2a:31:8c:b6:ce:11:e5:86:95:
bb:95:89:1d:44:fc:36:91:45:2e:46:5e:f8:b8:d2:
78:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:26:69:3B:C8:50:87:18:21:60:6F:6A:8D:0B:DC:E5:A3:1F:94:0C
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/0SZpO8hQhxghYG9qjQvc5aMflAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.209.0-131.222.212.255
131.222.214.0/24
131.222.224.0/24
131.222.246.0-131.222.253.255
185.157.219.0/24
185.186.54.0/23
IPv6:
2a05:d740::/29
2a06:e900::/29
2a07:4a04::/30
2a0b:9800::/29
2a0c:74c0::/29
2a0c:7540::/29
2a0f:3380::/29
2a0f:4580::/29
2a0f:c784::/30
2a14:4080::/29
Signature Algorithm: sha256WithRSAEncryption
75:de:08:51:42:49:e3:32:10:fe:eb:9a:41:b0:da:50:db:b7:
86:46:13:1a:d2:9e:75:95:1b:da:47:7c:f6:e6:a8:4f:40:da:
62:7c:10:dc:f7:b4:98:fc:c9:18:02:f4:55:09:9d:97:4a:f1:
14:10:be:c3:19:42:20:37:4b:6c:c0:f1:84:d1:d6:e8:d7:cd:
95:90:d4:f0:01:8e:f1:d4:92:dd:47:d2:95:c0:3e:63:74:f1:
59:91:4a:e4:ae:d3:35:f3:fb:24:ed:a2:7a:54:66:7f:fb:fc:
3b:5a:77:7d:19:83:b3:7d:90:50:c7:60:52:03:7e:ff:d3:8a:
5b:4d:34:5a:08:72:72:6c:8c:92:b2:cd:b1:aa:b6:9c:b6:ce:
d9:0f:50:36:29:f8:15:fa:45:93:70:17:d8:b1:0e:40:83:db:
2e:19:a8:0c:39:1d:8d:7e:60:73:43:dc:c4:e9:73:7a:f3:ba:
8b:97:4a:f2:a4:6b:28:63:72:1c:a3:96:58:28:7e:72:3b:63:
51:59:be:a4:9d:ab:d0:f0:98:25:6b:e5:d0:8d:84:4d:cd:a5:
19:55:97:ae:11:56:0b:63:82:41:33:f8:aa:2f:c3:4c:70:67:
78:4b:71:29:7f:c4:87:e2:a6:2a:57:f5:13:a0:86:7b:71:e9:
1a:1f:ec:47
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISAaF9YJxcv8FMw/78+fNZq9/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjYxMDI3MTI0MDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTI2NjkzYmM4NTA4NzE4MjE2MDZmNmE4ZDBiZGNlNWEzMWY5NDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU0E3Jg4eRv5djlacUcbZST3umUk
eyGrkC34gl88ncbRZOeiE+954oPGxvylFhKKkl0oBBB4jLuSF2aNiMVK3qscBsKL
zrfC7eHZsPbQ9RrHAfJfZCI+wn74gcoX3rMGrPfreoHwcVXjJF2y4XHHRgviuMaM
+LGmglnWJDAL6/jw39PPFBZH28dKE7g6KnsqPLIOvAZOwL/uDwW8iYgDO/wJGMl8
DwOrU5NnPjan/Keq8FzOxgNj1LtYUwtLMe2QGVMG1nedmhhfOWYNSkDZFrfD32BD
rl52BA9yTaC1rb79dHbwmaoqMYy2zhHlhpW7lYkdRPw2kUUuRl74uNJ4WwIDAQAB
o4ICiDCCAoQwHQYDVR0OBBYEFNEmaTvIUIcYIWBvao0L3OWjH5QMMB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvMFNacE84aFFoeGdoWUc5cWpRdmM1YU1mbEF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijA6BAIAATA0MAwDBACD
3tEDBACD3tQDBACD3tYDBACD3uAwDAMEAYPe9gMEAYPe/AMEALmd2wMEAbm6NjBM
BAIAAjBGAwUDKgXXQAMFAyoG6QADBQIqB0oEAwUDKguYAAMFAyoMdMADBQMqDHVA
AwUDKg8zgAMFAyoPRYADBQIqD8eEAwUDKhRAgDANBgkqhkiG9w0BAQsFAAOCAQEA
dd4IUUJJ4zIQ/uuaQbDaUNu3hkYTGtKedZUb2kd89uaoT0DaYnwQ3Pe0mPzJGAL0
VQmdl0rxFBC+wxlCIDdLbMDxhNHW6NfNlZDU8AGO8dSS3UfSlcA+Y3TxWZFK5K7T
NfP7JO2ielRmf/v8O1p3fRmDs32QUMdgUgN+/9OKW000WghycmyMkrLNsaq2nLbO
2Q9QNin4FfpFk3AX2LEOQIPbLhmoDDkdjX5gc0PcxOlzevO6i5dK8qRrKGNyHKOW
WCh+cjtjUVm+pJ2r0PCYJWvl0I2ETc2lGVWXrhFWC2OCQTP4qi/DTHBneEtxKX/E
h+KmKlf1E6CGe3HpGh/sRw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:23:56 2026 by rpki-client