Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Q8CsEAtSTanzJY3I7fvSE-uMeuU.roa
File: Q8CsEAtSTanzJY3I7fvSE-uMeuU.roa (raw, json)
Hash identifier: AbxzldFhMYObOkio0+jbvaPCEAk722DareoqH/SdcdU=
Subject key identifier: 43:C0:AC:10:0B:52:4D:A9:F3:25:8D:C8:ED:FB:D2:13:EB:8C:7A:E5
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A0625D5B4FD08CC430F31C82CD5FE02A64
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Q8CsEAtSTanzJY3I7fvSE-uMeuU.roa
Signing time: Wed 02 Sep 2026 13:44:40 +0000
ROA not before: Wed 02 Sep 2026 13:44:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 131.222.209.0/24 maxlen: 24
131.222.210.0/23 maxlen: 24
131.222.212.0/24 maxlen: 24
131.222.214.0/24 maxlen: 24
131.222.224.0/24 maxlen: 24
131.222.246.0/23 maxlen: 24
131.222.248.0/22 maxlen: 24
131.222.252.0/23 maxlen: 24
185.157.219.0/24 maxlen: 24
185.186.54.0/24 maxlen: 24
2a05:d740::/30 maxlen: 30
2a05:d744::/30 maxlen: 30
2a06:e900::/30 maxlen: 30
2a06:e904::/30 maxlen: 30
2a07:4a04::/30 maxlen: 30
2a0b:9800::/30 maxlen: 30
2a0b:9804::/30 maxlen: 30
2a0c:74c0::/30 maxlen: 30
2a0c:74c4::/30 maxlen: 30
2a0c:7540::/30 maxlen: 30
2a0c:7544::/30 maxlen: 30
2a0f:3380::/30 maxlen: 30
2a0f:3384::/30 maxlen: 30
2a0f:4580::/30 maxlen: 30
2a0f:4584::/30 maxlen: 30
2a0f:c784::/30 maxlen: 30
2a14:4080::/30 maxlen: 30
2a14:4084::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:5d:5b:4f:d0:8c:c4:30:f3:1c:82:cd:5f:e0:2a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Sep 2 13:44:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43c0ac100b524da9f3258dc8edfbd213eb8c7ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:61:88:ff:61:5e:73:eb:4d:d1:07:01:97:
dd:48:73:59:85:c1:3b:35:e4:fa:a3:68:98:da:77:
f7:96:2f:9c:cc:c8:d8:7a:58:a8:5c:f3:1c:f6:fd:
bd:1f:b4:31:45:13:ac:af:a1:65:96:d5:4a:3f:29:
52:94:6e:eb:40:f6:eb:f2:4b:58:71:45:10:88:34:
81:86:fa:97:65:eb:fe:fc:9f:93:9b:7c:df:ff:b5:
aa:fa:f2:dd:fa:f2:08:8c:0e:e3:6a:59:1f:ee:fb:
0b:ce:4f:57:37:bf:ea:08:42:34:6a:f2:8f:21:e4:
ca:89:2c:00:66:f4:2f:62:4d:ea:a4:6e:85:d2:21:
11:b8:77:c8:d9:2f:87:1a:af:90:49:a9:7a:c2:19:
94:f8:c2:4b:91:54:b7:de:5f:61:04:90:31:fe:e9:
ed:42:29:7f:c7:58:a2:15:d6:7b:47:3a:19:51:a3:
31:5b:26:98:8d:43:ba:fc:c1:24:a4:f1:cd:66:eb:
3b:16:35:87:d2:dd:d9:49:40:f4:1e:5a:cf:67:8b:
35:70:29:0f:64:cd:19:50:9b:58:2b:11:13:0d:7a:
f8:1d:29:18:49:70:ca:b7:97:fd:38:c5:72:c1:a1:
d1:ec:25:34:19:7d:85:06:f9:6b:4e:db:18:b2:62:
73:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C0:AC:10:0B:52:4D:A9:F3:25:8D:C8:ED:FB:D2:13:EB:8C:7A:E5
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Q8CsEAtSTanzJY3I7fvSE-uMeuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.209.0-131.222.212.255
131.222.214.0/24
131.222.224.0/24
131.222.246.0-131.222.253.255
185.157.219.0/24
185.186.54.0/24
IPv6:
2a05:d740::/29
2a06:e900::/29
2a07:4a04::/30
2a0b:9800::/29
2a0c:74c0::/29
2a0c:7540::/29
2a0f:3380::/29
2a0f:4580::/29
2a0f:c784::/30
2a14:4080::/29
Signature Algorithm: sha256WithRSAEncryption
46:90:da:d0:00:f2:8d:81:85:7b:e0:bb:05:a1:cd:b5:a5:bb:
2e:2f:7b:4f:a2:8b:10:3f:47:13:a3:a2:c2:fe:41:76:f8:6f:
05:a4:ee:6e:5e:49:1c:34:a1:da:16:85:9c:9d:7f:38:a3:f6:
fa:0a:13:45:86:18:78:d2:b3:d2:08:a3:14:db:92:d3:3d:e7:
e8:14:19:2c:fa:fb:e7:df:01:12:08:d5:58:5a:86:de:1a:c9:
b1:95:31:41:8e:d7:e9:9d:ae:15:37:39:e1:ab:35:55:72:e6:
b2:08:4b:77:0d:3c:28:27:06:0d:97:6c:c6:0c:69:30:53:c8:
20:ed:ba:5d:e2:0b:ac:d7:95:f8:27:82:71:64:d1:0b:44:09:
dd:4b:e8:8e:f7:90:dc:77:d9:ac:0a:72:5c:44:25:77:33:9b:
4d:19:f0:41:4b:24:d5:19:49:d8:a6:ea:b5:b7:84:72:5b:af:
ff:ac:e1:93:4d:79:32:cc:48:77:57:1b:43:a2:cf:91:04:e1:
5e:95:e8:e4:69:1d:b3:28:e5:cc:45:35:88:7c:97:fb:65:d8:
ff:61:7b:e5:05:41:f2:92:bb:bc:14:4f:6c:50:42:c7:1d:75:
90:73:11:88:42:8e:8b:00:31:62:02:c8:40:d6:4d:e0:de:d3:
c3:8b:39:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 19:10:34 2026 by rpki-client