Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/cLWx9mOmhkJFiHX0vOhviqK5jPg.roa
File: cLWx9mOmhkJFiHX0vOhviqK5jPg.roa (raw, json)
Hash identifier: pz0fm9ldHmFbMZZys/irFjXMA+EOl7vaFP6O4HvjCBs=
Subject key identifier: 70:B5:B1:F6:63:A6:86:42:45:88:75:F4:BC:E8:6F:8A:A2:B9:8C:F8
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019F43EB53F48EF6212E522FCD03CC91EFBE
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/cLWx9mOmhkJFiHX0vOhviqK5jPg.roa
Signing time: Wed 08 Jul 2026 22:48:43 +0000
ROA not before: Wed 08 Jul 2026 22:48:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51722
IP address blocks: 131.222.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:43:eb:53:f4:8e:f6:21:2e:52:2f:cd:03:cc:91:ef:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jul 8 22:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70b5b1f663a68642458875f4bce86f8aa2b98cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:e3:9c:bf:2b:c6:53:97:21:7f:37:61:ae:
de:75:f4:65:ae:2d:35:c6:48:df:76:6d:90:31:9e:
54:00:16:78:21:75:3b:72:ff:72:6a:15:28:05:17:
fd:9a:0e:05:21:95:19:c7:fe:6d:95:be:d0:04:9c:
ad:41:27:57:12:ad:ea:cd:b8:51:74:08:04:81:5b:
6e:99:85:3a:16:f2:b4:11:19:ff:04:6c:3c:df:93:
bb:bc:e6:5d:44:99:42:8f:db:c5:2e:33:92:17:e9:
6b:7b:03:a4:59:ce:cd:3b:c5:7f:4d:cc:1b:1a:09:
e0:a6:96:d4:38:e0:e8:d8:4d:95:67:f6:42:0e:d1:
df:39:e7:1b:34:0f:bb:33:49:9b:14:be:31:f1:22:
8f:5f:f9:b7:39:14:5c:64:a3:d1:27:32:aa:a7:d5:
b9:b0:8e:ac:8c:d2:90:ad:8a:71:6c:98:44:46:d2:
f3:3a:4f:c0:c3:f0:75:3f:7e:7a:67:ca:9b:59:d0:
b8:58:84:8c:78:cd:8b:c4:41:25:5c:c3:8b:93:af:
e6:a5:30:06:33:05:f5:a7:61:9f:ab:f4:32:29:23:
bc:9e:89:cc:3b:e2:d2:1f:d2:7d:d3:b9:0a:2b:71:
e4:c3:15:c4:02:31:dd:76:69:76:51:71:f7:dd:e4:
96:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B5:B1:F6:63:A6:86:42:45:88:75:F4:BC:E8:6F:8A:A2:B9:8C:F8
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/cLWx9mOmhkJFiHX0vOhviqK5jPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.220.0/24
Signature Algorithm: sha256WithRSAEncryption
81:8b:88:d3:b1:e1:12:3b:92:38:21:8a:9c:75:24:d1:de:bf:
69:92:20:db:74:d9:9e:aa:02:d4:b2:13:64:e7:e8:47:9b:fc:
0e:a5:22:b6:d5:1f:62:1d:23:f5:c1:bb:eb:c9:52:ed:3b:9d:
ff:0f:ca:3d:62:82:67:5d:9a:3b:a4:04:b2:0b:38:bb:76:c5:
04:18:c7:27:16:31:86:2a:04:55:b7:c5:ce:4e:61:4a:8e:e9:
48:09:73:97:24:c1:49:82:9a:8d:51:98:35:58:33:28:6d:17:
f4:d3:97:7f:be:71:a0:03:13:4c:18:79:16:0e:3f:85:52:f6:
66:13:ac:44:10:0e:10:d7:6a:d1:b9:3a:af:d8:67:e1:b4:59:
e9:a9:fa:d4:75:f2:18:65:d1:b1:d4:a5:b4:b1:68:b0:2c:bd:
ac:c2:1b:5d:72:36:ff:07:7e:e1:3a:cd:c9:73:3a:5f:03:9a:
ec:3a:82:72:33:10:a3:3a:58:18:96:b6:ae:5f:83:ba:4a:9c:
a6:a2:9c:db:a6:13:ec:b0:c1:b4:8a:5a:74:83:90:4a:40:19:
65:10:e4:44:f1:fa:3f:34:e3:ab:af:3c:00:d7:07:a8:62:c8:
1b:7c:cb:b1:8e:07:93:27:da:b3:10:af:58:1d:bf:b9:c4:94:
1e:91:05:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:35 2026 by rpki-client