Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/fBTFHnUcRAtyGAdRJfnv6GUqyj8.roa
File: fBTFHnUcRAtyGAdRJfnv6GUqyj8.roa (raw, json)
Hash identifier: auv9a0uJJR7wurJYNrtnpCQbXoxt1QEVkQ8kZNtsP2o=
Subject key identifier: 7C:14:C5:1E:75:1C:44:0B:72:18:07:51:25:F9:EF:E8:65:2A:CA:3F
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019CDCBAB187E2C58C4C8E4939489AEEB4E7
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/fBTFHnUcRAtyGAdRJfnv6GUqyj8.roa
Signing time: Wed 11 Mar 2026 11:49:08 +0000
ROA not before: Wed 11 Mar 2026 11:49:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214095
IP address blocks: 131.222.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:ba:b1:87:e2:c5:8c:4c:8e:49:39:48:9a:ee:b4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Mar 11 11:49:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c14c51e751c440b7218075125f9efe8652aca3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3b:2a:20:51:ed:48:63:af:17:81:02:37:93:
01:5e:79:30:ed:67:6e:99:6d:04:c7:c5:6b:49:7f:
05:dc:5c:39:99:e6:e0:b3:73:d8:5c:f1:42:3c:8e:
22:1c:06:14:fd:d9:70:4c:bd:16:9f:b2:0b:99:db:
e7:02:6e:e8:af:61:bc:27:52:76:20:9e:e5:6e:43:
0d:1e:ca:7b:82:f5:96:d2:de:6c:7a:6b:8d:b1:ce:
95:0a:20:7c:46:1b:18:73:a7:d5:37:49:e8:df:d1:
76:0b:4f:63:09:aa:30:32:08:a5:f6:7c:9f:8d:f5:
9c:2e:cc:17:ec:4b:93:c3:0f:43:76:71:9f:b7:5a:
e1:62:90:17:0a:7d:3f:1f:71:b5:3e:3a:71:54:28:
3d:3a:6a:8b:bf:db:b6:e9:84:a3:f1:a4:3e:80:42:
a0:4e:10:59:2e:2b:de:97:b6:9f:c9:0c:b9:75:d8:
43:a0:a7:fd:2d:e7:d9:da:91:ac:a5:ff:83:02:23:
86:e5:29:b4:f5:e8:61:45:80:29:0b:cf:a8:19:4d:
9a:bb:96:b8:8b:f0:6e:c9:49:ba:a3:ba:73:a4:00:
0a:12:43:c8:e5:7f:ff:fb:4b:22:c3:c4:8a:45:ba:
fa:43:f2:91:dd:47:c6:b8:8a:2e:fc:4d:e4:b9:4f:
80:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:14:C5:1E:75:1C:44:0B:72:18:07:51:25:F9:EF:E8:65:2A:CA:3F
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/fBTFHnUcRAtyGAdRJfnv6GUqyj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.244.0/24
Signature Algorithm: sha256WithRSAEncryption
74:6a:cb:a4:63:f3:fd:5a:6a:90:e4:55:00:6f:c5:39:e1:0e:
31:2e:77:cc:5f:bc:d2:fd:19:8d:6d:87:87:9b:bf:4f:01:b2:
8a:97:aa:00:81:c1:4a:94:32:7f:7a:9a:12:2a:ff:15:70:8a:
19:fd:fd:8a:32:67:20:dc:bd:52:ff:3f:fb:da:bc:0c:14:08:
62:1e:46:26:6b:7e:08:62:3e:55:9d:64:86:2c:78:e8:29:db:
82:b0:50:83:23:5f:ab:69:50:23:4f:6c:44:90:52:4b:42:c7:
da:d4:54:30:34:53:bd:23:63:20:76:e8:5c:d9:03:7b:d5:15:
20:c5:02:28:7e:95:19:2a:4d:11:02:a8:7a:e1:0b:ff:93:bb:
75:f5:dd:f0:cf:4f:2e:34:ff:34:dc:15:a7:67:c2:d2:d2:73:
b8:26:4f:a4:b0:b2:6d:d6:f3:d5:2d:a2:ee:7c:57:20:e6:1e:
fb:b3:bd:81:4e:14:76:12:c5:70:8c:72:1f:ee:66:e2:e1:b3:
f4:98:0d:7b:e2:2d:ff:d7:7c:28:e1:32:28:b1:93:4b:27:92:
0c:f4:fd:a1:7c:25:7f:0b:60:cc:7b:87:74:8f:f1:c7:b2:0e:
be:a4:f7:c2:4d:72:d6:f0:ae:70:6b:3c:03:64:59:f7:14:ce:
c9:4e:d8:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZzcurGH4sWMTI5JOUia7rTnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjYwMzExMTE0OTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzE0YzUxZTc1MWM0NDBiNzIxODA3NTEyNWY5ZWZlODY1MmFjYTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTsqIFHtSGOvF4ECN5MBXnkw7Wdu
mW0Ex8VrSX8F3Fw5mebgs3PYXPFCPI4iHAYU/dlwTL0Wn7ILmdvnAm7or2G8J1J2
IJ7lbkMNHsp7gvWW0t5semuNsc6VCiB8RhsYc6fVN0no39F2C09jCaowMgil9nyf
jfWcLswX7EuTww9DdnGft1rhYpAXCn0/H3G1PjpxVCg9OmqLv9u26YSj8aQ+gEKg
ThBZLivel7afyQy5ddhDoKf9LefZ2pGspf+DAiOG5Sm09ehhRYApC8+oGU2au5a4
i/BuyUm6o7pzpAAKEkPI5X//+0siw8SKRbr6Q/KR3UfGuIou/E3kuU+ASwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHwUxR51HEQLchgHUSX57+hlKso/MB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvZkJURkhuVWNSQXR5R0FkUkpmbnY2R1VxeWo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg970MA0G
CSqGSIb3DQEBCwUAA4IBAQB0asukY/P9WmqQ5FUAb8U54Q4xLnfMX7zS/RmNbYeH
m79PAbKKl6oAgcFKlDJ/epoSKv8VcIoZ/f2KMmcg3L1S/z/72rwMFAhiHkYma34I
Yj5VnWSGLHjoKduCsFCDI1+raVAjT2xEkFJLQsfa1FQwNFO9I2Mgduhc2QN71RUg
xQIofpUZKk0RAqh64Qv/k7t19d3wz08uNP803BWnZ8LS0nO4Jk+ksLJt1vPVLaLu
fFcg5h77s72BThR2EsVwjHIf7mbi4bP0mA174i3/13wo4TIosZNLJ5IM9P2hfCV/
C2DMe4d0j/HHsg6+pPfCTXLW8K5wazwDZFn3FM7JTtjq
-----END CERTIFICATE-----
Generated at Fri Mar 13 10:32:13 2026 by rpki-client