Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/qSsSKMXAzMPltH2BBycU_pVvqZE.roa
File: qSsSKMXAzMPltH2BBycU_pVvqZE.roa (raw, json)
Hash identifier: PuojaS0Tleeayk3Hu/aVSje12Yabrh9wKKfmqv8ekjs=
Subject key identifier: A9:2B:12:28:C5:C0:CC:C3:E5:B4:7D:81:07:27:14:FE:95:6F:A9:91
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019EB14DE218F4247F81EBC0663A05A5E864
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/qSsSKMXAzMPltH2BBycU_pVvqZE.roa
Signing time: Wed 10 Jun 2026 11:32:11 +0000
ROA not before: Wed 10 Jun 2026 11:32:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56582
IP address blocks: 131.222.216.0/24 maxlen: 24
131.222.217.0/24 maxlen: 24
131.222.218.0/24 maxlen: 24
131.222.219.0/24 maxlen: 24
131.222.227.0/24 maxlen: 24
131.222.228.0/24 maxlen: 24
212.21.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:4d:e2:18:f4:24:7f:81:eb:c0:66:3a:05:a5:e8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jun 10 11:32:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a92b1228c5c0ccc3e5b47d81072714fe956fa991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ec:40:f4:10:60:bb:de:dd:0f:a2:62:4d:a5:
44:f2:bd:19:e3:6f:34:9f:ca:70:e5:0c:9f:87:3f:
1b:16:04:db:fb:cf:b7:5e:f4:7d:09:c6:4b:e4:d8:
fc:a7:3a:cb:91:8c:73:6e:62:6e:fd:e5:54:eb:11:
11:e1:fe:50:8c:4b:ed:ec:45:90:2f:31:f1:32:7c:
d9:c0:59:e2:65:67:bb:2b:48:f0:8e:59:8f:fd:fb:
4c:ce:8f:e2:da:4f:99:2d:27:f1:69:c9:be:cf:ee:
97:d3:f5:93:b7:a4:0f:88:f1:0a:44:a3:75:c6:88:
5d:8c:7c:ec:9c:12:89:b7:65:31:55:bc:e3:f3:32:
0e:34:1c:a5:fa:7f:90:34:b2:a7:f9:3d:c9:37:7f:
74:a8:15:16:ba:b0:91:a6:c6:d4:60:93:8a:10:45:
df:9a:14:e2:7f:77:5d:1f:d5:e6:c6:dc:c9:4d:dd:
3e:32:dc:f9:39:98:23:d1:06:d1:8f:a2:bd:d5:98:
bb:06:69:92:30:d9:aa:e4:6f:70:87:52:69:5f:0b:
6c:df:42:14:46:4f:62:e1:43:ca:11:a1:26:25:97:
51:67:8d:eb:a0:53:a9:61:fe:46:63:2f:6e:87:e8:
dc:51:f4:69:aa:1d:51:f6:07:b2:d3:0b:bc:25:eb:
28:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2B:12:28:C5:C0:CC:C3:E5:B4:7D:81:07:27:14:FE:95:6F:A9:91
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/qSsSKMXAzMPltH2BBycU_pVvqZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.216.0/22
131.222.227.0-131.222.228.255
212.21.100.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:46:bd:2f:91:14:bd:b7:84:0c:24:bb:42:b3:47:b1:ff:af:
af:df:1f:e9:53:4a:51:35:99:67:4f:29:0a:4c:69:6c:17:c3:
87:57:3c:69:02:0d:b0:34:58:2d:91:17:7e:31:ae:86:7d:b6:
e1:c4:4b:62:45:08:14:ea:06:50:78:36:e2:90:24:de:ec:f2:
a8:10:8b:1e:5a:89:7f:6d:f5:0f:a5:37:d2:dc:ba:c5:29:37:
16:7f:0a:83:c3:60:f2:6d:96:98:87:51:d9:75:e9:9a:a6:4c:
91:1e:ac:e4:2d:5e:0e:04:85:c8:9b:c7:b7:40:53:3e:9e:17:
a7:45:d9:0d:bc:0f:5c:f8:0a:10:d8:24:9e:8d:75:d8:81:19:
e9:28:35:68:d9:5e:84:a5:df:bb:58:06:57:09:76:de:89:58:
47:59:f8:75:b0:79:58:4b:f6:99:12:a6:77:79:47:e1:05:ee:
21:01:2a:6e:ca:31:45:9b:1a:af:72:82:7b:42:f5:ed:f3:9b:
f3:6f:4c:99:c1:9d:89:e7:fb:e2:0d:56:29:b1:29:68:85:b5:
e1:88:36:ae:a9:b5:a1:6b:c4:12:6d:4f:c1:94:fa:6c:1d:18:
b2:2e:ae:65:b9:58:ad:3a:47:09:d7:76:b1:87:af:f4:26:f5:
d6:15:02:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:38:26 2026 by rpki-client