Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/rwPc9bMhlqNj5Ru4sU4Gba-lN28.roa
File: rwPc9bMhlqNj5Ru4sU4Gba-lN28.roa (raw, json)
Hash identifier: kN5HJwpyzHfkeeDZTdChHe3NbAw1d5/SE+lUnmOLe84=
Subject key identifier: AF:03:DC:F5:B3:21:96:A3:63:E5:1B:B8:B1:4E:06:6D:AF:A5:37:6F
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019DF01AED45AFC4F3E29E3BA6330DADD062
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/rwPc9bMhlqNj5Ru4sU4Gba-lN28.roa
Signing time: Sun 03 May 2026 23:09:49 +0000
ROA not before: Sun 03 May 2026 23:09:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216472
IP address blocks: 131.222.210.0/24 maxlen: 24
131.222.211.0/24 maxlen: 24
131.222.248.0/24 maxlen: 24
131.222.249.0/24 maxlen: 24
131.222.250.0/24 maxlen: 24
131.222.251.0/24 maxlen: 24
131.222.252.0/24 maxlen: 24
131.222.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 May 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f0:1a:ed:45:af:c4:f3:e2:9e:3b:a6:33:0d:ad:d0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: May 3 23:09:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af03dcf5b32196a363e51bb8b14e066dafa5376f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:ac:05:fc:2a:16:2c:0c:02:a3:87:49:05:
d3:d4:a2:68:e4:eb:03:bb:bb:03:ff:93:da:30:34:
57:e8:c8:78:e8:7d:7c:90:55:b9:15:87:85:9f:90:
fa:f7:6c:5a:d3:fb:f3:ca:63:99:e4:ca:77:6e:e4:
8e:75:6e:3d:24:4d:4e:ea:fd:5c:a7:ce:98:39:f5:
c2:ea:3a:5d:3b:08:94:dc:a9:83:ab:70:99:51:e3:
1c:90:ee:a1:41:1c:da:8f:89:69:13:87:3b:e5:d9:
92:f4:be:e7:c4:a8:5c:e3:af:4c:71:30:09:2a:b5:
a4:24:93:34:cd:8f:01:ef:fb:b2:ac:2d:cf:4f:19:
f4:be:c9:21:3e:eb:fb:9c:1b:d3:33:96:20:0e:3f:
af:95:0f:ea:5a:ec:83:58:58:f3:62:ab:d3:14:e1:
c0:ae:d8:7b:a8:15:ee:e2:4b:9c:23:87:14:5e:70:
58:00:46:e9:11:73:56:36:1a:f5:db:1d:87:a4:bc:
8c:9f:09:9f:38:0d:41:c5:1f:68:69:83:e7:04:4f:
2c:c2:89:96:b8:01:d2:28:76:2c:87:62:d6:37:44:
d8:45:46:d5:c8:50:8a:53:a8:2f:2e:88:59:46:cc:
8c:de:5c:b8:43:85:57:e5:eb:e9:ca:b4:1a:8f:2f:
9f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:03:DC:F5:B3:21:96:A3:63:E5:1B:B8:B1:4E:06:6D:AF:A5:37:6F
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/rwPc9bMhlqNj5Ru4sU4Gba-lN28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.210.0/23
131.222.248.0-131.222.253.255
Signature Algorithm: sha256WithRSAEncryption
52:59:4c:20:27:06:7e:ed:b0:ba:a2:96:33:89:47:48:c1:60:
0d:b7:21:08:4f:17:cb:bf:11:79:99:87:55:bb:1d:7a:31:1f:
64:05:57:c3:20:f0:d4:cf:36:68:a6:45:42:df:91:02:11:b7:
4c:48:e0:40:5b:29:17:67:2c:a8:90:91:af:d5:f3:fd:6d:fc:
03:6f:20:78:82:7b:24:10:9a:1b:3e:08:59:3a:67:e1:c3:61:
1a:98:28:f7:53:e2:d7:61:c5:17:6d:fd:65:8f:a8:05:be:3a:
82:bd:92:6f:ce:7e:7e:82:9d:e9:6f:8f:cd:5f:10:c8:54:6c:
f8:04:65:3f:55:42:38:47:e5:12:eb:60:0c:9a:c1:5d:ad:03:
31:01:bb:9c:3b:b6:d9:28:8f:a7:f9:bb:da:86:c9:46:35:be:
db:6e:d0:fd:94:0c:37:4e:20:65:92:3d:96:52:64:36:51:4b:
af:24:90:51:c7:ad:89:43:f1:85:96:f3:95:57:a3:84:7a:a4:
4d:1f:94:05:48:d8:cd:7b:fa:0d:bd:c0:f4:35:8e:f3:72:e0:
5f:d9:75:78:c8:a7:3a:42:3b:2e:87:cb:8f:37:79:79:3d:c1:
59:64:87:fe:47:45:10:3e:30:4a:a6:d2:0b:8c:04:7b:d6:2e:
f1:c4:d6:24
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ3wGu1Fr8Tz4p47pjMNrdBiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjYwNTAzMjMwOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjAzZGNmNWIzMjE5NmEzNjNlNTFiYjhiMTRlMDY2ZGFmYTUzNzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo6sBfwqFiwMAqOHSQXT1KJo5OsD
u7sD/5PaMDRX6Mh46H18kFW5FYeFn5D692xa0/vzymOZ5Mp3buSOdW49JE1O6v1c
p86YOfXC6jpdOwiU3KmDq3CZUeMckO6hQRzaj4lpE4c75dmS9L7nxKhc469McTAJ
KrWkJJM0zY8B7/uyrC3PTxn0vskhPuv7nBvTM5YgDj+vlQ/qWuyDWFjzYqvTFOHA
rth7qBXu4kucI4cUXnBYAEbpEXNWNhr12x2HpLyMnwmfOA1BxR9oaYPnBE8swomW
uAHSKHYsh2LWN0TYRUbVyFCKU6gvLohZRsyM3ly4Q4VX5evpyrQajy+fUQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFK8D3PWzIZajY+UbuLFOBm2vpTdvMB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvcndQYzliTWhscU5qNVJ1NHNVNEdiYS1sTjI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBg97SMAwD
BAOD3vgDBAGD3vwwDQYJKoZIhvcNAQELBQADggEBAFJZTCAnBn7tsLqiljOJR0jB
YA23IQhPF8u/EXmZh1W7HXoxH2QFV8Mg8NTPNmimRULfkQIRt0xI4EBbKRdnLKiQ
ka/V8/1t/ANvIHiCeyQQmhs+CFk6Z+HDYRqYKPdT4tdhxRdt/WWPqAW+OoK9km/O
fn6Cnelvj81fEMhUbPgEZT9VQjhH5RLrYAyawV2tAzEBu5w7ttkoj6f5u9qGyUY1
vttu0P2UDDdOIGWSPZZSZDZRS68kkFHHrYlD8YWW85VXo4R6pE0flAVI2M17+g29
wPQ1jvNy4F/ZdXjIpzpCOy6Hy483eXk9wVlkh/5HRRA+MEqm0guMBHvWLvHE1iQ=
-----END CERTIFICATE-----
Generated at Sat May 9 20:20:43 2026 by rpki-client