Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/cjcmiOtDDlTjyYQyKCJamvURnkg.roa
File: cjcmiOtDDlTjyYQyKCJamvURnkg.roa (raw, json)
Hash identifier: kI1yDYXFOnMe/2BdFboj81gzmTgi8ptrjeCtHHILCuc=
Subject key identifier: 72:37:26:88:EB:43:0E:54:E3:C9:84:32:28:22:5A:9A:F5:11:9E:48
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 019E68EBD6EBBA4F65E8F97DAEC22439CCCD
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/cjcmiOtDDlTjyYQyKCJamvURnkg.roa
Signing time: Wed 27 May 2026 10:12:26 +0000
ROA not before: Wed 27 May 2026 10:12:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203963
IP address blocks: 31.133.80.0/22 maxlen: 24
31.133.88.0/22 maxlen: 24
176.103.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:68:eb:d6:eb:ba:4f:65:e8:f9:7d:ae:c2:24:39:cc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: May 27 10:12:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72372688eb430e54e3c9843228225a9af5119e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b0:e1:22:1d:84:e2:f8:a2:54:47:ee:cf:b6:
55:35:22:ca:08:d2:4d:e9:2e:9a:47:69:3c:b3:32:
8d:eb:32:b6:00:80:71:30:8c:d4:10:ee:ba:4c:9f:
2f:29:76:5e:9d:e6:bf:44:f0:34:14:ca:c6:fc:e8:
6d:6c:d7:13:36:0e:01:14:56:7b:98:5f:04:5a:e5:
2e:d9:20:36:33:78:73:93:a9:7f:54:6a:23:3b:55:
33:1a:26:13:b3:c1:3b:d7:26:70:22:cd:ab:2e:1c:
3a:d6:f8:6d:94:e1:24:8a:0a:0d:60:78:72:29:8f:
cb:4a:81:7c:99:e9:e0:74:8b:df:03:84:30:61:3b:
bc:ee:14:5a:76:29:41:45:13:ad:c5:79:55:63:2d:
5d:d2:51:60:35:df:8b:bb:7b:bd:50:46:97:ec:a6:
c9:77:53:63:f1:4d:24:c3:c1:44:fc:c7:a5:25:15:
1a:73:c0:fc:1b:91:9b:29:1e:dd:ab:60:6c:5c:55:
0a:40:e3:89:eb:a2:c9:d6:77:b7:72:db:34:98:4a:
ea:33:6e:87:81:58:1d:25:75:6f:f6:78:06:ac:6f:
e5:7b:3a:11:45:87:ad:c2:94:0d:71:75:68:d4:7d:
f4:09:e7:a8:95:e9:df:d4:b1:79:b2:fe:03:fd:8c:
3e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:37:26:88:EB:43:0E:54:E3:C9:84:32:28:22:5A:9A:F5:11:9E:48
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/cjcmiOtDDlTjyYQyKCJamvURnkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.80.0/22
31.133.88.0/22
176.103.224.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:9e:6e:85:29:72:f3:19:3f:4d:f5:59:a8:b1:62:a2:d9:a7:
a7:a0:75:ba:0b:0f:69:e7:d9:02:07:70:95:90:99:e7:91:2b:
14:7b:15:a1:26:51:88:7d:2f:04:86:11:16:ff:fa:08:00:ce:
4e:97:09:8e:97:1b:b4:ae:5a:af:2a:08:26:12:1a:6a:af:51:
6d:01:98:9c:3d:b5:40:06:bd:18:16:f9:7c:66:c9:7b:31:58:
ce:60:97:78:1e:8a:1a:0e:e8:95:92:49:24:4d:cf:d6:c7:e0:
5f:8c:46:fe:cd:56:b8:5a:3e:c8:d2:f3:59:81:fb:c5:33:75:
d1:00:22:91:7d:57:d6:ef:89:cf:e3:cc:f4:dc:2b:0d:63:6b:
9f:a1:c6:52:45:16:cf:d6:77:29:5c:55:c6:ec:ec:dc:9c:34:
67:f3:23:49:25:84:25:f6:63:97:ee:1b:e1:47:ce:14:ef:d5:
50:f0:54:f8:40:3b:61:30:1c:3f:05:08:b9:64:a6:9f:f2:58:
7f:e2:1d:41:2e:48:9c:0e:70:74:4f:b7:9b:bd:2b:69:27:d7:
43:e0:9a:b0:cc:82:22:4e:0d:49:79:1c:a0:b9:61:34:6d:05:
a8:02:61:50:99:41:a9:f7:e8:61:75:fc:1b:bd:36:b9:31:2a:
4b:59:e8:24
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ5o69bruk9l6Pl9rsIkOczNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YjllYTRkOWQ4M2E3MjhkZDQxMDI5ZTg2YWY4YTEzMGQz
ODllZDQwHhcNMjYwNTI3MTAxMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjM3MjY4OGViNDMwZTU0ZTNjOTg0MzIyODIyNWE5YWY1MTE5ZTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLDhIh2E4viiVEfuz7ZVNSLKCNJN
6S6aR2k8szKN6zK2AIBxMIzUEO66TJ8vKXZenea/RPA0FMrG/OhtbNcTNg4BFFZ7
mF8EWuUu2SA2M3hzk6l/VGojO1UzGiYTs8E71yZwIs2rLhw61vhtlOEkigoNYHhy
KY/LSoF8mengdIvfA4QwYTu87hRadilBRROtxXlVYy1d0lFgNd+Lu3u9UEaX7KbJ
d1Nj8U0kw8FE/MelJRUac8D8G5GbKR7dq2BsXFUKQOOJ66LJ1ne3cts0mErqM26H
gVgdJXVv9ngGrG/lezoRRYetwpQNcXVo1H30Ceeolenf1LF5sv4D/Yw+LwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHI3JojrQw5U48mEMigiWpr1EZ5IMB8GA1UdIwQY
MBaAFPS56k2dg6co3UECnoavihMNOJ7UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMt
MDgxY2IyYjE3YWI1LzEvY2pjbWlPdEREbFRqeVlReUtDSmFtdlVSbmtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMtMDgxY2IyYjE3YWI1
LzEvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCH4VQAwQC
H4VYAwQCsGfgMA0GCSqGSIb3DQEBCwUAA4IBAQBPnm6FKXLzGT9N9VmosWKi2aen
oHW6Cw9p59kCB3CVkJnnkSsUexWhJlGIfS8EhhEW//oIAM5OlwmOlxu0rlqvKggm
Ehpqr1FtAZicPbVABr0YFvl8Zsl7MVjOYJd4HooaDuiVkkkkTc/Wx+BfjEb+zVa4
Wj7I0vNZgfvFM3XRACKRfVfW74nP48z03CsNY2ufocZSRRbP1ncpXFXG7OzcnDRn
8yNJJYQl9mOX7hvhR84U79VQ8FT4QDthMBw/BQi5ZKaf8lh/4h1BLkicDnB0T7eb
vStpJ9dD4JqwzIIiTg1JeRyguWE0bQWoAmFQmUGp9+hhdfwbvTa5MSpLWegk
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:07:08 2026 by rpki-client