Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/9JLkBsOIckt0fGh8k6XdADBHfHQ.roa
File: 9JLkBsOIckt0fGh8k6XdADBHfHQ.roa (raw, json)
Hash identifier: TLvoYKT4BtmNh7oG4OJUqX5oIA4J7XUzNEdSMA4HlZ8=
Subject key identifier: F4:92:E4:06:C3:88:72:4B:74:7C:68:7C:93:A5:DD:00:30:47:7C:74
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 01A0FC419150D4DBF5AC74123E74A418F850
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/9JLkBsOIckt0fGh8k6XdADBHfHQ.roa
Signing time: Fri 02 Oct 2026 10:55:50 +0000
ROA not before: Fri 02 Oct 2026 10:55:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 137.174.0.0/16 maxlen: 22
137.174.128.0/18 maxlen: 22
137.174.192.0/19 maxlen: 22
141.137.0.0/16 maxlen: 22
141.137.232.0/24 maxlen: 24
141.137.233.0/24 maxlen: 24
141.137.240.0/24 maxlen: 24
147.123.32.0/19 maxlen: 24
147.123.128.0/17 maxlen: 22
147.123.208.0/21 maxlen: 24
155.204.0.0/16 maxlen: 22
155.204.119.0/24 maxlen: 24
155.204.128.0/18 maxlen: 22
155.204.200.0/21 maxlen: 24
155.204.208.0/21 maxlen: 21
155.204.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:41:91:50:d4:db:f5:ac:74:12:3e:74:a4:18:f8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Oct 2 10:55:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f492e406c388724b747c687c93a5dd0030477c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:3c:ef:d4:11:59:7a:bb:33:97:2b:4a:ee:
72:bf:f6:38:04:36:83:be:1a:c1:69:82:76:66:28:
d0:af:98:da:93:29:85:35:de:63:a9:5f:19:4a:a3:
98:99:77:49:9e:c6:2b:83:8e:2f:20:d3:2e:9c:25:
a8:e7:50:1c:f5:9d:2c:75:37:9c:6a:6f:db:75:35:
9c:19:dc:f6:bc:ba:79:4b:0e:04:0e:db:99:7f:ab:
37:0c:c4:c9:a9:55:47:40:6e:90:76:1c:9d:02:47:
42:af:1c:42:d7:ca:be:8a:3c:ee:a3:dc:72:94:3d:
77:67:bf:bd:97:a6:83:a5:a7:02:4e:ef:10:4c:fe:
5c:5d:ae:0b:72:e9:b0:27:51:c3:0b:26:3a:25:ca:
ae:8f:0b:b0:cd:28:f7:ad:b0:71:9a:09:97:92:9a:
3b:38:ca:2b:17:54:65:e4:5d:d9:d8:d1:d2:22:a0:
eb:f2:5c:5a:2f:35:4e:81:09:93:9c:41:66:31:2c:
d0:c6:ab:06:8b:92:81:6e:55:ee:32:3a:3b:4c:4d:
80:1d:86:99:39:e6:ee:e8:66:ac:4c:c8:bf:2f:7c:
86:0d:91:c0:16:12:a3:cb:6d:8e:e7:fb:7b:2b:73:
36:46:6c:c0:01:a7:70:83:af:89:1e:b5:8a:23:9a:
45:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:92:E4:06:C3:88:72:4B:74:7C:68:7C:93:A5:DD:00:30:47:7C:74
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/9JLkBsOIckt0fGh8k6XdADBHfHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.174.0.0/16
141.137.0.0/16
147.123.32.0/19
147.123.128.0/17
155.204.0.0/16
Signature Algorithm: sha256WithRSAEncryption
27:6a:56:27:ca:3f:bb:f3:65:21:9b:d2:a3:4e:61:72:f2:7b:
b3:d3:75:4c:1f:bd:f5:03:09:32:95:72:e0:6c:19:35:38:1a:
cd:2f:26:c2:66:63:53:75:c0:74:50:68:5f:d3:05:91:fd:55:
06:e5:5f:b7:6b:4d:5f:f8:8a:9e:b5:97:26:7e:c4:92:b9:d1:
41:57:92:6b:2d:3d:78:bc:b0:51:81:8d:5d:a4:2e:04:fe:5c:
af:74:27:07:00:a9:e3:38:e4:54:f2:d8:e8:99:8d:36:6f:6b:
16:f4:32:47:2a:71:1f:dc:d7:ed:7f:5b:e8:e4:ec:44:e6:6e:
bb:39:f6:be:3a:d7:f8:02:7c:2a:34:97:1d:88:98:dc:ef:43:
af:0f:9b:d5:9c:ec:1c:5c:1b:90:4b:b7:28:c1:1c:17:43:ec:
b3:24:96:49:f0:b9:d8:1e:82:b5:6b:fb:f6:db:fa:dd:44:dc:
13:22:33:d6:88:2d:86:24:04:7a:22:f9:f7:60:3b:fc:ce:e5:
0b:37:c9:0a:9a:c1:a3:be:06:e2:4e:ea:12:3c:74:32:8d:b4:
19:c1:0f:14:b1:81:53:06:b6:f7:93:e7:47:3b:32:26:90:3f:
72:11:22:40:ce:47:9d:54:48:3f:b9:be:d1:d7:bf:0e:0a:25:
03:75:14:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:25:50 2026 by rpki-client