Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/FMjgHFX6C8tm6BE-gQMgr2HgUYw.roa
File: FMjgHFX6C8tm6BE-gQMgr2HgUYw.roa (raw, json)
Hash identifier: LfGIyMkMrmZ8uM6zQmgdk3IubHKAEZoBTOFxAv5y66A=
Subject key identifier: 14:C8:E0:1C:55:FA:0B:CB:66:E8:11:3E:81:03:20:AF:61:E0:51:8C
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 019D24133252192658A4C946E062B94C77AD
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/FMjgHFX6C8tm6BE-gQMgr2HgUYw.roa
Signing time: Wed 25 Mar 2026 08:18:51 +0000
ROA not before: Wed 25 Mar 2026 08:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9121
IP address blocks: 131.222.216.0/24 maxlen: 24
131.222.217.0/24 maxlen: 24
131.222.218.0/24 maxlen: 24
131.222.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:13:32:52:19:26:58:a4:c9:46:e0:62:b9:4c:77:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Mar 25 08:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14c8e01c55fa0bcb66e8113e810320af61e0518c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:74:c2:41:7a:26:89:da:77:f4:e5:8e:69:
a8:31:c4:09:f3:93:76:f1:31:6a:89:7d:4a:70:2a:
21:71:ef:db:94:2f:30:b0:60:2d:c8:6b:13:a8:1d:
57:c3:92:3b:2f:19:c4:da:82:eb:30:e6:9c:41:65:
7e:13:d0:3e:01:f2:1a:09:93:43:86:ba:f8:84:ac:
55:4d:7e:6a:29:24:5a:c6:d2:14:36:03:e2:19:c7:
cb:fb:c1:fc:be:6e:54:e2:28:47:84:e6:cd:bd:61:
a3:34:7d:32:ed:54:c5:6c:53:33:1f:bb:e0:4b:4d:
2b:4e:2c:b9:73:d8:5b:a8:55:cf:d1:e3:fa:7e:52:
f9:f5:fa:b7:cb:43:af:23:86:48:41:b5:82:d3:d2:
73:0d:0d:07:0b:a4:d0:95:bc:c6:b9:79:c0:d8:3b:
a8:db:08:23:2d:0e:12:65:ed:a3:8b:a5:8a:0b:ee:
c4:25:75:e0:95:fa:d9:f8:06:1e:bf:10:05:ef:a8:
2d:49:c7:b6:e9:ba:1e:f3:9b:8b:48:ef:aa:b5:d3:
8e:0a:85:b7:b1:07:90:e2:62:ae:5f:25:52:6f:92:
0a:58:47:3e:d8:d0:ea:8f:62:0a:4c:7f:fc:a9:98:
71:cb:9e:a6:4a:40:4b:9f:c9:b1:89:e0:56:2a:59:
cf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C8:E0:1C:55:FA:0B:CB:66:E8:11:3E:81:03:20:AF:61:E0:51:8C
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/FMjgHFX6C8tm6BE-gQMgr2HgUYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.216.0/22
Signature Algorithm: sha256WithRSAEncryption
88:83:5e:31:90:07:90:6b:4e:60:37:44:20:80:c6:c2:cb:53:
33:d9:9b:bc:a9:9b:88:63:b6:70:67:55:92:3c:f9:69:f1:14:
9e:39:95:72:d9:71:7b:b1:a4:32:05:76:7d:74:46:3d:26:c2:
7d:9b:cf:13:61:32:c1:34:65:eb:72:0b:36:5e:6f:37:d4:cd:
be:44:e5:7e:e6:0d:fc:1f:14:1d:ed:50:3f:02:40:5d:bb:9c:
c6:88:55:b2:14:c6:0f:65:c2:bf:2d:f1:82:a6:38:d0:61:d0:
3d:62:9a:3c:49:89:d7:00:e8:c9:ab:62:06:26:20:bc:86:6a:
b8:6f:e5:15:41:15:81:01:41:9b:43:6f:23:5c:3d:10:98:1c:
86:99:86:b5:2a:c5:1c:a3:4f:13:54:cf:1d:53:d7:de:78:3a:
8b:02:1e:b7:1a:2f:bf:47:a6:4b:c0:20:dc:f2:be:19:b9:5e:
08:9c:3d:56:36:93:a5:01:cc:0b:f2:1d:5c:4f:cf:72:62:bc:
0a:61:71:5c:7e:16:9a:f9:4d:d3:53:d8:cb:97:4c:f6:b6:c7:
98:3a:01:ba:94:8d:ea:f7:c5:43:18:68:63:25:89:01:b3:4a:
01:0f:36:4c:51:5c:f7:50:fa:96:d3:e6:37:55:a5:2a:ae:d7:
53:bf:ca:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:05:30 2026 by rpki-client