Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/KJN38pRPOBW46EybVe4mhGvlUME.roa
File: KJN38pRPOBW46EybVe4mhGvlUME.roa (raw, json)
Hash identifier: dWxCrgYYVFE5zhW3EZCQ5eX/EmJykjk/YvpmtR3H2Js=
Subject key identifier: 28:93:77:F2:94:4F:38:15:B8:E8:4C:9B:55:EE:26:84:6B:E5:50:C1
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 019E1BBD142B366551C2A52852C68834F5F5
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/KJN38pRPOBW46EybVe4mhGvlUME.roa
Signing time: Tue 12 May 2026 10:30:36 +0000
ROA not before: Tue 12 May 2026 10:30:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 131.222.200.0/24 maxlen: 24
131.222.203.0/24 maxlen: 24
131.222.204.0/24 maxlen: 24
131.222.205.0/24 maxlen: 24
131.222.206.0/24 maxlen: 24
131.222.222.0/24 maxlen: 24
131.222.223.0/24 maxlen: 24
153.56.150.0/23 maxlen: 24
153.56.156.0/22 maxlen: 24
153.56.168.0/21 maxlen: 24
153.56.176.0/20 maxlen: 24
153.56.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:bd:14:2b:36:65:51:c2:a5:28:52:c6:88:34:f5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: May 12 10:30:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=289377f2944f3815b8e84c9b55ee26846be550c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3c:f0:3a:05:1c:c9:bb:b0:a0:e2:8a:f1:cf:
db:d3:cd:b4:aa:cd:9a:ef:99:06:20:08:85:b5:37:
00:63:fa:c2:21:ac:22:bc:8e:47:27:36:c4:70:05:
bb:10:1a:05:32:47:a1:c5:4c:39:f8:08:e4:8a:91:
e6:d9:7f:a4:0d:a0:6d:78:c5:7f:e1:e5:34:04:c8:
67:9b:48:72:50:f7:ef:86:8f:d4:4e:59:ef:05:0a:
2f:ad:f0:03:2d:8f:44:8c:9f:f4:07:fc:d2:67:e8:
81:cd:9d:5b:ba:e1:b1:45:d5:14:e6:9a:35:85:ea:
25:39:6e:24:4e:3e:77:48:a0:3e:58:2c:d3:d4:e6:
9a:b0:1e:12:1c:c6:6f:4e:7f:b4:3f:81:05:0e:d5:
89:fa:3b:ea:fa:66:10:10:d9:85:cc:49:4a:da:73:
60:2f:f1:21:5f:d3:24:99:d6:9e:c5:91:19:85:10:
5b:45:33:60:37:76:01:03:c1:b8:79:a1:72:82:d0:
af:df:40:04:c6:98:bf:58:07:22:7f:65:ee:98:47:
7d:66:13:91:5f:e6:d9:04:91:c0:f3:94:30:e0:5c:
8f:77:66:fe:e5:f0:4b:ea:1e:8c:8e:07:cd:cd:96:
44:bc:8a:0e:88:76:43:f1:e4:a5:1b:3e:ce:13:0a:
e3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:93:77:F2:94:4F:38:15:B8:E8:4C:9B:55:EE:26:84:6B:E5:50:C1
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/KJN38pRPOBW46EybVe4mhGvlUME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.200.0/24
131.222.203.0-131.222.206.255
131.222.222.0/23
153.56.150.0/23
153.56.156.0/22
153.56.168.0-153.56.191.255
153.56.208.0/20
Signature Algorithm: sha256WithRSAEncryption
43:c8:88:57:16:8c:1d:3d:5d:01:ee:ce:88:a3:4e:86:58:84:
2b:aa:f9:d1:70:6a:04:75:0e:2a:cb:23:9d:ec:ba:22:25:2a:
da:7f:7c:94:4f:6b:79:63:ab:8c:8c:e0:7f:92:1d:eb:d4:8c:
7c:bf:06:52:dc:21:88:cf:6d:8c:29:38:24:98:33:f9:ee:72:
ac:65:f7:e4:57:89:87:bf:10:c9:c2:c9:11:b4:05:53:a3:c0:
eb:52:4b:21:ae:2c:ff:66:10:0e:9f:82:23:6e:94:d9:8d:1d:
b3:b3:f1:5d:46:a8:f9:ed:1b:5c:65:b2:ce:2d:19:ad:c1:fa:
5d:2c:9f:29:f4:ce:6a:ac:c5:9c:30:c7:3a:13:75:8e:bc:04:
39:a0:02:80:c2:aa:93:f1:ec:f0:c3:9a:31:46:81:41:13:4c:
11:ed:8c:9d:3d:3b:0f:92:99:95:6a:38:6d:d4:10:27:a6:3f:
f3:da:a8:c3:ff:5f:e0:35:41:a0:75:f3:12:bf:62:c8:1d:c0:
50:9b:bf:06:0c:74:cd:d1:de:e3:da:b5:50:f0:48:aa:c2:e6:
b7:38:39:1f:03:a1:f4:be:75:8f:3d:32:83:a7:09:f5:d4:32:
d2:77:8c:34:fc:23:ef:11:f2:a1:5a:8a:2a:ad:c3:51:bd:98:
9b:08:8e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:07 2026 by rpki-client