Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/VvLQA9Cae2PQuMrr3_Y-0TmNwcY.roa
File: VvLQA9Cae2PQuMrr3_Y-0TmNwcY.roa (raw, json)
Hash identifier: XwK6vB2kQtof3+RV72T5Wj8ggzbbz/YUbH3GUgwyoJw=
Subject key identifier: 56:F2:D0:03:D0:9A:7B:63:D0:B8:CA:EB:DF:F6:3E:D1:39:8D:C1:C6
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A1A6EA3A301A9FE79827EFABB1187EFDED
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/VvLQA9Cae2PQuMrr3_Y-0TmNwcY.roa
Signing time: Wed 04 Nov 2026 14:15:30 +0000
ROA not before: Wed 04 Nov 2026 14:15:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 131.222.203.0/24 maxlen: 24
131.222.206.0/24 maxlen: 24
131.222.222.0/24 maxlen: 24
153.56.216.0/22 maxlen: 24
153.56.220.0/24 maxlen: 24
153.56.223.0/24 maxlen: 24
153.56.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:ea:3a:30:1a:9f:e7:98:27:ef:ab:b1:18:7e:fd:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Nov 4 14:15:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56f2d003d09a7b63d0b8caebdff63ed1398dc1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:04:e5:97:72:64:83:9c:77:97:95:e9:c8:0a:
56:71:24:63:32:e0:fc:26:8b:1f:e8:47:27:73:63:
9b:e2:d1:96:5d:c8:5d:4a:ea:51:e2:c3:32:a8:92:
52:6f:f0:84:e9:5c:3c:80:5b:ef:e9:26:f2:95:8c:
0e:77:cc:8f:a2:ad:70:13:ee:cb:aa:3e:d1:8a:be:
22:4a:c3:c1:be:3f:34:4b:5c:27:4f:03:e8:24:d7:
5a:49:25:c7:51:6d:1a:c6:d7:92:83:c3:a2:10:ce:
19:d8:a0:80:4e:13:7e:7a:21:62:a3:9d:f1:0d:b8:
19:3a:ff:e5:6f:53:4f:88:ad:bd:c0:23:8b:8c:69:
99:c8:3f:9b:d7:dd:09:17:59:51:4f:95:f0:17:f4:
b5:2d:ed:05:93:49:2e:47:1a:82:37:e8:1f:ef:3e:
f4:3e:4b:58:b8:91:98:66:1e:0a:81:cc:4d:a5:ed:
07:f7:4f:9f:bb:e8:78:41:ee:a3:5c:3f:1f:19:b9:
c2:2c:01:d2:35:c2:4b:ae:00:45:3f:b6:a9:5e:62:
97:cd:9d:df:88:4c:c1:18:a7:b3:9f:5a:51:51:7a:
a7:6d:59:b0:d3:ad:23:86:e4:eb:83:27:77:5b:01:
ed:88:4e:67:98:53:9e:64:d5:f4:49:fe:40:58:17:
15:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F2:D0:03:D0:9A:7B:63:D0:B8:CA:EB:DF:F6:3E:D1:39:8D:C1:C6
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/VvLQA9Cae2PQuMrr3_Y-0TmNwcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.203.0/24
131.222.206.0/24
131.222.222.0/24
153.56.216.0-153.56.220.255
153.56.223.0/24
153.56.232.0/21
Signature Algorithm: sha256WithRSAEncryption
b2:c6:82:01:dd:7a:6e:e5:2e:29:39:94:f1:ea:4b:ff:fe:f2:
38:67:34:47:ee:c7:8c:9a:28:2e:37:43:ef:a1:1d:91:c6:21:
eb:17:4c:a7:3b:45:21:77:e6:bc:4f:9b:cf:99:cf:b0:8f:80:
b2:e6:a2:1b:c9:be:00:98:da:2c:f4:73:7b:72:87:6e:9d:a2:
b5:33:5d:3c:76:3b:22:ec:3c:37:77:a9:5b:07:df:13:73:25:
b6:47:b2:1c:7d:96:17:3b:50:ed:1e:8a:dd:f2:c3:ce:c7:4e:
7e:74:27:db:18:39:1d:0e:15:46:b7:b6:d3:f8:11:59:a7:a3:
a2:c8:ff:f4:35:95:bf:77:b5:c1:b1:4d:c6:88:70:2b:50:04:
b6:14:b4:59:51:1c:37:39:8b:b0:9e:7e:50:19:1e:8c:cf:0a:
34:81:d0:74:b5:3d:ae:33:c9:3b:23:14:f4:ab:91:fb:6e:98:
fc:d6:bc:63:9c:95:e1:05:50:d4:15:77:7e:72:da:8d:07:17:
85:f9:04:c4:24:95:17:64:03:a7:67:fe:7e:16:2a:08:99:e6:
19:30:f0:19:5b:57:e4:05:0f:8d:96:bd:72:88:d3:a9:97:7f:
bc:a1:a9:94:8c:7d:35:df:ca:c2:2d:d4:c1:8b:a9:b8:38:32:
18:93:ca:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:04:26 2026 by rpki-client