Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/d3NsCwXaLNlMMINMKcFuAk-oubQ.roa
File: d3NsCwXaLNlMMINMKcFuAk-oubQ.roa (raw, json)
Hash identifier: /AiHhFk3ZBz761wkghk16ZNJHaaQ87sydWhoH3LsKAA=
Subject key identifier: 77:73:6C:0B:05:DA:2C:D9:4C:30:83:4C:29:C1:6E:02:4F:A8:B9:B4
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 019D241333029523879B470D06279C77F25F
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/d3NsCwXaLNlMMINMKcFuAk-oubQ.roa
Signing time: Wed 25 Mar 2026 08:18:51 +0000
ROA not before: Wed 25 Mar 2026 08:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208972
IP address blocks: 131.222.216.0/24 maxlen: 24
131.222.217.0/24 maxlen: 24
131.222.218.0/24 maxlen: 24
131.222.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:13:33:02:95:23:87:9b:47:0d:06:27:9c:77:f2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Mar 25 08:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77736c0b05da2cd94c30834c29c16e024fa8b9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:4d:fd:4a:ee:bc:52:53:c7:0c:f3:1f:01:
05:0f:22:8e:83:75:8d:7e:94:fe:62:e5:c5:d8:90:
67:9e:f5:38:0f:49:3a:ae:eb:01:7a:a4:aa:20:aa:
6c:ac:5e:eb:63:54:f8:25:58:61:8f:01:31:2a:d2:
d8:66:f8:bd:76:e9:f6:59:69:f2:2e:17:9e:ca:59:
b8:86:12:ec:4d:a0:a9:98:ae:d4:45:42:1d:83:57:
f0:ad:a7:dc:c9:67:93:91:88:a9:5b:f1:0a:e7:f8:
95:d4:ac:2a:b4:fa:ab:04:71:f6:b7:f1:e9:de:2c:
9e:e0:f7:f6:53:9c:5e:32:75:2c:47:ee:25:90:49:
a0:32:d4:8f:89:e8:7b:06:83:08:37:a8:55:49:33:
58:ac:4f:75:c3:93:07:b3:9b:a3:d7:22:a2:fc:c8:
83:71:c9:86:6d:d8:f7:4b:aa:1d:10:eb:a4:77:45:
1e:9d:89:04:ab:88:2b:8a:12:74:c3:03:74:88:81:
46:e5:23:d2:58:4c:1d:ac:29:6a:bb:0e:48:11:ee:
20:75:cd:68:ee:cc:90:dc:c9:f8:66:f4:ec:4d:c8:
7d:e5:85:06:a9:4a:19:15:4e:09:a6:5c:7d:70:8a:
32:4a:32:a3:1c:14:91:97:69:0c:42:24:d4:6d:10:
b3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:73:6C:0B:05:DA:2C:D9:4C:30:83:4C:29:C1:6E:02:4F:A8:B9:B4
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/d3NsCwXaLNlMMINMKcFuAk-oubQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.216.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:59:21:69:97:ba:ec:e5:94:52:10:0e:cd:cf:d5:3e:3d:36:
d4:ba:98:55:b7:ac:7d:5e:a6:9b:fd:7f:88:a4:33:ba:dc:cb:
62:f7:d0:4a:6a:17:1f:ca:9d:0f:69:a9:af:f0:1c:c0:78:98:
cc:73:b1:32:43:f8:26:23:9e:d9:74:46:c3:9b:36:7e:1e:66:
71:38:78:8c:06:4f:b2:57:83:53:d0:6e:12:c6:c0:94:9f:cd:
73:00:88:12:e7:16:33:ad:56:f3:36:92:eb:2f:05:3f:1c:ac:
ff:30:8a:63:67:2e:38:67:a5:c2:36:ef:ee:15:2e:43:4c:eb:
50:5e:05:a1:92:54:d0:70:59:c4:bd:68:8b:97:1a:62:52:ed:
d2:34:41:4f:04:b2:05:fd:a2:89:2d:87:4b:08:51:0f:9d:31:
f6:21:6a:2e:ab:6f:c0:00:75:5a:eb:92:ac:71:31:a2:96:b4:
c5:66:fb:7b:e0:fa:c1:b2:66:ce:22:40:b5:e7:1a:7c:01:9a:
26:8a:b2:ac:42:f7:c2:95:b1:7d:92:5f:71:a7:98:47:15:08:
85:50:04:a1:9d:e5:fd:c8:c7:f3:e0:f5:a7:4f:43:a7:e7:e2:
b9:de:a7:eb:24:f1:6e:29:2e:20:23:b8:1c:84:fc:87:89:5d:
fe:7a:de:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:00:00 2026 by rpki-client