Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/LJD0wszJHZ-p4v3JPuOMJg7uKmo.roa
File: LJD0wszJHZ-p4v3JPuOMJg7uKmo.roa (raw, json)
Hash identifier: TJ3xrBMjWHKG9ZSq93tozgGEeJxQ3QPVN2RdVHYWMkY=
Subject key identifier: 2C:90:F4:C2:CC:C9:1D:9F:A9:E2:FD:C9:3E:E3:8C:26:0E:EE:2A:6A
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019DF01AEC5C17B9B75BDB3A732AB24E085A
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/LJD0wszJHZ-p4v3JPuOMJg7uKmo.roa
Signing time: Sun 03 May 2026 23:09:49 +0000
ROA not before: Sun 03 May 2026 23:09:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204767
IP address blocks: 131.222.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f0:1a:ec:5c:17:b9:b7:5b:db:3a:73:2a:b2:4e:08:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: May 3 23:09:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c90f4c2ccc91d9fa9e2fdc93ee38c260eee2a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:99:4e:80:ac:01:c1:d3:de:76:9b:c1:ee:bb:
54:3f:0c:21:4d:2a:29:92:ca:63:0c:1f:d6:ec:16:
e2:b4:17:cf:37:c3:d3:ac:59:7c:04:5c:01:aa:26:
4a:24:cb:8c:0a:3a:ef:06:23:7c:a8:49:47:5f:26:
10:25:12:de:c5:c3:22:0e:2d:bc:3c:81:53:e6:78:
26:01:3f:80:67:c0:80:95:1e:79:18:95:75:89:50:
5d:ee:16:0a:f0:8f:cb:60:fb:59:02:fa:8b:4b:f0:
cc:be:9a:e1:20:a7:e4:de:bd:95:58:cc:19:b8:43:
09:95:b9:21:54:c1:ec:8c:74:b4:1d:ca:a1:d8:7e:
dd:f5:ea:2a:b7:1d:1f:1b:83:02:3c:4f:6d:83:b6:
5c:98:6d:6c:bf:2d:21:2f:c5:57:16:bf:ba:16:7f:
f7:36:47:75:ba:13:57:18:29:5d:e2:84:5a:fb:c8:
ba:63:f4:d0:8c:a6:37:80:75:c0:b8:84:33:98:c6:
53:2a:2f:5c:03:47:6d:a7:c6:45:ac:31:0b:78:5c:
bb:b4:1d:c7:e5:04:5c:65:dd:b0:5e:be:61:a2:a5:
e4:30:64:e4:40:2e:70:88:e1:bb:13:a8:1c:aa:46:
58:12:99:fd:41:8b:ec:ca:5c:0f:47:7d:42:95:e2:
74:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:90:F4:C2:CC:C9:1D:9F:A9:E2:FD:C9:3E:E3:8C:26:0E:EE:2A:6A
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/LJD0wszJHZ-p4v3JPuOMJg7uKmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.213.0/24
Signature Algorithm: sha256WithRSAEncryption
56:cb:c7:75:f4:2d:39:0b:36:ce:8c:25:91:ee:a8:a7:69:7d:
6a:4f:11:da:69:2c:ae:76:3d:85:b2:dc:21:ce:82:2a:2f:e0:
78:b3:f8:7f:dd:7b:9f:92:1c:d1:16:05:6d:9a:ed:7a:5b:17:
1f:e2:ae:f6:03:16:6c:ae:c9:33:48:d6:dd:c1:c6:80:1c:c4:
5d:87:19:9d:6b:6d:4f:b4:25:25:f4:b0:8a:50:7e:60:a6:7c:
26:07:f7:37:cd:1b:62:75:31:02:d5:b2:a4:d2:7a:34:39:95:
0b:c7:74:0c:71:02:3b:88:4b:11:cf:cb:8c:d4:be:4a:bd:b1:
d0:9f:84:0e:77:2e:84:21:02:27:04:91:cb:72:0b:94:46:73:
b7:25:7e:e1:bc:c2:12:4a:f4:9a:cc:53:cf:47:c8:6a:b2:5d:
ea:c6:c5:2b:09:f4:70:59:fc:f4:1b:b4:cf:f2:c7:86:44:14:
cb:e1:e1:86:6b:ef:45:6a:71:1c:62:56:34:f4:07:16:15:64:
8c:19:68:f4:e2:09:32:8b:0d:ae:13:24:b8:0d:9d:37:90:c5:
4b:12:75:46:58:03:fe:42:6b:e0:de:6a:24:5d:41:67:c1:f7:
1b:1b:ab:2b:bb:a4:4b:77:ba:73:04:a8:03:c9:15:cf:27:30:
ed:00:e6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:26 2026 by rpki-client