Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/YkuX6DxJ3MBxSGWHOEz4VyjcfWI.roa
File: YkuX6DxJ3MBxSGWHOEz4VyjcfWI.roa (raw, json)
Hash identifier: d90Ei75/XO1HxJOdhm5VOw1ds37/eeO285fdj7zSdvs=
Subject key identifier: 62:4B:97:E8:3C:49:DC:C0:71:48:65:87:38:4C:F8:57:28:DC:7D:62
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019DF01CC05C821674184E44CF79AB4163F1
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/YkuX6DxJ3MBxSGWHOEz4VyjcfWI.roa
Signing time: Sun 03 May 2026 23:11:49 +0000
ROA not before: Sun 03 May 2026 23:11:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56582
IP address blocks: 131.222.216.0/24 maxlen: 24
131.222.217.0/24 maxlen: 24
131.222.218.0/24 maxlen: 24
131.222.219.0/24 maxlen: 24
131.222.227.0/24 maxlen: 24
131.222.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f0:1c:c0:5c:82:16:74:18:4e:44:cf:79:ab:41:63:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: May 3 23:11:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=624b97e83c49dcc071486587384cf85728dc7d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:f6:65:c2:c3:f7:78:59:26:bb:77:16:68:
c9:04:a9:d9:58:e6:17:eb:ca:6e:b3:c6:28:b5:ea:
2c:af:36:e6:06:03:82:b2:82:e9:48:3d:c8:fa:d4:
4a:24:0f:28:dc:2b:8a:c3:64:e4:0e:d9:c3:c6:ea:
54:40:e6:14:21:60:d7:72:f6:aa:99:e7:84:4b:b8:
ef:80:0a:cd:96:0f:7f:ac:fd:7f:04:ac:82:b4:79:
d2:fd:7a:bf:a3:83:c1:26:2c:73:8a:e1:46:3e:28:
6c:fe:04:00:c4:f2:b5:44:50:cb:e6:7a:f4:ac:7b:
d2:6c:df:ff:20:af:a0:83:84:35:1c:73:ab:2e:05:
58:89:94:62:67:26:0e:e3:89:64:aa:75:8e:7a:6e:
19:ad:2e:c1:97:e1:a8:13:97:58:06:17:19:8e:08:
a8:65:26:d1:b4:70:b9:b0:b7:5e:5c:1b:ed:06:6b:
30:a3:69:b1:d7:35:6b:2f:95:ea:22:62:d8:ea:62:
2d:64:f4:cc:6b:9b:af:b1:51:c3:5f:fc:74:02:3a:
b9:a6:f1:e8:e7:29:7e:bb:01:75:4c:fd:ed:d3:96:
52:c7:dc:67:8f:25:c9:fc:57:77:cb:46:c7:88:85:
21:01:14:62:b4:0b:84:5b:58:52:62:20:73:87:02:
8c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4B:97:E8:3C:49:DC:C0:71:48:65:87:38:4C:F8:57:28:DC:7D:62
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/YkuX6DxJ3MBxSGWHOEz4VyjcfWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.216.0/22
131.222.227.0-131.222.228.255
Signature Algorithm: sha256WithRSAEncryption
7c:3d:6c:40:82:2d:23:b1:12:7e:42:9d:03:7e:f0:a9:f5:32:
70:a9:46:38:bf:aa:d1:74:bf:4b:61:2a:c7:31:03:f0:c7:61:
cf:aa:9f:74:ce:79:db:48:8b:c9:b4:4b:e8:67:28:7e:67:48:
07:56:7e:d5:8d:92:0e:ee:be:b0:78:80:90:45:88:8c:c9:cc:
79:33:f0:69:49:f9:ee:42:0a:0c:a9:64:ba:35:c0:ff:46:1f:
a1:22:02:1b:99:63:76:f9:37:d6:68:44:44:67:3a:b0:3c:40:
d3:a8:5c:70:92:fb:b7:d9:40:a4:16:1b:89:8f:57:2b:87:c6:
56:87:7e:1c:86:3e:8e:12:f7:c4:bb:ce:92:46:16:9e:bc:9a:
7b:a8:be:6f:0d:83:a3:cf:16:45:eb:8a:ce:39:10:28:f4:f2:
40:62:55:49:34:2c:0e:26:43:3c:fe:1b:7b:d5:5e:4c:cf:c6:
f9:b6:8e:fa:3f:ea:d2:22:c4:9e:b4:7d:d1:2a:6a:b5:7a:89:
f9:00:ce:18:b9:59:2f:e8:a2:1f:f1:77:e5:c1:19:64:5b:5e:
6c:7b:06:03:52:0a:de:ee:e8:9a:58:3c:7b:be:da:0b:d5:0a:
8d:47:0a:21:b2:70:b8:ae:c1:e5:5e:f0:41:1d:b9:7f:0a:10:
b2:46:6b:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 21:42:20 2026 by rpki-client