Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Z4qJ0AuvFG9LwCUujh1SFAyCFEQ.roa
File: Z4qJ0AuvFG9LwCUujh1SFAyCFEQ.roa (raw, json)
Hash identifier: L/2723303TsKIyZTz4LxjhNc7XDzNUykt0wbQqKmi1I=
Subject key identifier: 67:8A:89:D0:0B:AF:14:6F:4B:C0:25:2E:8E:1D:52:14:0C:82:14:44
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019F6B7A05025E52E3FD93740D73EFBF9DD6
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Z4qJ0AuvFG9LwCUujh1SFAyCFEQ.roa
Signing time: Thu 16 Jul 2026 15:09:46 +0000
ROA not before: Thu 16 Jul 2026 15:09:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56582
IP address blocks: 131.222.216.0/24 maxlen: 24
131.222.217.0/24 maxlen: 24
131.222.218.0/24 maxlen: 24
131.222.219.0/24 maxlen: 24
131.222.227.0/24 maxlen: 24
131.222.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:7a:05:02:5e:52:e3:fd:93:74:0d:73:ef:bf:9d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jul 16 15:09:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=678a89d00baf146f4bc0252e8e1d52140c821444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:b9:94:09:c0:df:6c:48:f8:28:a7:35:a7:
d0:29:1d:a1:84:2d:c6:fc:bd:7b:b2:99:31:ea:07:
dc:75:e9:11:67:fb:9f:c2:0b:f4:56:b3:a6:25:43:
3f:8e:99:26:49:74:25:87:38:05:51:de:fa:96:c6:
36:90:83:b7:bf:f1:43:7a:56:11:c3:84:5b:a7:60:
b9:04:18:46:c7:ee:aa:62:8f:2f:f7:5a:4d:12:0d:
72:de:00:a0:09:63:c8:65:72:e5:dd:36:0c:d4:99:
bb:c6:5c:09:41:e0:3a:e6:fe:44:ca:6c:80:ec:50:
b7:1b:92:dc:be:41:d0:6f:f4:cc:0a:51:52:3e:ef:
02:c5:04:cc:5a:16:46:65:b9:f5:fb:39:43:f0:60:
0c:be:f9:d1:66:47:72:3c:e3:4c:fc:11:45:7d:69:
65:ca:de:e0:f2:c1:2f:84:24:e7:1b:23:81:17:93:
31:d9:50:09:2e:1c:51:e1:30:c4:66:06:90:a1:04:
08:19:ef:ec:ac:40:a4:30:c0:4c:34:53:25:8d:5d:
b5:d0:3e:1c:a5:51:38:72:ca:74:d4:a1:5a:2c:57:
75:ce:39:a0:a1:d4:e5:14:a3:71:f0:f1:f4:76:c3:
11:9a:d6:51:70:a2:99:4c:02:ac:bd:a9:5c:5f:80:
3a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8A:89:D0:0B:AF:14:6F:4B:C0:25:2E:8E:1D:52:14:0C:82:14:44
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Z4qJ0AuvFG9LwCUujh1SFAyCFEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.216.0/22
131.222.227.0-131.222.228.255
Signature Algorithm: sha256WithRSAEncryption
5e:d0:cf:f7:40:45:d7:07:79:4c:34:9b:6d:18:a1:b6:0f:34:
95:0c:bd:0a:53:2d:1e:f8:23:12:0a:de:0a:da:89:15:0b:ec:
83:6b:22:c3:ec:72:c4:bc:21:d7:b6:c3:24:8a:9c:d5:df:61:
86:ab:be:84:ed:99:65:ca:c8:16:99:06:44:6b:8c:e1:5e:fe:
c3:ca:f2:b6:54:47:00:11:31:1e:78:75:c9:98:e8:0f:69:5c:
fb:c1:58:6b:88:a1:a9:61:6b:38:36:4a:36:5f:44:21:fa:1c:
03:17:fc:51:2e:d9:69:3e:70:91:86:99:30:af:3d:0e:60:45:
1b:39:d7:4b:13:c4:a5:da:6a:b6:46:0a:8a:da:55:f4:58:dd:
79:3b:50:a4:cb:1a:20:3d:86:2c:4f:a3:3c:31:b5:25:0d:4d:
00:70:ee:3b:f9:28:61:99:a3:a1:42:9a:9e:8f:33:2e:dc:ed:
74:9b:60:a6:a3:52:0d:a3:c0:68:26:8d:6e:a2:02:12:4f:40:
44:3a:e6:97:f0:d9:9a:4e:61:bf:2f:6d:f7:ba:39:b2:5a:7d:
72:b3:ba:15:fe:6c:08:af:ec:fb:1c:2b:f8:ab:d2:90:b6:8b:
bc:f4:0f:a4:12:37:8b:85:f7:51:1b:c4:44:7b:ba:ec:12:3f:
bb:8a:cc:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:33 2026 by rpki-client