Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/hEtZyqE_kfbZ2WGUYKSC0jBfrEI.roa
File: hEtZyqE_kfbZ2WGUYKSC0jBfrEI.roa (raw, json)
Hash identifier: CPA0tt0+lAYozU3bXwUoMHqEh8nMLbJsWqOdKpIaQuo=
Subject key identifier: 84:4B:59:CA:A1:3F:91:F6:D9:D9:61:94:60:A4:82:D2:30:5F:AC:42
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019F7FCC78688C1BFF10A823C6B629280F76
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/hEtZyqE_kfbZ2WGUYKSC0jBfrEI.roa
Signing time: Mon 20 Jul 2026 13:52:14 +0000
ROA not before: Mon 20 Jul 2026 13:52:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 131.222.209.0/24 maxlen: 24
131.222.212.0/24 maxlen: 24
131.222.214.0/24 maxlen: 24
131.222.224.0/24 maxlen: 24
131.222.248.0/22 maxlen: 22
185.157.218.0/24 maxlen: 24
185.157.219.0/24 maxlen: 24
203.202.233.0/24 maxlen: 24
2a05:d740::/30 maxlen: 30
2a05:d744::/30 maxlen: 30
2a06:e900::/30 maxlen: 30
2a06:e904::/30 maxlen: 30
2a07:4a04::/30 maxlen: 30
2a0a:37c0::/30 maxlen: 30
2a0a:37c4::/30 maxlen: 30
2a0b:9800::/30 maxlen: 30
2a0b:9804::/30 maxlen: 30
2a0b:a280::/30 maxlen: 30
2a0b:a284::/30 maxlen: 30
2a0b:a300::/30 maxlen: 30
2a0b:a304::/30 maxlen: 30
2a0c:7440::/30 maxlen: 30
2a0c:7444::/30 maxlen: 30
2a0c:74c0::/30 maxlen: 30
2a0c:74c4::/30 maxlen: 30
2a0c:7540::/30 maxlen: 30
2a0c:7544::/30 maxlen: 30
2a0d:2cc0::/30 maxlen: 30
2a0d:2cc4::/30 maxlen: 30
2a0d:88c0::/30 maxlen: 30
2a0d:88c4::/30 maxlen: 30
2a0f:1180::/30 maxlen: 30
2a0f:1184::/30 maxlen: 30
2a0f:2380::/30 maxlen: 30
2a0f:2384::/30 maxlen: 30
2a0f:3380::/30 maxlen: 30
2a0f:3384::/30 maxlen: 30
2a0f:4580::/30 maxlen: 30
2a0f:4584::/30 maxlen: 30
2a0f:4680::/30 maxlen: 30
2a0f:4684::/30 maxlen: 30
2a0f:5580::/30 maxlen: 30
2a0f:5584::/30 maxlen: 30
2a0f:7100::/30 maxlen: 30
2a0f:7104::/30 maxlen: 30
2a0f:7300::/30 maxlen: 30
2a0f:7304::/30 maxlen: 30
2a0f:7c80::/30 maxlen: 30
2a0f:7c84::/30 maxlen: 30
2a0f:9fc0::/30 maxlen: 30
2a0f:9fc4::/30 maxlen: 30
2a0f:a140::/30 maxlen: 30
2a0f:a144::/30 maxlen: 30
2a0f:a500::/30 maxlen: 30
2a0f:a504::/30 maxlen: 30
2a0f:a700::/30 maxlen: 30
2a0f:a704::/30 maxlen: 30
2a0f:c780::/30 maxlen: 30
2a0f:c784::/30 maxlen: 30
2a14:4080::/30 maxlen: 30
2a14:4084::/30 maxlen: 30
2a14:4380::/30 maxlen: 30
2a14:4384::/30 maxlen: 30
2a14:4480::/30 maxlen: 30
2a14:4484::/30 maxlen: 30
2a14:4980::/30 maxlen: 30
2a14:4984::/30 maxlen: 30
2a14:4a80::/30 maxlen: 30
2a14:4a84::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:cc:78:68:8c:1b:ff:10:a8:23:c6:b6:29:28:0f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jul 20 13:52:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=844b59caa13f91f6d9d9619460a482d2305fac42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:6e:be:fc:9d:7a:ee:48:3c:71:dd:f2:94:
b7:1b:33:08:35:1c:1b:ef:3e:19:c7:ea:75:2d:41:
40:52:5a:95:78:26:71:ba:41:90:2b:bd:0e:c2:3b:
53:bd:2e:88:23:40:aa:35:4e:e5:35:d0:b9:a5:f2:
78:98:de:53:51:85:d2:b5:64:d3:a2:a9:32:3f:cc:
d1:7b:fe:38:c7:63:74:a7:1a:90:8a:d1:cc:46:9b:
6c:2f:3a:47:de:7c:fa:2c:a1:7c:79:38:77:42:84:
7f:56:ee:d4:92:3f:67:83:6c:2c:ab:ee:fe:e9:ec:
45:da:bd:41:cd:45:f6:66:79:12:03:e8:49:51:a1:
d0:ca:da:f3:30:06:e2:6b:75:59:70:25:6c:7b:9e:
b9:b3:f2:73:8f:99:3e:2b:e8:92:1e:6a:73:62:7d:
74:98:2e:aa:aa:a8:24:d8:31:51:a6:26:c1:9d:e5:
3b:25:ca:06:2f:e9:7d:9d:ec:b1:af:26:27:8c:1b:
44:c5:53:ae:03:11:4d:82:95:bb:cf:8d:37:e5:73:
69:fc:04:a4:bf:29:d3:e7:2a:a7:26:47:6e:b6:cd:
9f:87:28:91:f7:f8:23:07:71:52:35:b0:00:6f:4b:
20:b0:a2:a0:fd:73:7b:62:59:8f:5d:15:2f:a6:10:
f7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4B:59:CA:A1:3F:91:F6:D9:D9:61:94:60:A4:82:D2:30:5F:AC:42
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/hEtZyqE_kfbZ2WGUYKSC0jBfrEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.209.0/24
131.222.212.0/24
131.222.214.0/24
131.222.224.0/24
131.222.248.0/22
185.157.218.0/23
203.202.233.0/24
IPv6:
2a05:d740::/29
2a06:e900::/29
2a07:4a04::/30
2a0a:37c0::/29
2a0b:9800::/29
2a0b:a280::/29
2a0b:a300::/29
2a0c:7440::/29
2a0c:74c0::/29
2a0c:7540::/29
2a0d:2cc0::/29
2a0d:88c0::/29
2a0f:1180::/29
2a0f:2380::/29
2a0f:3380::/29
2a0f:4580::/29
2a0f:4680::/29
2a0f:5580::/29
2a0f:7100::/29
2a0f:7300::/29
2a0f:7c80::/29
2a0f:9fc0::/29
2a0f:a140::/29
2a0f:a500::/29
2a0f:a700::/29
2a0f:c780::/29
2a14:4080::/29
2a14:4380::/29
2a14:4480::/29
2a14:4980::/29
2a14:4a80::/29
Signature Algorithm: sha256WithRSAEncryption
06:59:44:c5:f5:0a:af:4c:4a:57:85:dc:95:e9:6d:ee:fa:6c:
09:10:e6:91:ea:da:be:de:1f:59:19:92:4a:61:df:fa:88:72:
87:10:00:75:07:a5:aa:14:60:dd:7d:a0:26:c2:33:cb:83:02:
92:94:f3:b2:8a:8d:4c:cc:18:8a:a1:1b:1b:b3:c6:58:92:1f:
d8:80:9b:43:98:9c:48:55:0c:58:7b:a0:1c:b5:07:f7:18:3d:
d0:53:a8:79:86:3c:7e:cf:59:4b:b5:48:54:23:76:73:46:db:
68:e5:9b:34:16:13:9c:bf:5b:96:e4:9e:80:cd:de:f3:d7:fb:
5d:c9:92:8d:50:a1:7f:f2:70:0d:21:f5:57:37:fb:a0:83:49:
19:7e:3c:9c:40:97:d9:fc:c7:55:e3:57:ce:95:35:4f:23:56:
f3:c2:27:92:68:8f:93:73:3f:06:1c:90:2a:85:91:5d:4e:09:
0f:5c:4c:50:3e:75:3e:2f:f4:7d:c8:d8:26:e0:8d:d8:2d:1a:
dc:67:19:bb:73:67:4e:ca:75:7b:60:ba:c5:14:40:cc:02:ab:
96:61:93:1e:bf:3d:a0:e8:91:c2:95:87:fe:b5:09:2f:89:95:
11:ca:42:3d:27:3d:54:96:e2:bd:96:56:1b:12:d6:45:a2:4f:
2b:c6:5b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:07:52 2026 by rpki-client