Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/p_47JOFF0E01-58j2eofD4s7bIE.roa
File: p_47JOFF0E01-58j2eofD4s7bIE.roa (raw, json)
Hash identifier: LIYnpSfPSlgRvAOMOdRIDdMr7brMsNS9YO3X0bgkaMU=
Subject key identifier: A7:FE:3B:24:E1:45:D0:4D:35:FB:9F:23:D9:EA:1F:0F:8B:3B:6C:81
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019E0983F2C3FB1036C34743227C99C7A1EE
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/p_47JOFF0E01-58j2eofD4s7bIE.roa
Signing time: Fri 08 May 2026 21:35:02 +0000
ROA not before: Fri 08 May 2026 21:35:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 131.222.209.0/24 maxlen: 24
131.222.214.0/24 maxlen: 24
131.222.220.0/24 maxlen: 24
131.222.224.0/24 maxlen: 24
131.222.248.0/22 maxlen: 22
203.202.233.0/24 maxlen: 24
2a05:d740::/30 maxlen: 30
2a05:d744::/30 maxlen: 30
2a06:e900::/30 maxlen: 30
2a06:e904::/30 maxlen: 30
2a07:4a00::/30 maxlen: 30
2a07:4a04::/30 maxlen: 30
2a0a:37c0::/30 maxlen: 30
2a0a:37c4::/30 maxlen: 30
2a0b:9800::/30 maxlen: 30
2a0b:9804::/30 maxlen: 30
2a0b:a280::/30 maxlen: 30
2a0b:a284::/30 maxlen: 30
2a0b:a300::/30 maxlen: 30
2a0b:a304::/30 maxlen: 30
2a0c:7440::/30 maxlen: 30
2a0c:7444::/30 maxlen: 30
2a0c:74c0::/30 maxlen: 30
2a0c:74c4::/30 maxlen: 30
2a0c:7540::/30 maxlen: 30
2a0c:7544::/30 maxlen: 30
2a0d:2cc0::/30 maxlen: 30
2a0d:2cc4::/30 maxlen: 30
2a0d:88c0::/30 maxlen: 30
2a0d:88c4::/30 maxlen: 30
2a0f:1180::/30 maxlen: 30
2a0f:1184::/30 maxlen: 30
2a0f:2380::/30 maxlen: 30
2a0f:2384::/30 maxlen: 30
2a0f:3380::/30 maxlen: 30
2a0f:3384::/30 maxlen: 30
2a0f:4580::/30 maxlen: 30
2a0f:4584::/30 maxlen: 30
2a0f:4680::/30 maxlen: 30
2a0f:4684::/30 maxlen: 30
2a0f:5580::/30 maxlen: 30
2a0f:5584::/30 maxlen: 30
2a0f:7100::/30 maxlen: 30
2a0f:7104::/30 maxlen: 30
2a0f:7300::/30 maxlen: 30
2a0f:7304::/30 maxlen: 30
2a0f:7c80::/30 maxlen: 30
2a0f:7c84::/30 maxlen: 30
2a0f:9fc0::/30 maxlen: 30
2a0f:9fc4::/30 maxlen: 30
2a0f:a140::/30 maxlen: 30
2a0f:a144::/30 maxlen: 30
2a0f:a500::/30 maxlen: 30
2a0f:a504::/30 maxlen: 30
2a0f:a700::/30 maxlen: 30
2a0f:a704::/30 maxlen: 30
2a0f:c780::/30 maxlen: 30
2a0f:c784::/30 maxlen: 30
2a14:4080::/30 maxlen: 30
2a14:4084::/30 maxlen: 30
2a14:4380::/30 maxlen: 30
2a14:4384::/30 maxlen: 30
2a14:4480::/30 maxlen: 30
2a14:4484::/30 maxlen: 30
2a14:4980::/30 maxlen: 30
2a14:4984::/30 maxlen: 30
2a14:4a80::/30 maxlen: 30
2a14:4a84::/30 maxlen: 30
2a14:4b80::/30 maxlen: 30
2a14:4b84::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:09:83:f2:c3:fb:10:36:c3:47:43:22:7c:99:c7:a1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: May 8 21:35:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7fe3b24e145d04d35fb9f23d9ea1f0f8b3b6c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:36:1b:c6:93:b6:e2:28:c9:94:8e:10:45:
e9:9a:4d:57:45:63:38:d8:52:a1:10:01:97:9a:de:
64:e6:2c:7b:a1:18:9d:5f:28:ac:32:2e:42:25:40:
08:fd:c1:87:d7:e7:14:db:86:f0:d8:dc:08:7c:85:
cc:9d:22:d1:1d:db:46:e1:d9:33:af:9e:1c:61:3c:
71:9c:84:90:c1:ce:33:30:77:ed:04:e4:b1:12:76:
08:c0:b9:67:f6:ab:f4:23:df:dc:c2:71:85:24:f8:
a4:c7:05:b8:8a:5c:cb:1f:eb:87:9d:6c:b9:05:d3:
51:05:4a:82:4b:a8:07:ca:0a:85:cd:36:f4:c9:35:
a3:44:04:03:24:40:54:5f:6c:2b:1c:a0:fd:25:80:
16:e6:c2:ce:cb:ea:ea:50:dc:a1:f8:92:d3:9d:a1:
cc:d4:3b:c5:04:29:94:02:53:9d:e3:06:67:bf:db:
64:ca:b4:8d:80:0d:3e:3e:9d:e0:6c:0a:24:b5:ad:
f1:20:92:ed:94:cf:25:3c:1f:88:8a:4d:1f:ff:f3:
3f:00:0d:ab:94:c8:02:bb:d8:56:9c:59:d4:2b:e1:
86:1a:db:86:2a:98:8a:9e:83:11:4e:da:df:ed:51:
d8:06:6b:c1:ec:50:13:0d:a4:7f:ac:d7:91:8a:38:
cf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FE:3B:24:E1:45:D0:4D:35:FB:9F:23:D9:EA:1F:0F:8B:3B:6C:81
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/p_47JOFF0E01-58j2eofD4s7bIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.209.0/24
131.222.214.0/24
131.222.220.0/24
131.222.224.0/24
131.222.248.0/22
203.202.233.0/24
IPv6:
2a05:d740::/29
2a06:e900::/29
2a07:4a00::/29
2a0a:37c0::/29
2a0b:9800::/29
2a0b:a280::/29
2a0b:a300::/29
2a0c:7440::/29
2a0c:74c0::/29
2a0c:7540::/29
2a0d:2cc0::/29
2a0d:88c0::/29
2a0f:1180::/29
2a0f:2380::/29
2a0f:3380::/29
2a0f:4580::/29
2a0f:4680::/29
2a0f:5580::/29
2a0f:7100::/29
2a0f:7300::/29
2a0f:7c80::/29
2a0f:9fc0::/29
2a0f:a140::/29
2a0f:a500::/29
2a0f:a700::/29
2a0f:c780::/29
2a14:4080::/29
2a14:4380::/29
2a14:4480::/29
2a14:4980::/29
2a14:4a80::/29
2a14:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
28:8f:f3:85:1e:a3:29:6c:93:07:f9:8e:25:d5:4f:93:33:fe:
4c:ec:1b:1a:bf:56:4d:bb:5c:7c:1b:1b:42:86:14:49:a3:47:
22:7f:2a:35:24:d3:44:bb:34:a5:3f:df:fc:eb:65:3d:25:02:
cc:cf:59:f8:4b:55:54:17:9a:4d:21:75:34:75:e2:b0:7d:b8:
21:61:53:77:02:d3:10:f4:40:5a:40:97:05:d8:a1:09:8c:97:
b5:0c:cf:6a:d4:bd:f7:64:14:d0:b7:1f:22:92:55:2c:bc:dc:
7b:aa:b4:05:d1:cf:81:c9:cf:28:b9:c9:66:43:ac:62:5c:20:
c6:e2:2b:6a:31:09:de:e3:d3:af:8d:db:6e:18:01:9d:85:ff:
8d:60:92:92:40:42:03:b4:00:cd:7b:7a:e8:ab:5f:bd:e2:3a:
07:55:7f:be:56:23:e9:0a:d9:58:d7:b3:da:5f:55:51:0a:9e:
3d:65:a9:92:c1:63:87:6b:15:55:0f:ee:2e:6a:be:21:72:b9:
cf:87:3b:73:6a:c6:68:ea:75:ef:bf:03:f7:f0:d8:63:f3:26:
34:f4:8c:cb:ab:26:64:b5:cd:87:27:c4:be:88:45:e7:54:29:
23:b0:82:d8:9c:c9:f2:bf:14:d6:ef:2d:63:65:f4:50:ca:4d:
69:e5:6e:40
-----BEGIN CERTIFICATE-----
MIIGCzCCBPOgAwIBAgISAZ4Jg/LD+xA2w0dDInyZx6HuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjYwNTA4MjEzNTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2ZlM2IyNGUxNDVkMDRkMzVmYjlmMjNkOWVhMWYwZjhiM2I2YzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV82G8aTtuIoyZSOEEXpmk1XRWM4
2FKhEAGXmt5k5ix7oRidXyisMi5CJUAI/cGH1+cU24bw2NwIfIXMnSLRHdtG4dkz
r54cYTxxnISQwc4zMHftBOSxEnYIwLln9qv0I9/cwnGFJPikxwW4ilzLH+uHnWy5
BdNRBUqCS6gHygqFzTb0yTWjRAQDJEBUX2wrHKD9JYAW5sLOy+rqUNyh+JLTnaHM
1DvFBCmUAlOd4wZnv9tkyrSNgA0+Pp3gbAokta3xIJLtlM8lPB+Iik0f//M/AA2r
lMgCu9hWnFnUK+GGGtuGKpiKnoMRTtrf7VHYBmvB7FATDaR/rNeRijjPpQIDAQAB
o4IDFzCCAxMwHQYDVR0OBBYEFKf+OyThRdBNNfufI9nqHw+LO2yBMB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvcF80N0pPRkYwRTAxLTU4ajJlb2ZENHM3YklFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBKwYIKwYBBQUHAQcBAf8EggEaMIIBFjAqBAIAATAkAwQA
g97RAwQAg97WAwQAg97cAwQAg97gAwQCg974AwQAy8rpMIHnBAIAAjCB4AMFAyoF
10ADBQMqBukAAwUDKgdKAAMFAyoKN8ADBQMqC5gAAwUDKguigAMFAyoLowADBQMq
DHRAAwUDKgx0wAMFAyoMdUADBQMqDSzAAwUDKg2IwAMFAyoPEYADBQMqDyOAAwUD
Kg8zgAMFAyoPRYADBQMqD0aAAwUDKg9VgAMFAyoPcQADBQMqD3MAAwUDKg98gAMF
AyoPn8ADBQMqD6FAAwUDKg+lAAMFAyoPpwADBQMqD8eAAwUDKhRAgAMFAyoUQ4AD
BQMqFESAAwUDKhRJgAMFAyoUSoADBQMqFEuAMA0GCSqGSIb3DQEBCwUAA4IBAQAo
j/OFHqMpbJMH+Y4l1U+TM/5M7Bsav1ZNu1x8GxtChhRJo0cifyo1JNNEuzSlP9/8
62U9JQLMz1n4S1VUF5pNIXU0deKwfbghYVN3AtMQ9EBaQJcF2KEJjJe1DM9q1L33
ZBTQtx8iklUsvNx7qrQF0c+Byc8ouclmQ6xiXCDG4itqMQne49OvjdtuGAGdhf+N
YJKSQEIDtADNe3roq1+94joHVX++ViPpCtlY17PaX1VRCp49ZamSwWOHaxVVD+4u
ar4hcrnPhztzasZo6nXvvwP38Nhj8yY09IzLqyZktc2HJ8S+iEXnVCkjsILYnMny
vxTW7y1jZfRQyk1p5W5A
-----END CERTIFICATE-----
Generated at Wed May 13 00:34:12 2026 by rpki-client