Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/rkqbD4HeLY4fECgG4UCjCwTiZaY.roa
File: rkqbD4HeLY4fECgG4UCjCwTiZaY.roa (raw, json)
Hash identifier: rtmOzCRpMS+pQkVbuV9E2mfbRX0MvxLvH1ZciUH4P8I=
Subject key identifier: AE:4A:9B:0F:81:DE:2D:8E:1F:10:28:06:E1:40:A3:0B:04:E2:65:A6
Certificate issuer: /CN=df7f2e0ea52d9e46ed7104853c6d51465aaca367
Certificate serial: 019DD4839FF4E722DB53CB1759711B0207A2
Authority key identifier: DF:7F:2E:0E:A5:2D:9E:46:ED:71:04:85:3C:6D:51:46:5A:AC:A3:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/338uDqUtnkbtcQSFPG1RRlqso2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/rkqbD4HeLY4fECgG4UCjCwTiZaY.roa
Signing time: Tue 28 Apr 2026 14:34:49 +0000
ROA not before: Tue 28 Apr 2026 14:34:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199934
IP address blocks: 131.222.196.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/338uDqUtnkbtcQSFPG1RRlqso2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:83:9f:f4:e7:22:db:53:cb:17:59:71:1b:02:07:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7f2e0ea52d9e46ed7104853c6d51465aaca367
Validity
Not Before: Apr 28 14:34:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae4a9b0f81de2d8e1f102806e140a30b04e265a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fa:2b:64:7a:16:1c:74:83:79:92:1f:1d:4e:
ea:a0:51:55:87:2e:65:0b:c3:6b:54:c5:53:8a:a6:
0b:57:4e:ff:4f:ba:48:4b:81:72:16:6c:b9:54:60:
9b:3b:72:bb:f2:e4:85:21:55:35:ac:d3:0e:f7:69:
86:dd:0d:a6:49:7d:a0:87:19:de:b4:2d:f5:3a:7c:
65:91:5d:b1:ca:78:49:83:8c:12:c4:f4:60:de:c2:
71:81:e6:3d:e4:5b:df:2b:6e:46:90:f8:fd:7b:54:
5f:79:d9:61:46:96:bb:d4:22:44:36:88:cb:c2:38:
c2:b2:70:bb:55:f2:d1:7b:a4:33:6c:ab:74:4b:77:
a7:be:cc:e0:83:ca:0d:ed:9f:e6:47:5d:2a:9a:1f:
3f:95:51:35:39:da:f8:59:a0:00:0a:6f:b6:bd:a1:
58:37:09:fb:de:a1:53:9d:11:e6:ea:9d:59:14:aa:
f2:ea:44:f9:85:2b:9d:19:1a:92:51:01:3e:60:e1:
53:b2:49:39:66:0d:a0:8f:13:99:ea:67:3b:94:18:
6b:3a:6a:11:cc:03:6e:b8:6a:98:87:1e:b5:e1:83:
82:e0:f6:16:67:fe:31:da:a1:98:95:7d:0c:77:f6:
e6:97:bd:3e:ef:70:43:e2:c6:20:a3:d3:c5:5b:57:
2b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4A:9B:0F:81:DE:2D:8E:1F:10:28:06:E1:40:A3:0B:04:E2:65:A6
X509v3 Authority Key Identifier:
keyid:DF:7F:2E:0E:A5:2D:9E:46:ED:71:04:85:3C:6D:51:46:5A:AC:A3:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/338uDqUtnkbtcQSFPG1RRlqso2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/rkqbD4HeLY4fECgG4UCjCwTiZaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.196.0/23
Signature Algorithm: sha256WithRSAEncryption
63:22:63:60:d2:90:3d:47:2c:29:6c:3f:a0:b6:45:78:8b:e3:
04:11:6d:c1:76:ad:a1:f0:46:b5:f0:01:ab:57:b9:34:54:ad:
06:cd:26:d0:88:4e:cb:fe:2e:00:cd:1f:0f:22:ae:4c:84:fd:
5f:3f:f4:c8:af:66:c6:12:c0:8c:b6:a1:a1:94:48:04:57:a9:
ea:86:8d:3d:ad:ac:f9:d2:09:bd:25:3f:9b:e1:7d:70:4f:8c:
36:d1:5a:5b:de:10:69:1b:34:49:e5:69:d9:f5:54:bd:32:26:
12:4b:4b:d9:33:c8:50:98:ed:0b:e2:53:ab:57:8c:f4:b8:fc:
16:6f:95:75:b5:bf:56:74:0d:d6:75:dd:bd:d9:d8:8c:45:71:
55:78:8a:c0:fb:bb:a2:9b:b2:a6:53:22:be:cc:ff:ed:b7:e1:
f8:35:6a:8a:bc:1b:ab:ce:50:43:22:29:65:c6:46:0b:ed:3d:
ad:90:17:77:eb:7a:f3:0e:3a:68:fd:a0:4e:72:45:0d:36:c5:
6f:c1:2f:13:78:7a:88:e6:88:0c:90:ce:01:8f:60:30:90:17:
76:9e:1e:f8:5f:05:15:c7:ad:a0:55:dd:94:03:96:3a:06:86:
b4:b6:55:86:54:a0:c8:ac:8c:65:4a:b8:98:59:5d:e6:0f:8f:
38:ca:33:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3Ug5/05yLbU8sXWXEbAgeiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmN2YyZTBlYTUyZDllNDZlZDcxMDQ4NTNjNmQ1MTQ2NWFh
Y2EzNjcwHhcNMjYwNDI4MTQzNDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTRhOWIwZjgxZGUyZDhlMWYxMDI4MDZlMTQwYTMwYjA0ZTI2NWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnforZHoWHHSDeZIfHU7qoFFVhy5l
C8NrVMVTiqYLV07/T7pIS4FyFmy5VGCbO3K78uSFIVU1rNMO92mG3Q2mSX2ghxne
tC31OnxlkV2xynhJg4wSxPRg3sJxgeY95FvfK25GkPj9e1RfedlhRpa71CJENojL
wjjCsnC7VfLRe6QzbKt0S3envszgg8oN7Z/mR10qmh8/lVE1Odr4WaAACm+2vaFY
Nwn73qFTnRHm6p1ZFKry6kT5hSudGRqSUQE+YOFTskk5Zg2gjxOZ6mc7lBhrOmoR
zANuuGqYhx614YOC4PYWZ/4x2qGYlX0Md/bml70+73BD4sYgo9PFW1crRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK5Kmw+B3i2OHxAoBuFAowsE4mWmMB8GA1UdIwQY
MBaAFN9/Lg6lLZ5G7XEEhTxtUUZarKNnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzM4dURxVXRua2J0Y1FTRlBHMVJSbHFzbzJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84NzllNDEtOWExZC00OWFiLTg1NDct
MDVhZGIwOGY5YTY5LzEvcmtxYkQ0SGVMWTRmRUNnRzRVQ2pDd1RpWmFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84NzllNDEtOWExZC00OWFiLTg1NDctMDVhZGIwOGY5YTY5
LzEvMzM4dURxVXRua2J0Y1FTRlBHMVJSbHFzbzJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg97EMA0G
CSqGSIb3DQEBCwUAA4IBAQBjImNg0pA9RywpbD+gtkV4i+MEEW3Bdq2h8Ea18AGr
V7k0VK0GzSbQiE7L/i4AzR8PIq5MhP1fP/TIr2bGEsCMtqGhlEgEV6nqho09raz5
0gm9JT+b4X1wT4w20Vpb3hBpGzRJ5WnZ9VS9MiYSS0vZM8hQmO0L4lOrV4z0uPwW
b5V1tb9WdA3Wdd292diMRXFVeIrA+7uim7KmUyK+zP/tt+H4NWqKvBurzlBDIill
xkYL7T2tkBd363rzDjpo/aBOckUNNsVvwS8TeHqI5ogMkM4Bj2AwkBd2nh74XwUV
x62gVd2UA5Y6Boa0tlWGVKDIrIxlSriYWV3mD484yjNT
-----END CERTIFICATE-----
Generated at Wed May 13 03:48:51 2026 by rpki-client