Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/9ouTpRXko3YlvkaiRjw1itJUuUs.roa
File: 9ouTpRXko3YlvkaiRjw1itJUuUs.roa (raw, json)
Hash identifier: RGUF99UKxmAJ27xRbQTvqiTs8v0Bgu29SVLvzHCLnw8=
Subject key identifier: F6:8B:93:A5:15:E4:A3:76:25:BE:46:A2:46:3C:35:8A:D2:54:B9:4B
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 019C950D0FCE93009EA09B2F6231E2A4F9BD
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/9ouTpRXko3YlvkaiRjw1itJUuUs.roa
Signing time: Wed 25 Feb 2026 13:46:27 +0000
ROA not before: Wed 25 Feb 2026 13:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 131.222.192.0/24 maxlen: 24
131.222.193.0/24 maxlen: 24
131.222.194.0/24 maxlen: 24
131.222.195.0/24 maxlen: 24
131.222.196.0/24 maxlen: 24
131.222.197.0/24 maxlen: 24
131.222.198.0/24 maxlen: 24
131.222.199.0/24 maxlen: 24
131.222.200.0/24 maxlen: 24
131.222.201.0/24 maxlen: 24
131.222.202.0/24 maxlen: 24
131.222.203.0/24 maxlen: 24
131.222.204.0/24 maxlen: 24
131.222.205.0/24 maxlen: 24
131.222.206.0/24 maxlen: 24
131.222.207.0/24 maxlen: 24
131.222.208.0/24 maxlen: 24
131.222.209.0/24 maxlen: 24
131.222.210.0/24 maxlen: 24
131.222.211.0/24 maxlen: 24
131.222.212.0/24 maxlen: 24
131.222.213.0/24 maxlen: 24
131.222.214.0/24 maxlen: 24
131.222.215.0/24 maxlen: 24
131.222.216.0/24 maxlen: 24
131.222.217.0/24 maxlen: 24
131.222.218.0/24 maxlen: 24
131.222.219.0/24 maxlen: 24
131.222.220.0/24 maxlen: 24
131.222.221.0/24 maxlen: 24
131.222.222.0/24 maxlen: 24
131.222.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:0d:0f:ce:93:00:9e:a0:9b:2f:62:31:e2:a4:f9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Feb 25 13:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f68b93a515e4a37625be46a2463c358ad254b94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:3e:c1:4d:86:b3:37:3f:e7:f1:b4:4a:90:
ff:4e:93:3c:0b:d6:6e:9b:ad:26:33:8c:b8:70:c4:
1f:75:5c:df:02:7f:c7:ab:16:b4:d0:59:87:5b:f2:
5c:b7:f6:24:ee:6c:d7:47:04:a3:8b:b0:a5:87:2d:
5c:99:2c:8b:9b:08:ba:9d:13:c0:b7:6d:97:86:79:
3a:52:a6:09:92:10:34:4f:84:5c:fc:3c:e3:a2:95:
af:ad:a8:83:4c:71:55:8f:91:a0:69:c9:cf:9a:0c:
eb:b6:23:ce:56:8c:b8:31:37:25:78:4b:c5:8c:dd:
fa:ac:b6:5f:72:b8:bb:b9:f0:c6:c4:0c:46:ac:19:
7a:1a:17:30:57:a3:bb:f2:f0:a7:d0:78:dc:f1:47:
fd:59:b2:21:3e:b1:50:43:57:af:4d:94:59:86:b2:
70:3e:e8:f8:20:bd:70:cf:c4:f1:7d:7a:80:be:0b:
9d:4a:be:90:a8:3f:dd:0b:6a:72:f3:07:7c:d5:e3:
0c:52:ad:80:54:fb:a3:0b:6e:08:5a:19:27:43:c2:
e4:e9:40:93:f3:77:a6:ae:1a:d8:50:77:4b:13:83:
58:cc:83:ea:20:eb:d2:ba:4d:3f:f7:89:b7:b0:44:
78:ea:a1:42:3c:8e:6a:b9:5a:91:c1:c5:8a:eb:15:
1e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8B:93:A5:15:E4:A3:76:25:BE:46:A2:46:3C:35:8A:D2:54:B9:4B
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/9ouTpRXko3YlvkaiRjw1itJUuUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.192.0/19
Signature Algorithm: sha256WithRSAEncryption
bc:2a:6d:f2:e0:51:d9:ea:ce:77:2c:c4:f5:db:27:8b:84:40:
c6:5c:bd:8c:f9:8f:5a:dd:4f:ad:f6:32:c7:1b:a3:a3:bc:81:
30:8c:e7:f5:17:26:c3:06:d0:f2:19:c7:9e:69:40:cf:6a:3e:
72:c5:9d:16:81:45:ea:85:d7:e9:5b:38:ec:e1:84:3d:9f:54:
0f:a3:6e:46:1b:d7:1c:e0:63:b9:df:18:99:a0:ba:8a:65:3b:
bb:01:50:0b:7a:b0:39:6b:2f:60:43:77:2c:3d:68:c1:af:87:
33:fc:73:fb:cb:fb:72:79:9f:95:e4:c0:57:d9:29:cb:5c:0c:
a3:ab:e0:e6:65:be:c1:05:c8:36:8a:0e:fb:c3:12:7d:6f:7a:
77:76:8b:a0:e8:99:af:53:a3:e7:f7:c1:94:be:5d:b2:0a:ef:
1b:e3:88:d0:16:f4:5f:ae:c6:18:3c:c2:ad:3f:2f:75:7f:ab:
50:ac:93:41:84:33:7e:17:b0:4b:5d:05:9f:20:05:cb:ad:c3:
b3:cf:4c:29:ed:ae:38:9b:41:b6:67:a6:57:2e:cd:bb:6b:22:
3b:c9:8b:39:95:9c:5c:50:25:47:4e:5c:61:b4:68:02:7b:a4:
41:6d:21:a5:27:73:5a:85:01:ba:e9:1b:b0:59:22:83:a9:3e:
54:95:27:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:33:14 2026 by rpki-client