Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/G31aaGd5LlY50IGLO6eQwT_sz54.roa
File: G31aaGd5LlY50IGLO6eQwT_sz54.roa (raw, json)
Hash identifier: J+TTKw7LlUBt9s2Q/PONP/L4s5aJKpFWg7AH4f8ZIRU=
Subject key identifier: 1B:7D:5A:68:67:79:2E:56:39:D0:81:8B:3B:A7:90:C1:3F:EC:CF:9E
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A0A5651499FE8ECFE1F3138F5224A24D55
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/G31aaGd5LlY50IGLO6eQwT_sz54.roa
Signing time: Tue 15 Sep 2026 14:07:40 +0000
ROA not before: Tue 15 Sep 2026 14:07:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 131.222.203.0/24 maxlen: 24
131.222.206.0/24 maxlen: 24
131.222.222.0/24 maxlen: 24
153.56.212.0/22 maxlen: 24
153.56.216.0/22 maxlen: 24
153.56.220.0/24 maxlen: 24
153.56.223.0/24 maxlen: 24
153.56.224.0/23 maxlen: 24
153.56.228.0/22 maxlen: 24
153.56.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:65:14:99:fe:8e:cf:e1:f3:13:8f:52:24:a2:4d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Sep 15 14:07:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b7d5a6867792e5639d0818b3ba790c13feccf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e3:22:e4:0f:57:85:56:1f:f2:9e:bc:a5:a8:
ef:61:a5:74:a6:b4:98:17:ef:fc:a8:44:15:70:27:
c3:d8:43:64:4e:90:83:8a:ed:04:99:b7:45:4b:77:
b5:9e:d2:f5:1d:7a:b4:8c:71:23:18:b8:b0:d2:c4:
cf:8e:7c:c0:06:56:33:ce:4c:40:6f:15:f8:6b:ce:
d6:69:20:63:c8:33:8f:a9:92:8f:0a:bb:a6:ad:0f:
fb:17:c9:53:5b:f2:ce:15:f5:2a:ea:90:0f:da:76:
43:6a:90:ed:74:bd:5e:ed:44:4d:7e:a4:04:30:72:
2e:2a:62:2e:18:ce:0d:83:09:86:56:d1:e8:8a:a2:
f4:4b:72:4e:42:7a:50:3b:12:19:96:84:56:0f:fe:
1f:f6:9f:6b:1c:5f:06:cf:23:a5:bb:7d:63:74:de:
d8:5c:95:7e:7c:b4:bf:ad:cc:61:15:9a:e2:a9:7d:
0f:42:fd:eb:63:bd:72:af:5b:18:e3:fd:ae:9e:8e:
1a:96:88:aa:9a:49:4e:2e:43:fd:46:59:fa:ff:fa:
91:74:c4:85:c4:31:6c:03:18:9d:9d:4a:87:53:97:
d1:cb:f4:d5:fa:2a:97:b4:6c:bd:df:3b:06:13:a3:
6a:b8:86:3b:d7:52:f6:7c:f2:81:36:cb:6b:6f:20:
89:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7D:5A:68:67:79:2E:56:39:D0:81:8B:3B:A7:90:C1:3F:EC:CF:9E
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/G31aaGd5LlY50IGLO6eQwT_sz54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.203.0/24
131.222.206.0/24
131.222.222.0/24
153.56.212.0-153.56.220.255
153.56.223.0-153.56.225.255
153.56.228.0-153.56.239.255
Signature Algorithm: sha256WithRSAEncryption
02:d8:e5:7b:28:ae:18:88:2d:1e:f2:dc:fd:42:c6:8d:1b:c5:
43:04:07:3e:d6:e0:3a:b0:06:20:5b:46:8b:e2:1b:45:0b:0d:
f5:b9:fb:2c:f7:5c:8d:c9:eb:ba:91:8c:bf:dd:86:38:bb:a1:
07:55:3e:d6:aa:aa:d7:2a:af:5e:5c:43:37:5d:0a:9e:d5:3b:
82:9e:31:bd:ab:40:1c:cd:fd:06:23:90:30:b7:c5:b8:0e:39:
1a:64:06:71:8f:ce:13:9d:ec:56:80:0b:4e:57:2c:9b:1a:f7:
ce:52:7f:bb:6e:d1:9d:51:a8:19:c1:db:98:e1:6a:15:46:7d:
78:2e:b0:21:f4:dc:e4:97:26:c0:86:94:0d:5c:28:6b:85:b3:
5d:e8:e7:c2:ad:80:f5:84:07:38:08:ab:96:b2:68:a8:36:59:
5b:ef:65:2f:d6:41:8a:55:c3:16:b6:1f:12:02:86:2d:af:bb:
6c:7b:36:17:b9:a5:35:f8:00:8a:97:ae:39:4e:c3:15:1f:db:
03:42:99:b2:4b:ab:f3:58:13:19:9b:e2:f6:3a:58:f0:91:52:
75:92:0e:8c:b1:60:ed:b0:e8:8a:b0:41:10:c2:ce:97:09:58:
6a:22:b4:d3:bd:ca:09:c2:cd:e0:0d:e7:6b:5e:42:4d:a5:0b:
e7:b5:e5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:29:51 2026 by rpki-client