Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/y7h0yERjcdv4epRhEuweuKMboIE.roa
File: y7h0yERjcdv4epRhEuweuKMboIE.roa (raw, json)
Hash identifier: 06y4kV4+l/1tvhklUQAmaFlpGaz382dT//BZSxQo5qA=
Subject key identifier: CB:B8:74:C8:44:63:71:DB:F8:7A:94:61:12:EC:1E:B8:A3:1B:A0:81
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 019D9035980EBE21CE3AAB0995E35FDD7DA3
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/y7h0yERjcdv4epRhEuweuKMboIE.roa
Signing time: Wed 15 Apr 2026 08:15:24 +0000
ROA not before: Wed 15 Apr 2026 08:15:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 131.222.194.0/24 maxlen: 24
131.222.195.0/24 maxlen: 24
131.222.200.0/24 maxlen: 24
131.222.202.0/24 maxlen: 24
131.222.203.0/24 maxlen: 24
131.222.204.0/24 maxlen: 24
131.222.205.0/24 maxlen: 24
131.222.206.0/24 maxlen: 24
131.222.207.0/24 maxlen: 24
131.222.222.0/24 maxlen: 24
131.222.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:35:98:0e:be:21:ce:3a:ab:09:95:e3:5f:dd:7d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Apr 15 08:15:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbb874c8446371dbf87a946112ec1eb8a31ba081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3d:bb:82:b4:f7:b8:55:fe:90:69:02:76:a3:
e3:a8:3b:6a:62:de:a7:13:15:64:9a:80:f9:26:c6:
f7:2d:48:dc:c3:c7:d7:d5:35:62:d7:27:88:3d:cd:
f6:be:83:67:57:83:d5:ec:bf:5b:00:9c:52:86:11:
9a:24:1a:e8:68:a9:b8:e5:6a:7a:67:b6:af:65:ae:
7a:9b:ce:84:71:8f:ce:9f:49:82:4a:ab:07:20:36:
23:2c:68:f7:9d:11:81:0d:e8:21:23:c7:44:df:bb:
1e:f9:8d:4d:83:f5:3f:30:82:8b:f7:65:e0:c5:20:
04:74:31:0f:6c:a2:bc:42:f9:2e:b6:0b:4c:9a:d2:
77:56:a3:87:08:33:e0:ac:54:27:ca:3d:dd:35:59:
ca:5a:16:05:12:d2:f4:0e:83:6b:51:34:6c:67:73:
a5:44:e8:b2:8f:92:ab:91:40:ba:0a:ed:d8:7e:a6:
ce:d6:09:c0:ae:df:bf:35:e3:d7:40:b0:ea:2c:58:
45:c7:a4:c6:14:8c:5d:1d:ea:5a:ca:7a:dd:34:33:
c9:4e:9e:fe:95:03:da:0f:99:94:6b:4f:c5:22:d2:
4e:e9:05:9f:c3:0e:7d:a2:9a:cf:ee:66:3f:53:29:
df:a6:c0:ef:b1:8e:b6:dd:09:03:44:9f:1a:04:43:
7a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B8:74:C8:44:63:71:DB:F8:7A:94:61:12:EC:1E:B8:A3:1B:A0:81
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/y7h0yERjcdv4epRhEuweuKMboIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.194.0/23
131.222.200.0/24
131.222.202.0-131.222.207.255
131.222.222.0/23
Signature Algorithm: sha256WithRSAEncryption
05:92:f8:10:d8:3a:80:ac:12:15:77:d8:89:42:91:3d:ff:bd:
0a:7b:d3:ba:ea:16:4d:a1:58:c9:dd:a5:41:52:f7:37:69:bf:
01:5f:37:7f:27:63:c5:e7:94:b0:0e:dd:49:91:ba:7b:ad:d7:
cd:06:e8:9c:30:17:b7:e9:20:e7:81:f5:5e:62:19:25:8d:8d:
50:0e:ca:8b:72:26:0d:29:37:e2:6c:69:93:d1:5d:14:a5:7b:
14:97:78:cf:1e:fc:56:a1:55:42:f7:15:a3:9c:a6:90:54:f0:
e5:c0:47:64:ed:70:24:7e:01:ea:2a:bd:c3:79:90:b3:c4:49:
6b:1a:d6:f5:2c:76:4b:c5:86:c9:95:67:22:8d:a4:06:f5:c2:
04:bf:96:60:fc:a8:b9:2c:c5:74:07:2b:1e:fe:2d:29:65:09:
48:4b:52:06:e8:a6:87:5a:2e:fa:94:0e:66:9e:93:bc:fd:ad:
58:b9:19:5f:c4:1e:ec:db:ab:c0:a5:3b:fe:b0:8d:15:cb:53:
99:50:63:15:74:d5:ce:13:b9:a1:d7:5d:43:0a:43:54:86:a0:
c2:a3:e7:ed:08:8c:6b:27:99:db:29:21:57:0f:97:65:26:a9:
5f:ae:66:d8:b6:de:17:56:55:1e:bd:6b:df:a0:b5:ad:48:b4:
2a:1a:d4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:30:27 2026 by rpki-client