Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/29Rv_UEl6-ilxixgPbwouEBeR9I.roa
File: 29Rv_UEl6-ilxixgPbwouEBeR9I.roa (raw, json)
Hash identifier: NqpV6epyV/V/BxqmnDQYUJhls660HR8Q3Pqa7VupQfg=
Subject key identifier: DB:D4:6F:FD:41:25:EB:E8:A5:C6:2C:60:3D:BC:28:B8:40:5E:47:D2
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019C47B3D2ED622DA9BB194EB7E49A380236
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/29Rv_UEl6-ilxixgPbwouEBeR9I.roa
Signing time: Tue 10 Feb 2026 13:18:13 +0000
ROA not before: Tue 10 Feb 2026 13:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202561
IP address blocks: 131.222.246.0/24 maxlen: 24
131.222.247.0/24 maxlen: 24
131.222.248.0/24 maxlen: 24
131.222.249.0/24 maxlen: 24
131.222.250.0/24 maxlen: 24
131.222.251.0/24 maxlen: 24
131.222.252.0/24 maxlen: 24
131.222.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:47:b3:d2:ed:62:2d:a9:bb:19:4e:b7:e4:9a:38:02:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Feb 10 13:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbd46ffd4125ebe8a5c62c603dbc28b8405e47d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:07:d0:4e:d7:ba:b1:a0:35:21:56:78:07:4c:
9c:db:4c:f8:b7:9a:3d:d8:fc:9b:35:55:4f:cc:36:
f7:89:6f:25:34:df:f4:9a:a6:ad:b9:21:af:00:c0:
34:db:3d:a8:f1:b3:0c:7a:9f:82:c0:31:24:ce:72:
3f:fb:f1:1f:48:e7:30:f5:af:05:c8:9e:26:89:6d:
cd:ab:a9:1b:c7:17:77:06:76:c8:df:98:6f:5a:6e:
a0:7a:7a:65:19:a0:5b:d6:31:f7:cb:38:51:a1:33:
d6:58:e2:e7:23:21:3b:6a:fb:0e:70:85:81:66:57:
60:63:79:5d:53:5b:8a:6a:c0:c8:fa:3f:61:f5:00:
2d:a8:94:3e:47:8a:2e:36:50:4f:45:2f:a3:40:31:
ed:6e:42:19:95:4b:2c:11:9b:c7:2d:60:ac:fd:e1:
16:85:d9:e0:ad:f9:40:58:66:2e:15:08:89:cc:8c:
da:cf:90:1d:58:16:39:a5:68:c3:c9:16:7f:d5:37:
c7:2f:d1:b5:f9:29:f9:f5:51:05:1f:7d:8d:55:49:
50:e5:71:c4:87:14:9c:f1:6d:d4:84:f3:d7:09:a4:
24:b0:9f:c3:1b:95:51:36:88:36:8f:9f:41:ea:e3:
21:71:11:a4:6c:d6:a7:c0:4d:95:cd:21:c0:ce:4d:
48:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D4:6F:FD:41:25:EB:E8:A5:C6:2C:60:3D:BC:28:B8:40:5E:47:D2
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/29Rv_UEl6-ilxixgPbwouEBeR9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.246.0-131.222.253.255
Signature Algorithm: sha256WithRSAEncryption
36:b2:87:ea:66:be:59:1e:8f:63:77:2e:fe:4c:b6:ef:85:42:
b0:dc:6a:ab:61:e8:0f:6c:8a:a6:46:95:57:41:4a:e6:c0:4e:
7e:fb:8e:29:99:cb:36:22:c8:c8:e2:cc:0a:ec:55:e5:57:e2:
60:f3:b5:00:c7:ed:13:b4:c5:6c:83:9c:83:8d:cc:2e:73:52:
66:56:46:bb:2a:80:81:fd:34:f3:4d:6c:33:a1:5f:13:9c:2c:
c1:e1:b5:53:45:b3:33:d9:5f:8a:67:16:51:b0:5b:64:b4:9c:
6f:54:94:1e:34:0e:1f:c3:d0:6e:e4:c9:6c:e7:06:91:57:e8:
0f:89:0b:ac:ec:b7:75:cd:59:e0:54:8f:0a:22:cd:d9:e3:dc:
41:b2:71:59:77:24:7e:03:0b:e4:af:24:c6:ca:9f:ce:f5:4d:
45:19:a4:d1:f7:70:86:63:fe:69:8c:bc:6f:46:02:9c:13:fb:
33:34:d8:c7:57:c0:39:fc:20:1f:46:a4:da:fd:09:04:90:17:
40:0d:da:57:e2:61:a8:dc:53:fb:ad:08:f6:da:ee:99:07:40:
fe:d9:5c:26:81:64:d4:61:f3:60:bc:3c:12:58:5c:ef:db:fc:
db:2d:f3:0e:c1:17:09:72:1b:63:43:18:dc:64:90:a5:ae:51:
8c:6f:93:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:49:39 2026 by rpki-client