Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/BOOJwgifZtRIWDuJkBxvnWoyiJ0.roa
File: BOOJwgifZtRIWDuJkBxvnWoyiJ0.roa (raw, json)
Hash identifier: V/G6nvIlcZvYbQSr2QvCL0JgCDmAS2PVZl2IojBI82Y=
Subject key identifier: 04:E3:89:C2:08:9F:66:D4:48:58:3B:89:90:1C:6F:9D:6A:32:88:9D
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019C8510A843C29D75E1018FE5DD82918A3B
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/BOOJwgifZtRIWDuJkBxvnWoyiJ0.roa
Signing time: Sun 22 Feb 2026 11:16:27 +0000
ROA not before: Sun 22 Feb 2026 11:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56582
IP address blocks: 131.222.227.0/24 maxlen: 24
131.222.228.0/24 maxlen: 24
131.222.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:85:10:a8:43:c2:9d:75:e1:01:8f:e5:dd:82:91:8a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Feb 22 11:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04e389c2089f66d448583b89901c6f9d6a32889d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5e:12:8a:8a:e8:76:5b:fd:9b:03:ef:6c:4b:
e4:2c:c4:bf:20:7a:b0:3a:cd:7b:7a:97:61:1d:cd:
28:be:1d:fd:9f:d2:0c:fb:78:7f:a0:c4:79:b7:41:
c9:49:3a:95:89:95:36:ea:f3:5c:9e:bb:0b:09:5d:
a2:34:0e:38:b8:e3:e0:ab:84:8a:69:22:37:56:58:
58:df:73:be:0e:23:a1:b4:ee:94:5b:e9:92:e6:09:
7e:c7:7a:90:d8:f9:4e:f4:16:b1:6d:0a:d0:fe:93:
8f:95:da:eb:db:8f:ec:f2:a7:80:67:68:95:91:09:
1e:c3:f5:3f:61:c4:ad:b7:e3:76:3b:9c:90:5a:35:
cf:cf:8e:d0:ee:6f:3c:29:0f:89:e6:ad:b0:e4:5a:
25:15:fd:86:80:dd:59:3a:47:c5:7e:af:3e:39:bd:
25:3e:5f:a8:c6:0e:60:0e:36:53:26:c8:56:34:22:
1e:3e:51:40:94:3e:f0:86:2e:dd:dc:8f:d5:d2:12:
d8:19:73:de:e4:df:82:0d:3c:9f:f7:5f:b5:a6:5a:
1b:5e:e1:f8:11:13:f2:12:74:26:54:95:0a:d2:1a:
79:62:10:2c:53:9d:3f:9b:eb:83:15:5b:ef:9d:91:
c0:1b:ab:cd:ea:25:6b:92:89:10:55:c2:7c:d8:c8:
95:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E3:89:C2:08:9F:66:D4:48:58:3B:89:90:1C:6F:9D:6A:32:88:9D
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/BOOJwgifZtRIWDuJkBxvnWoyiJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.227.0-131.222.229.255
Signature Algorithm: sha256WithRSAEncryption
0c:83:2d:55:95:3a:c0:15:a0:50:db:fb:c9:99:79:24:d8:00:
73:ce:53:f6:75:cc:71:4d:00:39:3c:07:23:ed:8f:80:6c:f7:
e8:c4:b7:14:0f:9f:3a:42:b7:84:99:95:c8:c4:83:d8:4e:57:
5b:94:a0:86:cf:71:28:82:2e:61:17:51:b1:90:c6:3b:a2:82:
92:d5:69:c2:94:52:d9:65:0a:c2:92:55:13:bc:64:f1:04:82:
2a:88:ce:e8:11:43:65:d9:10:18:67:70:27:75:9c:af:04:aa:
2f:34:9c:4b:3d:ef:13:c3:df:29:65:8c:0d:f5:a7:5a:f6:d1:
6b:61:46:69:e7:ca:00:7e:b9:5f:38:2b:13:e3:2c:ca:6f:2c:
b4:c3:13:fb:41:ea:89:9b:79:19:78:a6:e8:4d:fc:db:98:a1:
3f:fe:d3:78:a5:89:2d:85:a2:a3:55:5d:08:8f:26:e5:c3:fa:
3a:97:8e:70:f4:c6:38:1b:05:ec:9d:38:67:e5:38:dc:ee:73:
1e:ff:46:d4:5a:c8:8b:2d:20:1b:e0:a4:07:6f:a2:94:4d:56:
b4:bd:3a:dd:d9:b6:53:fd:0c:35:8f:a9:a8:0c:f2:97:58:00:
0e:af:81:0f:6c:c0:09:e0:61:72:76:36:87:13:63:04:46:b0:
17:50:bc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:39:52 2026 by rpki-client