Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/IcS9gzH0eVbJZYVzF-ivAp7O2rU.roa
File: IcS9gzH0eVbJZYVzF-ivAp7O2rU.roa (raw, json)
Hash identifier: 0hau0OArhlXEWJAb5CUvyK22h+wU1rPbDc4uf9VrqFg=
Subject key identifier: 21:C4:BD:83:31:F4:79:56:C9:65:85:73:17:E8:AF:02:9E:CE:DA:B5
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A0A54AAF9A6A1CAA5E1C71A2ED5E1E3E55
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/IcS9gzH0eVbJZYVzF-ivAp7O2rU.roa
Signing time: Tue 15 Sep 2026 13:38:50 +0000
ROA not before: Tue 15 Sep 2026 13:38:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214095
IP address blocks: 131.222.213.0/24 maxlen: 24
131.222.221.0/24 maxlen: 24
131.222.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:4a:af:9a:6a:1c:aa:5e:1c:71:a2:ed:5e:1e:3e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Sep 15 13:38:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21c4bd8331f47956c965857317e8af029ecedab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:35:68:27:ca:ea:1f:18:4b:a2:4c:b3:a6:dd:
b8:33:c8:5c:7f:25:c7:77:67:f1:9a:6f:bc:27:74:
61:6a:37:55:42:39:6e:55:92:04:cc:9a:b2:d9:c1:
a9:84:81:d0:a6:95:0f:6c:a4:cb:16:6d:a3:be:31:
a5:4e:b8:c4:77:40:7b:c9:9a:d6:bb:87:12:62:fe:
58:a3:67:28:0c:80:0e:d2:b9:fa:63:45:bf:56:d3:
9d:60:79:07:18:64:71:17:cc:84:07:f6:19:e5:79:
65:1b:64:fd:c6:2f:9c:ab:14:6c:58:f9:fe:eb:90:
9a:74:04:70:00:f8:67:0a:f7:ad:dd:e3:46:3c:87:
06:c6:0e:04:dc:14:88:34:62:fd:7a:2c:a8:f2:6f:
3f:a2:c8:15:5b:fb:3c:53:83:11:69:56:76:e0:c7:
9b:f0:c6:21:da:81:34:c4:90:98:8c:36:4c:67:ae:
c4:11:30:2b:d3:c9:16:f5:54:12:1b:64:a3:79:25:
bf:e1:6a:4f:56:79:5f:45:54:8f:69:c6:2e:11:c6:
2a:55:88:5d:11:1f:15:08:e7:15:a4:3a:d4:97:c3:
54:2b:6c:ef:89:9d:a8:2c:fe:23:e6:f1:87:87:90:
dd:4a:48:9f:e5:5c:ba:98:da:fc:0c:23:e9:95:8d:
4c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C4:BD:83:31:F4:79:56:C9:65:85:73:17:E8:AF:02:9E:CE:DA:B5
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/IcS9gzH0eVbJZYVzF-ivAp7O2rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.213.0/24
131.222.221.0/24
131.222.244.0/24
Signature Algorithm: sha256WithRSAEncryption
08:17:d3:09:90:d4:c1:27:64:0f:25:99:91:59:95:e6:a1:f0:
f0:dc:2c:84:89:dd:87:bc:60:a2:59:0f:2f:17:4e:b7:c6:cc:
63:7e:c2:dd:42:e2:31:06:b6:bb:ee:3c:94:39:1f:66:65:6b:
c4:c7:c0:75:61:ba:67:77:82:14:24:f7:fc:5b:76:04:64:e1:
d6:54:48:fd:62:86:15:cd:41:ef:58:df:99:b0:c8:54:07:e5:
86:4c:35:ce:63:ed:1c:95:55:14:1f:3f:1a:9e:b7:09:2e:01:
c3:b2:59:fa:db:24:7e:b6:05:25:f2:76:f1:90:c3:60:38:84:
1f:89:bb:ee:85:71:59:3a:e6:85:b4:b2:46:7f:c9:e7:d2:dd:
02:09:a8:6f:cc:ce:07:84:bc:62:4c:7e:43:38:54:c9:0f:33:
91:00:d5:d5:04:92:53:2d:53:49:94:2a:4c:0b:8d:5e:a7:c8:
60:d5:c2:f1:be:29:b9:d7:7c:5f:23:d5:0b:2c:72:ed:36:98:
17:90:ff:f3:17:e4:cf:1e:2d:d7:24:42:50:5b:f5:8b:15:2c:
c5:3f:d7:06:e1:c7:27:29:30:35:91:a4:be:aa:22:76:c0:aa:
2d:f8:06:29:c5:dd:36:1c:b3:40:d8:f4:27:0c:5d:75:fc:93:
16:74:0c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:11 2026 by rpki-client