Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/aMYCwmkdSXX4ZfDKhC1rWAMOjYI.roa
File: aMYCwmkdSXX4ZfDKhC1rWAMOjYI.roa (raw, json)
Hash identifier: nmzakxTfwrDVurY8/As0jECtOIx0LqRTcRnAOJxRKNk=
Subject key identifier: 68:C6:02:C2:69:1D:49:75:F8:65:F0:CA:84:2D:6B:58:03:0E:8D:82
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019C47C0A49863DDD7D4A37E9C571BAA4573
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/aMYCwmkdSXX4ZfDKhC1rWAMOjYI.roa
Signing time: Tue 10 Feb 2026 13:32:13 +0000
ROA not before: Tue 10 Feb 2026 13:32:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211496
IP address blocks: 131.222.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:47:c0:a4:98:63:dd:d7:d4:a3:7e:9c:57:1b:aa:45:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Feb 10 13:32:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68c602c2691d4975f865f0ca842d6b58030e8d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:32:f5:2e:5f:5d:8d:ee:53:e4:60:a4:4f:5f:
3b:02:72:7c:3b:7a:6e:8e:63:9b:c2:c9:9f:49:a8:
58:fa:41:11:9f:aa:9d:eb:b4:c2:fe:31:4d:4d:5b:
4a:85:2b:91:e1:2c:c0:2f:b7:a8:0f:35:c3:44:59:
38:cd:bc:9c:3c:1a:1b:20:ee:24:84:da:02:f7:59:
89:88:c3:ba:b5:ea:5e:91:60:82:08:a1:1c:d8:24:
3a:77:1b:e1:cc:5b:c6:e7:60:73:28:a9:3d:fc:9b:
2d:60:e1:0a:1b:81:3e:a2:2e:c4:93:1c:7b:e7:ba:
43:26:85:c1:6d:8b:14:40:13:76:14:51:8d:fe:ee:
23:a2:10:47:35:3a:8d:73:a7:28:33:66:fa:f6:6b:
54:73:60:27:77:75:a6:91:b6:90:f4:a7:6a:e3:e6:
93:54:44:a7:2f:98:53:75:3f:3a:d1:d6:32:f4:f2:
86:8b:d6:fb:48:22:db:17:30:10:c4:b8:98:6c:88:
0a:5f:c4:1c:fd:2e:cb:43:3c:b2:b0:00:97:e4:85:
2d:f0:c3:07:91:62:8d:46:ae:99:c8:4e:d1:2b:3d:
e2:f2:70:37:c8:ed:30:ec:5a:68:bd:04:fb:35:12:
2f:c4:86:74:be:ce:eb:0c:40:35:03:97:fa:26:07:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C6:02:C2:69:1D:49:75:F8:65:F0:CA:84:2D:6B:58:03:0E:8D:82
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/aMYCwmkdSXX4ZfDKhC1rWAMOjYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.255.0/24
Signature Algorithm: sha256WithRSAEncryption
36:a3:40:20:56:fb:b4:7b:4c:25:25:dc:e6:39:19:07:a6:4b:
0e:cb:18:51:ad:70:56:5c:b1:ca:1e:2c:e1:de:d5:2a:a3:6b:
db:ae:97:2b:75:03:f7:9b:40:17:94:44:aa:10:8a:a2:f5:ea:
bd:9d:f7:4e:32:b6:a5:ff:b3:f9:21:1e:e2:74:4e:e7:e0:b1:
6f:08:b6:29:9a:80:af:f8:2a:bc:44:45:fa:fc:7a:48:f4:b9:
0e:ea:af:22:f6:d5:01:19:24:7b:b5:9b:04:02:18:64:a1:cc:
cd:b2:62:84:5e:62:85:65:ba:d0:d7:3c:62:03:7e:61:63:9b:
52:9d:93:e4:50:45:02:13:ce:88:e2:c2:63:05:12:e5:ac:dc:
46:f7:91:e7:8a:ac:53:f3:54:e3:e2:69:20:47:8d:67:1b:40:
20:1d:c4:7f:9a:bd:8d:dc:82:b4:16:3a:15:79:ef:bb:90:e1:
71:12:8d:fd:13:ed:de:d6:2a:23:7b:36:e5:f4:c0:b0:87:73:
02:d9:f2:38:ce:b1:cd:62:a8:12:dd:fe:20:3c:24:64:af:da:
ac:9d:d2:20:e0:40:47:a3:b4:b0:87:26:2a:e7:94:e8:4b:f6:
a0:d3:f7:e7:34:21:43:37:6b:b7:63:3c:b5:f2:70:fa:1c:b8:
7a:d7:d0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:35:04 2026 by rpki-client