Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/dmSFnJG8tpUAWfzyfkfxeOXBvEw.roa
File: dmSFnJG8tpUAWfzyfkfxeOXBvEw.roa (raw, json)
Hash identifier: 2mYA9QNq//dbjFbk3bWUMlFN1KuLEJxjVXMiQX0jL5Q=
Subject key identifier: 76:64:85:9C:91:BC:B6:95:00:59:FC:F2:7E:47:F1:78:E5:C1:BC:4C
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019C6578ABC5525083FFB4A26CA5257B5783
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/dmSFnJG8tpUAWfzyfkfxeOXBvEw.roa
Signing time: Mon 16 Feb 2026 08:02:12 +0000
ROA not before: Mon 16 Feb 2026 08:02:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214095
IP address blocks: 131.222.244.0/24 maxlen: 24
131.222.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:65:78:ab:c5:52:50:83:ff:b4:a2:6c:a5:25:7b:57:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Feb 16 08:02:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7664859c91bcb6950059fcf27e47f178e5c1bc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:72:a4:0e:59:ad:c5:69:f2:82:09:bf:6b:fd:
58:c5:2f:4a:ca:ae:33:47:2a:08:ac:99:00:05:56:
44:06:c9:4c:f9:0c:b8:d8:90:06:43:bf:4d:ef:4e:
8b:32:74:46:c4:8e:24:d6:4f:7a:7b:4a:1e:86:4b:
f6:11:23:b0:5d:75:78:66:f2:fb:1b:26:13:ad:f4:
0b:9c:0d:89:da:61:00:b2:97:2e:14:64:8d:cb:61:
4d:cf:fa:54:3a:cf:c2:01:e1:3b:a1:05:57:d0:64:
08:e2:6b:af:b4:cf:a1:e9:dd:c2:8e:49:9b:41:8b:
14:47:ca:99:55:24:64:04:1b:a5:3e:61:4a:ca:14:
0a:76:7e:31:ac:a1:eb:ff:31:bd:72:f4:91:a5:82:
b9:c2:92:98:b0:79:bf:63:98:ad:3e:bb:ea:bb:79:
c6:c1:58:dd:a2:0b:58:3f:ac:13:4c:f8:41:cd:06:
3f:3c:e5:96:47:50:75:32:85:18:7d:f1:75:b5:5f:
76:8b:03:ae:ca:36:f6:0d:e6:11:7f:a0:a9:99:db:
0a:3c:82:3b:75:bb:9f:f2:11:49:1c:93:10:ef:c8:
3b:2d:16:46:ec:ce:c6:00:da:ad:79:84:bf:f5:b9:
f4:d8:bf:88:bb:74:12:ef:7e:8d:4b:1e:aa:f6:6b:
4d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:64:85:9C:91:BC:B6:95:00:59:FC:F2:7E:47:F1:78:E5:C1:BC:4C
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/dmSFnJG8tpUAWfzyfkfxeOXBvEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.244.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:0d:f6:4b:c4:5b:26:cc:a8:1a:42:5c:82:c1:f6:e4:b3:0d:
7d:70:d8:8d:e5:46:6b:bb:57:55:43:01:64:15:27:d0:bd:34:
63:cf:4e:4f:65:f2:42:fe:b5:b1:00:ac:67:79:90:4b:ca:f6:
c6:d7:51:09:e4:6f:d6:2c:ce:d4:3c:c9:95:d7:6b:df:a6:66:
b6:0e:74:51:8e:d1:4f:5c:e8:ea:10:e4:3d:11:41:cf:13:25:
3c:96:99:2a:dc:48:f2:2a:d0:c9:b2:e1:7f:e1:86:0f:aa:24:
df:43:61:77:7f:1b:10:bb:82:c9:98:7d:83:7e:ef:5c:6e:69:
85:29:bf:b4:40:fd:a7:d5:f6:a2:f6:bb:88:23:ac:94:dd:0b:
26:51:18:3d:ef:8a:ed:7e:22:6b:25:a4:cd:ce:40:46:b9:e7:
12:e2:38:8f:f7:db:2b:5a:ff:22:5c:01:5c:c6:04:14:72:07:
de:ff:90:7a:fa:70:ab:c6:bd:19:cc:fc:ca:98:f8:fb:7a:9e:
f2:95:85:8c:62:5f:bf:2e:0b:7e:f1:9b:42:99:73:91:4a:46:
51:2a:45:c2:7c:5d:00:58:63:a6:92:37:94:c1:a5:56:c8:1b:
60:e5:3b:15:50:dd:9f:81:b3:3d:85:6f:75:78:5f:4a:d0:05:
5e:f4:3b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:36:44 2026 by rpki-client