Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/zFhfndLDZ7oU0bk0QqqAPVNd3aM.roa
File: zFhfndLDZ7oU0bk0QqqAPVNd3aM.roa (raw, json)
Hash identifier: ddUTwFfUFZpRc1ExRHE36LurAQIjxRiZ+75kFQEiqQ8=
Subject key identifier: CC:58:5F:9D:D2:C3:67:BA:14:D1:B9:34:42:AA:80:3D:53:5D:DD:A3
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019D911F62F0040A46CE8CF7A20AD373485B
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/zFhfndLDZ7oU0bk0QqqAPVNd3aM.roa
Signing time: Wed 15 Apr 2026 12:30:46 +0000
ROA not before: Wed 15 Apr 2026 12:30:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212289
IP address blocks: 131.222.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:1f:62:f0:04:0a:46:ce:8c:f7:a2:0a:d3:73:48:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Apr 15 12:30:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc585f9dd2c367ba14d1b93442aa803d535ddda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:77:f6:47:bb:bb:f0:9a:02:fc:dd:37:3e:0b:
4b:f1:4c:ca:34:c3:e5:45:45:00:cf:2f:8d:c2:7b:
5b:18:e2:ff:63:35:11:13:98:86:9d:16:07:72:1a:
ae:b0:4d:c0:56:2b:d5:1a:3d:74:4a:db:41:29:c7:
3b:e3:db:91:3d:07:4d:ae:df:0d:d5:6b:3d:70:a7:
9e:80:3f:26:00:93:86:85:bd:3e:6c:08:fe:dd:dc:
87:7e:4d:de:7e:52:71:73:60:fc:a8:86:4b:40:01:
fd:9d:e3:66:a2:8a:13:a5:5d:e4:5f:72:25:83:68:
b9:09:2c:5f:0b:9b:0d:bb:a0:e6:56:05:76:6c:e9:
49:97:ff:b7:f4:b2:07:65:db:9a:3e:11:e1:64:73:
ce:ac:9b:32:7f:e4:23:01:67:2a:6f:ca:75:93:d4:
e1:58:08:ed:0b:a3:24:7a:3b:6c:b8:48:e1:73:08:
03:cd:73:87:d6:88:53:c9:ec:41:51:b3:aa:94:03:
83:1c:95:07:e4:e4:95:ad:bb:c2:b0:2b:cb:db:55:
d8:bf:62:ea:31:ae:e7:93:08:fd:60:19:0a:ec:a4:
73:9d:b7:4c:dc:9a:43:dd:f3:74:37:fc:96:ad:f2:
24:05:3e:43:da:d7:e7:e9:20:df:65:2f:a9:f8:ce:
bd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:58:5F:9D:D2:C3:67:BA:14:D1:B9:34:42:AA:80:3D:53:5D:DD:A3
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/zFhfndLDZ7oU0bk0QqqAPVNd3aM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.208.0/24
Signature Algorithm: sha256WithRSAEncryption
80:40:c3:13:9e:21:b3:b6:af:d8:26:af:51:44:71:02:69:5d:
a6:b1:d1:e9:ed:21:ea:0e:92:35:92:84:2c:2e:25:f1:06:5b:
a8:77:13:b1:22:38:25:aa:c2:31:68:52:fb:ca:48:ad:a7:30:
da:f1:6d:04:50:35:1e:05:6c:b8:e1:4f:44:f8:fd:6f:aa:65:
1f:01:b8:d4:e2:ce:ef:f6:ba:17:81:e1:30:74:4a:2f:c4:5e:
09:9e:3c:db:79:0a:95:2a:0a:34:1d:bd:dc:9e:bd:c6:2a:5b:
15:77:8b:5f:24:f7:bc:a3:ce:1d:8b:d3:2b:79:b3:11:fe:97:
7b:f3:df:6f:6f:b1:f1:fa:de:55:32:0f:c5:7f:a4:55:e2:a6:
8c:4f:10:32:f4:5a:d7:b9:2f:69:e7:6e:58:2b:fe:8b:27:e0:
1c:c2:9b:dd:cb:51:31:35:e0:e4:11:78:3e:d6:d3:c5:87:4e:
de:a0:e3:9e:c9:90:b7:95:ed:12:7f:1c:b4:f9:fb:23:71:0a:
20:d2:32:09:0d:dc:27:39:f7:ec:42:96:00:41:03:4e:4d:59:
6a:cc:37:f3:5b:bc:0c:4e:91:05:52:70:fa:87:25:10:3b:0c:
40:a8:7d:a6:92:8a:f4:07:ac:6d:b9:1f:95:c1:77:a3:a5:6f:
44:d6:89:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:53 2026 by rpki-client