Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/dDP9z_x3hcMtqAaMQLjtkcyWDIo.roa
File: dDP9z_x3hcMtqAaMQLjtkcyWDIo.roa (raw, json)
Hash identifier: vcXpXlFCEJU9fhtjQspJfiB7VGlZYOLi89m5P8Sc8rg=
Subject key identifier: 74:33:FD:CF:FC:77:85:C3:2D:A8:06:8C:40:B8:ED:91:CC:96:0C:8A
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 01A0CE0451ADE16BF4A725033E42E6C79099
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/dDP9z_x3hcMtqAaMQLjtkcyWDIo.roa
Signing time: Wed 23 Sep 2026 11:26:24 +0000
ROA not before: Wed 23 Sep 2026 11:26:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213705
IP address blocks: 131.123.3.0/24 maxlen: 24
131.123.11.0/24 maxlen: 24
131.123.16.0/24 maxlen: 24
131.123.17.0/24 maxlen: 24
131.123.18.0/24 maxlen: 24
131.123.19.0/24 maxlen: 24
131.123.21.0/24 maxlen: 24
131.123.22.0/24 maxlen: 24
131.123.26.0/24 maxlen: 24
131.123.27.0/24 maxlen: 24
131.123.29.0/24 maxlen: 24
131.123.30.0/24 maxlen: 24
206.15.48.0/24 maxlen: 24
206.15.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:04:51:ad:e1:6b:f4:a7:25:03:3e:42:e6:c7:90:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Sep 23 11:26:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7433fdcffc7785c32da8068c40b8ed91cc960c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:ca:31:5d:94:f7:14:86:50:95:c7:10:ba:
72:a2:69:3b:ac:4c:ff:cf:d6:f6:a2:10:f5:3c:38:
6e:19:61:c3:46:db:17:46:0e:c0:8c:b4:16:64:47:
6b:9c:15:07:ec:fb:2d:90:80:ea:f4:8a:e2:66:36:
c2:54:48:14:00:ea:19:7c:94:b4:9f:46:bc:2a:d9:
e6:d2:a8:96:1a:4e:da:0b:7a:b2:80:bf:ff:34:ef:
8d:e5:a2:90:f6:24:f7:75:6d:9f:0f:3a:ea:13:5a:
c3:ab:e7:b9:13:fd:e6:b3:47:40:a6:e1:43:f9:8a:
24:32:58:d9:d2:29:f1:ac:aa:86:e1:eb:97:99:e1:
d5:28:ff:d7:0a:2a:1d:99:d8:a5:b2:16:7d:d1:02:
bf:01:42:e3:f2:d1:c9:d7:dc:58:74:85:2c:3f:f0:
30:6d:3c:b1:13:fa:9f:66:53:de:70:b8:36:7a:aa:
9c:a6:e6:6c:cf:42:e8:73:77:06:55:13:88:62:7f:
32:a8:d9:ba:87:77:c2:85:ad:0c:5d:89:c5:ae:0c:
db:e8:29:a7:09:04:a3:35:53:04:0b:12:a3:c3:cb:
f1:a6:b1:1c:81:d8:84:a9:ed:b0:fe:8e:99:5a:87:
6f:a2:09:b8:87:1a:bd:c5:ab:64:5c:cf:2a:96:c6:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:33:FD:CF:FC:77:85:C3:2D:A8:06:8C:40:B8:ED:91:CC:96:0C:8A
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/dDP9z_x3hcMtqAaMQLjtkcyWDIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.123.3.0/24
131.123.11.0/24
131.123.16.0/22
131.123.21.0-131.123.22.255
131.123.26.0/23
131.123.29.0-131.123.30.255
206.15.48.0/23
Signature Algorithm: sha256WithRSAEncryption
50:b6:48:3a:04:3a:1f:01:67:45:80:52:ca:c1:66:2c:fb:d5:
55:76:fd:77:b6:b3:09:70:6e:67:fb:0c:57:d7:3b:02:2e:ab:
7e:5b:f8:7c:f4:3d:0e:76:4c:93:b0:c1:be:d6:7c:ab:ea:97:
2d:3e:29:e5:73:44:56:96:d5:f4:0c:29:62:d7:94:0d:c2:3a:
43:3d:df:73:5b:23:89:47:5a:36:94:aa:be:74:95:91:40:36:
a5:5f:2f:f5:b4:c3:97:79:dc:4b:97:be:6b:5f:cb:0a:38:fe:
16:a6:3c:a4:34:68:1e:73:5f:bc:d9:0a:3c:0d:3b:44:bf:a4:
31:a7:62:06:f6:f3:44:df:6e:0f:f7:37:78:a2:8b:a0:2f:21:
3c:e7:c2:57:6c:69:b5:a3:d2:92:73:14:67:1a:9b:ca:4b:8a:
af:3b:eb:96:dd:7c:c2:40:ff:fe:b7:52:6f:13:0f:0c:61:45:
3c:41:92:34:e0:4c:f3:5e:41:78:64:9d:b9:3d:83:1f:38:76:
2a:10:60:7f:16:54:d9:58:38:5f:96:a1:60:c0:59:b3:bc:9b:
fa:3c:de:86:fc:fa:3b:86:bb:ba:e6:65:c4:dd:37:8e:94:da:
09:bd:79:46:c7:17:07:8f:ce:99:34:7e:b3:60:bf:75:e4:38:
be:c8:0a:0e
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAaDOBFGt4Wv0pyUDPkLmx5CZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz
OGM4ZTEwHhcNMjYwOTIzMTEyNjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDMzZmRjZmZjNzc4NWMzMmRhODA2OGM0MGI4ZWQ5MWNjOTYwYzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDTKMV2U9xSGUJXHELpyomk7rEz/
z9b2ohD1PDhuGWHDRtsXRg7AjLQWZEdrnBUH7PstkIDq9IriZjbCVEgUAOoZfJS0
n0a8Ktnm0qiWGk7aC3qygL//NO+N5aKQ9iT3dW2fDzrqE1rDq+e5E/3ms0dApuFD
+YokMljZ0inxrKqG4euXmeHVKP/XCiodmdilshZ90QK/AULj8tHJ19xYdIUsP/Aw
bTyxE/qfZlPecLg2eqqcpuZsz0Loc3cGVROIYn8yqNm6h3fCha0MXYnFrgzb6Cmn
CQSjNVMECxKjw8vxprEcgdiEqe2w/o6ZWodvogm4hxq9xatkXM8qlsYZGQIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFHQz/c/8d4XDLagGjEC47ZHMlgyKMB8GA1UdIwQY
MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt
MzBjOWRlMjA1YWZjLzEvZERQOXpfeDNoY010cUFhTVFManRrY3lXRElvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj
LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQAg3sDAwQA
g3sLAwQCg3sQMAwDBACDexUDBACDexYDBAGDexowDAMEAIN7HQMEAIN7HgMEAc4P
MDANBgkqhkiG9w0BAQsFAAOCAQEAULZIOgQ6HwFnRYBSysFmLPvVVXb9d7azCXBu
Z/sMV9c7Ai6rflv4fPQ9DnZMk7DBvtZ8q+qXLT4p5XNEVpbV9AwpYteUDcI6Qz3f
c1sjiUdaNpSqvnSVkUA2pV8v9bTDl3ncS5e+a1/LCjj+FqY8pDRoHnNfvNkKPA07
RL+kMadiBvbzRN9uD/c3eKKLoC8hPOfCV2xptaPSknMUZxqbykuKrzvrlt18wkD/
/rdSbxMPDGFFPEGSNOBM815BeGSduT2DHzh2KhBgfxZU2Vg4X5ahYMBZs7yb+jze
hvz6O4a7uuZlxN03jpTaCb15RscXB4/OmTR+s2C/deQ4vsgKDg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:04:59 2026 by rpki-client