Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/iv8WA5rXN0cDhOW0OUW8qma_Ls4.roa
File: iv8WA5rXN0cDhOW0OUW8qma_Ls4.roa (raw, json)
Hash identifier: ezMFNqFX7ECCYuD4SnOkgEOM5WHjEcLwbZt/tLB5jOE=
Subject key identifier: 8A:FF:16:03:9A:D7:37:47:03:84:E5:B4:39:45:BC:AA:66:BF:2E:CE
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 01A0CE045146334DC506641864F7FF7AB74A
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/iv8WA5rXN0cDhOW0OUW8qma_Ls4.roa
Signing time: Wed 23 Sep 2026 11:26:24 +0000
ROA not before: Wed 23 Sep 2026 11:26:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213520
IP address blocks: 131.123.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:04:51:46:33:4d:c5:06:64:18:64:f7:ff:7a:b7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Sep 23 11:26:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8aff16039ad737470384e5b43945bcaa66bf2ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:45:7d:0b:2b:58:ab:22:bf:37:07:28:0b:e7:
2b:40:60:2a:3b:af:e5:45:60:36:29:11:81:ec:2f:
ad:59:91:90:7c:58:45:0d:3c:85:24:ce:a3:0f:b6:
d9:96:2d:4c:47:9b:36:f5:17:47:37:d9:76:e0:b4:
d9:30:b0:ee:bb:92:7f:04:7a:d1:ba:e5:6c:c7:c7:
d7:38:0f:86:01:de:6c:92:2c:fd:7c:32:ba:85:0c:
47:a5:0f:54:c8:ca:49:1b:58:a3:e1:52:d3:37:66:
77:ca:ed:8b:54:43:9d:4c:d9:da:68:c3:1b:98:d9:
65:71:fc:ef:31:05:24:33:4a:37:ef:b1:5c:91:1f:
e1:4b:5b:06:88:34:3e:75:39:94:98:b3:02:84:26:
d3:95:e8:84:e7:a5:d4:66:1d:21:8d:26:ce:10:38:
03:e2:ef:fb:6e:a1:45:0f:88:47:0d:78:01:90:34:
33:7e:97:d5:a9:b6:08:e5:bc:8c:0b:1a:1b:cb:90:
48:5a:f1:65:8c:c5:8f:c7:8e:8c:49:49:cb:ad:f6:
b4:8d:33:49:19:c7:e1:39:91:c8:e0:bb:4e:54:18:
34:79:f6:09:1b:2f:7b:10:0a:db:93:0f:8d:7f:8b:
53:66:13:53:e3:5b:e5:20:f4:99:ae:b9:c5:54:1a:
36:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FF:16:03:9A:D7:37:47:03:84:E5:B4:39:45:BC:AA:66:BF:2E:CE
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/iv8WA5rXN0cDhOW0OUW8qma_Ls4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.123.13.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:94:59:3b:27:2c:f5:1d:23:6f:43:7d:50:38:e4:12:b1:1a:
83:e6:e9:31:00:eb:cb:ee:de:f6:6b:b2:6d:d3:f7:53:18:17:
b2:e8:c1:a0:7f:1f:bc:02:52:84:4a:1c:d0:6b:c3:f1:b4:db:
ea:73:af:57:00:67:4d:3b:23:1e:3d:fa:6e:7b:5d:4e:78:0c:
ef:97:8a:62:38:25:56:d1:10:e8:52:87:35:df:76:fe:41:c0:
9a:99:46:7e:47:7c:ce:96:43:c3:dc:68:fb:67:3b:b6:5d:af:
ab:d6:b1:f5:de:62:07:43:fc:6b:fa:44:2d:3b:a7:06:03:7e:
41:61:8f:f0:84:e6:21:3f:3e:15:f9:08:70:4e:b6:dd:0b:58:
c5:ca:35:d8:47:38:40:f6:94:8d:80:ca:51:f1:29:eb:3e:c1:
7a:88:37:bf:a3:5e:f4:e1:c3:c6:6c:60:fb:8b:08:3d:64:0a:
6b:e4:84:a5:20:1c:65:a2:18:aa:50:c1:55:df:46:bd:c6:4a:
b9:43:69:3d:4d:4e:34:03:67:c8:fc:97:86:f0:22:6c:b0:c4:
b4:83:dc:85:6b:53:78:a5:ef:c3:eb:98:e8:ec:45:d3:92:53:
16:4d:25:13:73:2b:05:32:03:96:f5:d6:40:c0:c1:5d:bc:61:
54:46:6f:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDOBFFGM03FBmQYZPf/erdKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz
OGM4ZTEwHhcNMjYwOTIzMTEyNjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWZmMTYwMzlhZDczNzQ3MDM4NGU1YjQzOTQ1YmNhYTY2YmYyZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUV9CytYqyK/NwcoC+crQGAqO6/l
RWA2KRGB7C+tWZGQfFhFDTyFJM6jD7bZli1MR5s29RdHN9l24LTZMLDuu5J/BHrR
uuVsx8fXOA+GAd5skiz9fDK6hQxHpQ9UyMpJG1ij4VLTN2Z3yu2LVEOdTNnaaMMb
mNllcfzvMQUkM0o377FckR/hS1sGiDQ+dTmUmLMChCbTleiE56XUZh0hjSbOEDgD
4u/7bqFFD4hHDXgBkDQzfpfVqbYI5byMCxoby5BIWvFljMWPx46MSUnLrfa0jTNJ
GcfhOZHI4LtOVBg0efYJGy97EArbkw+Nf4tTZhNT41vlIPSZrrnFVBo2JQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIr/FgOa1zdHA4TltDlFvKpmvy7OMB8GA1UdIwQY
MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt
MzBjOWRlMjA1YWZjLzEvaXY4V0E1clhOMGNEaE9XME9VVzhxbWFfTHM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj
LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg3sNMA0G
CSqGSIb3DQEBCwUAA4IBAQBdlFk7Jyz1HSNvQ31QOOQSsRqD5ukxAOvL7t72a7Jt
0/dTGBey6MGgfx+8AlKEShzQa8PxtNvqc69XAGdNOyMePfpue11OeAzvl4piOCVW
0RDoUoc133b+QcCamUZ+R3zOlkPD3Gj7Zzu2Xa+r1rH13mIHQ/xr+kQtO6cGA35B
YY/whOYhPz4V+QhwTrbdC1jFyjXYRzhA9pSNgMpR8SnrPsF6iDe/o1704cPGbGD7
iwg9ZApr5ISlIBxlohiqUMFV30a9xkq5Q2k9TU40A2fI/JeG8CJssMS0g9yFa1N4
pe/D65jo7EXTklMWTSUTcysFMgOW9dZAwMFdvGFURm/K
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:18:33 2026 by rpki-client