Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/p-ohAQEkyhq9O3wYEDu-QLlzeVo.roa
File: p-ohAQEkyhq9O3wYEDu-QLlzeVo.roa (raw, json)
Hash identifier: TVhAaIvW3w0pl9GKvfq9WCxfWizgy/rRiS6zkWcQJgc=
Subject key identifier: A7:EA:21:01:01:24:CA:1A:BD:3B:7C:18:10:3B:BE:40:B9:73:79:5A
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 01A0C51A8F18BF869A111D58F678AC5426AB
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/p-ohAQEkyhq9O3wYEDu-QLlzeVo.roa
Signing time: Mon 21 Sep 2026 17:54:07 +0000
ROA not before: Mon 21 Sep 2026 17:54:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39690
IP address blocks: 131.123.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:1a:8f:18:bf:86:9a:11:1d:58:f6:78:ac:54:26:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Sep 21 17:54:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7ea21010124ca1abd3b7c18103bbe40b973795a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:2c:99:c7:95:f3:bd:96:cd:ef:c2:dc:cd:
a1:df:90:ce:2a:4e:14:c5:5e:22:84:ae:69:b5:93:
fb:e6:b1:52:d2:5f:a9:4e:44:1e:2c:af:20:cb:b3:
0f:35:07:9b:4a:eb:f9:c3:13:ef:ac:e2:68:27:cf:
2e:eb:a1:6f:a5:6a:52:11:69:a6:1a:1f:93:f3:42:
03:32:ac:af:43:2e:bf:f7:6c:18:fc:77:25:5f:85:
e6:0e:bd:01:e1:c8:8d:72:e4:39:5d:77:c0:11:b6:
7f:93:9d:a4:05:b3:5e:c5:86:c1:a7:81:ac:7b:d1:
96:67:7a:ee:09:fe:b0:cc:a0:11:49:7a:e2:2b:4d:
1a:15:83:63:f7:c9:08:49:fb:3c:16:8e:81:71:c5:
c9:8f:95:c5:d6:5a:5f:21:c6:2e:63:1c:7d:96:f8:
cb:8f:db:ef:4a:78:42:5b:a7:48:ff:28:93:f4:20:
af:bf:ff:c0:81:7e:75:f7:40:45:5f:b6:27:97:28:
da:6c:fd:ce:1d:37:bb:2f:87:69:a9:ed:f8:89:18:
64:94:09:e5:b8:df:2c:e2:c5:aa:ba:01:eb:02:93:
51:00:2f:cb:bd:aa:e4:80:c1:f1:1e:26:52:f4:00:
3f:7c:d3:09:a0:68:bf:b1:c1:28:46:d5:c7:e0:1a:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EA:21:01:01:24:CA:1A:BD:3B:7C:18:10:3B:BE:40:B9:73:79:5A
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/p-ohAQEkyhq9O3wYEDu-QLlzeVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.123.9.0/24
Signature Algorithm: sha256WithRSAEncryption
51:a7:26:09:37:73:76:ce:fb:ed:7e:fb:f6:1e:57:cc:26:2c:
49:e3:dc:0b:51:6c:8b:57:6d:aa:47:37:61:3b:3e:6e:ec:53:
aa:e5:d3:55:fa:91:50:e2:f4:59:c2:42:5d:9c:fb:5b:d2:34:
ef:ce:6b:70:ff:5e:b1:ee:71:27:d7:28:8f:d4:2f:85:e1:0e:
21:c9:f3:b4:3c:e8:4d:1c:a3:1b:66:e2:be:b5:b7:c2:74:0e:
d7:6a:8d:83:57:9b:58:3f:ff:4b:72:7b:9b:f5:3a:cf:d4:cd:
fe:4f:a4:f8:eb:80:18:9f:ac:c8:4b:83:0c:cb:b5:51:a5:b1:
c6:8c:61:78:5a:3a:63:68:24:1c:28:7b:e5:e3:c3:b4:71:ea:
e6:49:9e:e8:fd:a2:fc:4c:fd:b1:7c:24:a0:2b:3e:c5:d7:7d:
e2:26:13:5c:4a:db:81:99:bd:00:4e:14:ef:e9:1d:20:e5:d0:
6e:73:4f:b2:f1:b8:6f:9d:21:93:17:2a:90:cf:58:dd:37:a4:
7e:90:5b:ec:c6:4f:c7:a6:52:12:1b:7b:da:42:b2:71:75:2b:
8a:2e:69:81:7b:50:84:c1:de:1f:56:6c:80:b5:81:d7:2a:e5:
aa:c8:75:8f:16:2a:e1:4b:6b:a3:b4:3a:e0:dd:f1:c4:79:ba:
8b:63:fc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:03:05 2026 by rpki-client