Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/hVE5Yop4VxbvBIWpUfceFvrMB2g.roa
File: hVE5Yop4VxbvBIWpUfceFvrMB2g.roa (raw, json)
Hash identifier: 8ClHdxsk9TEH5ulm4Fgh/I2Ueg7yI7/7dLDb3VHPBxY=
Subject key identifier: 85:51:39:62:8A:78:57:16:EF:04:85:A9:51:F7:1E:16:FA:CC:07:68
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 019DF8B2AB826E30CF83F7B87B95B9FADC98
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/hVE5Yop4VxbvBIWpUfceFvrMB2g.roa
Signing time: Tue 05 May 2026 15:12:31 +0000
ROA not before: Tue 05 May 2026 15:12:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 141.98.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:b2:ab:82:6e:30:cf:83:f7:b8:7b:95:b9:fa:dc:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: May 5 15:12:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=855139628a785716ef0485a951f71e16facc0768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:27:03:ee:c9:e6:2d:b2:88:37:0d:71:a0:
5f:65:07:e9:5b:47:ff:30:37:08:5a:d5:da:fe:44:
d1:c5:d1:02:5e:47:cf:f2:ac:4c:ae:01:62:10:a1:
6c:47:93:9b:f3:f4:66:0e:36:94:5c:a3:af:ec:b4:
d8:fa:b6:2b:58:17:9c:1d:b9:6c:ea:79:9c:51:cf:
65:52:ec:a1:16:65:1f:6f:d3:36:f1:b3:45:2d:3e:
25:1b:87:9e:d5:bc:dd:c6:a7:19:e1:1b:dd:2a:65:
4a:f8:1f:af:bb:15:bc:ee:49:18:b2:03:18:a1:c7:
8c:03:60:11:c0:75:b8:16:61:a2:0e:80:6b:81:9a:
ab:3a:d4:8d:dc:68:8e:ae:d0:59:82:bf:f4:62:75:
ee:c6:05:72:32:f6:bb:b1:1b:76:f8:9d:63:56:97:
db:d7:67:5a:b8:0e:e7:25:0a:7b:9b:6f:a2:4a:9d:
ff:3c:59:be:47:ec:89:dd:69:f8:9e:58:1c:11:42:
21:3f:2e:fa:61:c5:17:18:cd:b9:12:cf:50:d4:fb:
6c:21:bb:82:93:0b:9e:22:ce:36:d7:c0:b7:d3:62:
75:28:f3:dc:b6:08:6b:0c:d4:80:c3:f5:40:4f:66:
02:20:e2:48:50:01:96:16:ff:71:ac:c6:d0:9d:2a:
16:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:51:39:62:8A:78:57:16:EF:04:85:A9:51:F7:1E:16:FA:CC:07:68
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/hVE5Yop4VxbvBIWpUfceFvrMB2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.131.0/24
Signature Algorithm: sha256WithRSAEncryption
06:09:90:8a:3a:8f:a2:7b:69:93:00:b6:73:9c:5f:b9:b0:af:
96:62:e4:8a:c6:ee:3d:87:e0:57:af:cc:38:13:88:34:d6:de:
cf:b7:0f:24:13:3b:ac:5d:75:be:81:63:d4:c5:7f:35:da:d8:
19:d9:cc:50:b8:d4:44:6e:4e:0c:bc:00:46:66:a5:46:d9:82:
22:f9:8e:35:21:6f:3a:78:a7:bb:05:f6:c6:a5:76:e1:98:81:
5b:3e:af:37:e5:97:42:6a:d9:bb:fe:1e:ca:e9:36:fa:cf:b6:
e7:af:14:fd:78:06:cc:89:2a:95:f0:ad:60:04:a2:88:84:f6:
9f:9a:b0:4e:95:eb:70:f8:0d:26:3e:15:71:d9:96:87:08:f5:
c5:bb:b3:38:85:41:cb:2e:3e:3b:e2:93:61:38:60:36:7c:00:
66:2c:4c:29:af:e6:92:7b:6c:17:83:fe:c3:bf:c3:dc:31:14:
a6:df:21:f5:27:eb:5d:f7:8c:3f:d8:3a:d8:62:cd:11:a4:52:
c2:5b:a1:48:b7:6a:71:e5:f0:d5:d4:70:51:81:54:0f:9c:c6:
d7:41:f5:63:52:fa:bc:60:01:a2:c5:5f:4d:69:2c:09:bf:6a:
0c:01:8b:a4:ae:dd:35:86:97:77:4b:c0:f9:63:98:af:13:95:
55:83:8a:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ34squCbjDPg/e4e5W5+tyYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjZmODVhYWQxMDFjNDU2YzFhYzlhMDFhNzE5MmZjNTc4
OGU5MmMwHhcNMjYwNTA1MTUxMjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTUxMzk2MjhhNzg1NzE2ZWYwNDg1YTk1MWY3MWUxNmZhY2MwNzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNEnA+7J5i2yiDcNcaBfZQfpW0f/
MDcIWtXa/kTRxdECXkfP8qxMrgFiEKFsR5Ob8/RmDjaUXKOv7LTY+rYrWBecHbls
6nmcUc9lUuyhFmUfb9M28bNFLT4lG4ee1bzdxqcZ4RvdKmVK+B+vuxW87kkYsgMY
oceMA2ARwHW4FmGiDoBrgZqrOtSN3GiOrtBZgr/0YnXuxgVyMva7sRt2+J1jVpfb
12dauA7nJQp7m2+iSp3/PFm+R+yJ3Wn4nlgcEUIhPy76YcUXGM25Es9Q1PtsIbuC
kwueIs4218C302J1KPPctghrDNSAw/VAT2YCIOJIUAGWFv9xrMbQnSoWYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIVROWKKeFcW7wSFqVH3Hhb6zAdoMB8GA1UdIwQY
MBaAFK/2+FqtEBxFbBrJoBpxkvxXiOksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTIt
NjQ0YmQwZmM3ZjgwLzEvaFZFNVlvcDRWeGJ2QklXcFVmY2VGdnJNQjJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTItNjQ0YmQwZmM3Zjgw
LzEvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWKDMA0G
CSqGSIb3DQEBCwUAA4IBAQAGCZCKOo+ie2mTALZznF+5sK+WYuSKxu49h+BXr8w4
E4g01t7Ptw8kEzusXXW+gWPUxX812tgZ2cxQuNREbk4MvABGZqVG2YIi+Y41IW86
eKe7BfbGpXbhmIFbPq835ZdCatm7/h7K6Tb6z7bnrxT9eAbMiSqV8K1gBKKIhPaf
mrBOletw+A0mPhVx2ZaHCPXFu7M4hUHLLj474pNhOGA2fABmLEwpr+aSe2wXg/7D
v8PcMRSm3yH1J+td94w/2DrYYs0RpFLCW6FIt2px5fDV1HBRgVQPnMbXQfVjUvq8
YAGixV9NaSwJv2oMAYukrt01hpd3S8D5Y5ivE5VVg4oC
-----END CERTIFICATE-----
Generated at Wed May 13 03:52:43 2026 by rpki-client