Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/bKXgGvwUcZq1b-BeaoItS6otSlo.roa
File: bKXgGvwUcZq1b-BeaoItS6otSlo.roa (raw, json)
Hash identifier: PDK23D7wtUzyyScY6vF+EO4aImIoOx+/JSHwWylCCQM=
Subject key identifier: 6C:A5:E0:1A:FC:14:71:9A:B5:6F:E0:5E:6A:82:2D:4B:AA:2D:4A:5A
Certificate issuer: /CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Certificate serial: 01A0C3DB0B2B5F51C8A2147ECF6191874834
Authority key identifier: 1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/bKXgGvwUcZq1b-BeaoItS6otSlo.roa
Signing time: Mon 21 Sep 2026 12:05:07 +0000
ROA not before: Mon 21 Sep 2026 12:05:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 141.98.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:db:0b:2b:5f:51:c8:a2:14:7e:cf:61:91:87:48:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Validity
Not Before: Sep 21 12:05:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ca5e01afc14719ab56fe05e6a822d4baa2d4a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:68:67:a0:3c:99:f8:9a:d7:8f:9f:37:f8:9d:
a2:0b:e0:6d:a4:ef:37:06:50:ab:ab:0d:49:57:48:
19:83:b5:07:52:2d:22:e4:27:6d:4c:03:f4:22:90:
70:3c:97:6c:dc:45:d4:e5:a0:a6:ef:0e:b1:b6:8c:
32:3d:be:ee:11:f1:89:27:80:20:1d:07:73:9d:52:
75:0a:b9:fb:37:27:4f:19:20:aa:e4:95:0a:22:a4:
d2:1f:f1:47:e9:a4:fb:ea:42:71:cb:a1:19:0a:ab:
24:91:08:c5:15:0a:60:ab:44:43:a1:30:21:ac:bb:
cd:b3:52:ca:12:79:14:68:48:7d:ad:97:84:8a:f8:
db:d1:b0:e6:36:25:90:a0:c6:50:a0:dd:ee:e0:38:
55:22:d0:76:1d:a0:48:e4:8a:8f:25:a7:51:ca:88:
b4:29:31:53:33:5b:89:f6:ba:08:ab:ed:06:f0:a4:
56:3b:cb:d6:f2:78:4c:9a:a7:82:0a:8e:c4:22:cb:
9b:92:97:c7:c4:07:62:ee:cb:05:c2:1d:f2:4f:39:
33:48:f9:c0:a9:92:d5:45:70:57:50:f8:0d:ea:e2:
9e:60:03:6e:78:e0:94:f8:30:ad:40:1f:1c:55:51:
49:db:ea:64:e5:84:9d:28:5a:2d:2b:77:f3:b3:54:
83:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A5:E0:1A:FC:14:71:9A:B5:6F:E0:5E:6A:82:2D:4B:AA:2D:4A:5A
X509v3 Authority Key Identifier:
keyid:1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/bKXgGvwUcZq1b-BeaoItS6otSlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.173.0/24
Signature Algorithm: sha256WithRSAEncryption
98:1a:ca:5b:6c:c4:48:66:7a:2d:aa:ca:31:b0:f1:ca:29:c1:
b7:6d:d3:c2:e1:ee:ae:b5:c7:c0:ef:c0:38:05:20:e8:c8:0e:
ba:31:f0:e6:db:10:34:05:e7:01:2f:d1:cf:71:04:75:44:f9:
e8:04:58:29:16:66:58:a3:a2:22:a8:6f:cd:9e:67:4e:16:fe:
a2:bd:b7:35:50:8d:1b:63:06:be:46:c5:db:54:a2:79:2e:0b:
e8:78:81:25:71:98:6b:e1:6e:ae:aa:92:47:1f:18:0b:02:7c:
d3:ef:ae:f4:54:9b:1d:64:be:56:ed:9d:11:b6:c3:b8:43:90:
e4:27:d8:25:08:8e:c0:65:12:ef:c3:00:df:ea:ff:d4:6d:90:
a6:11:51:06:16:1f:d1:0f:15:b4:60:25:47:9b:a2:81:df:67:
4e:d2:1b:a5:d7:35:c4:42:95:c1:9d:2b:9a:f7:1d:ce:65:75:
ae:64:ea:33:54:ce:57:7e:9b:9f:e1:cc:82:72:5e:ef:c2:94:
b4:4e:af:aa:2b:9d:02:ec:d6:ab:6c:f5:0e:1e:01:e3:22:bf:
0b:45:f9:38:e6:35:32:f0:14:5e:3b:63:b6:e3:2f:c3:9e:a5:
fa:c8:ec:af:45:ee:b4:93:aa:7a:34:91:3e:42:ca:c3:b5:79:
8e:70:f9:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDD2wsrX1HIohR+z2GRh0g0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZDYxYTUyZjEwODJlY2Y0Yzk3YjUxMjJiNDYxMTIyNTA3
MzQ1MWIwHhcNMjYwOTIxMTIwNTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2E1ZTAxYWZjMTQ3MTlhYjU2ZmUwNWU2YTgyMmQ0YmFhMmQ0YTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWhnoDyZ+JrXj583+J2iC+BtpO83
BlCrqw1JV0gZg7UHUi0i5CdtTAP0IpBwPJds3EXU5aCm7w6xtowyPb7uEfGJJ4Ag
HQdznVJ1Crn7NydPGSCq5JUKIqTSH/FH6aT76kJxy6EZCqskkQjFFQpgq0RDoTAh
rLvNs1LKEnkUaEh9rZeEivjb0bDmNiWQoMZQoN3u4DhVItB2HaBI5IqPJadRyoi0
KTFTM1uJ9roIq+0G8KRWO8vW8nhMmqeCCo7EIsubkpfHxAdi7ssFwh3yTzkzSPnA
qZLVRXBXUPgN6uKeYANueOCU+DCtQB8cVVFJ2+pk5YSdKFotK3fzs1SDRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGyl4Br8FHGatW/gXmqCLUuqLUpaMB8GA1UdIwQY
MBaAFBrWGlLxCC7PTJe1EitGESJQc0UbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3RZYVV2RUlMczlNbDdVU0swWVJJbEJ6UlJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81OWQ1NTUtMjBiZC00YzQyLTg0YmEt
NzJjZTk1YmE5YWZhLzEvYktYZ0d2d1VjWnExYi1CZWFvSXRTNm90U2xvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81OWQ1NTUtMjBiZC00YzQyLTg0YmEtNzJjZTk1YmE5YWZh
LzEvR3RZYVV2RUlMczlNbDdVU0swWVJJbEJ6UlJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWKtMA0G
CSqGSIb3DQEBCwUAA4IBAQCYGspbbMRIZnotqsoxsPHKKcG3bdPC4e6utcfA78A4
BSDoyA66MfDm2xA0BecBL9HPcQR1RPnoBFgpFmZYo6IiqG/NnmdOFv6ivbc1UI0b
Ywa+RsXbVKJ5LgvoeIElcZhr4W6uqpJHHxgLAnzT7670VJsdZL5W7Z0RtsO4Q5Dk
J9glCI7AZRLvwwDf6v/UbZCmEVEGFh/RDxW0YCVHm6KB32dO0hul1zXEQpXBnSua
9x3OZXWuZOozVM5Xfpuf4cyCcl7vwpS0Tq+qK50C7NarbPUOHgHjIr8LRfk45jUy
8BReO2O24y/DnqX6yOyvRe60k6p6NJE+QsrDtXmOcPmc
-----END CERTIFICATE-----
Generated at Thu Sep 24 05:39:43 2026 by rpki-client