Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/2s4m4y4nEu7Wh0ePOeSEF6rJb1M.roa
File: 2s4m4y4nEu7Wh0ePOeSEF6rJb1M.roa (raw, json)
Hash identifier: sl/fYuAHHGv2tZKHn+AeAZexsWH094v9cvdrb9tIplQ=
Subject key identifier: DA:CE:26:E3:2E:27:12:EE:D6:87:47:8F:39:E4:84:17:AA:C9:6F:53
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 01A0D9348BD75F37A43719D5BD8EBE964CC4
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/2s4m4y4nEu7Wh0ePOeSEF6rJb1M.roa
Signing time: Fri 25 Sep 2026 15:34:54 +0000
ROA not before: Fri 25 Sep 2026 15:34:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 131.123.12.0/24 maxlen: 24
131.123.16.0/24 maxlen: 24
131.123.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:34:8b:d7:5f:37:a4:37:19:d5:bd:8e:be:96:4c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Sep 25 15:34:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dace26e32e2712eed687478f39e48417aac96f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:06:ae:8a:60:3d:67:d2:ff:37:e3:bc:a9:19:
6f:37:30:84:5c:ad:b2:b1:49:ad:4c:8a:d8:c0:f8:
f7:4d:15:ab:2f:20:55:bf:57:ab:69:a0:99:4d:fc:
ac:13:33:a1:9a:45:71:6c:14:8c:c9:2c:e1:c1:a1:
da:f8:b2:e6:14:13:ed:5f:f4:86:f9:68:2f:fc:39:
5a:0d:4f:47:70:90:ed:92:e3:f5:60:c2:1a:70:7d:
e6:d6:e3:28:fb:dc:e5:c3:47:5d:0c:ce:67:80:5b:
85:f1:20:13:9a:ee:6c:a3:4e:71:ef:9e:a0:eb:67:
30:63:ad:f0:76:e9:a3:02:36:e6:24:6d:7a:f3:8d:
87:c6:f4:02:ac:ed:f2:d7:d8:87:a1:92:60:35:c4:
55:d1:96:81:44:ba:5d:a2:79:f7:c9:05:a9:0c:d6:
ee:85:63:fc:f8:21:cb:a7:f2:8b:be:82:77:ad:fc:
1a:e9:8a:f2:a7:b3:fd:25:5e:17:aa:87:ce:27:90:
15:45:a6:28:99:7b:e3:3e:30:4f:3a:30:f7:35:86:
3e:8c:94:c0:0b:e9:a8:86:e0:6e:21:07:c9:97:6d:
00:59:aa:e0:4f:cb:20:f9:3a:f4:3a:d6:b5:96:66:
b4:66:ff:ec:34:47:e1:3f:92:22:60:0d:85:5f:ff:
5a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CE:26:E3:2E:27:12:EE:D6:87:47:8F:39:E4:84:17:AA:C9:6F:53
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/2s4m4y4nEu7Wh0ePOeSEF6rJb1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.123.12.0/24
131.123.16.0/24
131.123.31.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:2a:2b:17:60:3c:f0:c0:b0:26:46:00:c1:22:1e:67:ce:52:
84:d5:df:8c:c4:76:2b:b8:1d:b5:8f:51:0b:3d:dd:d7:8d:25:
73:22:de:06:5a:ac:c8:e6:cb:fe:2d:e9:28:01:10:ac:2a:d6:
6d:08:44:ee:3e:85:a7:04:6e:aa:98:9e:49:60:36:ca:a1:4e:
60:13:65:fe:2f:f5:b9:dc:1c:42:70:70:c7:2c:7f:69:ca:02:
0a:6b:dd:61:6b:0a:b5:ee:fd:25:89:7e:8c:47:63:3d:92:cf:
df:a6:e3:f5:cb:4e:ea:38:32:02:0a:84:c2:ec:96:6c:0b:66:
a9:cf:54:ca:67:b7:fe:d4:c3:4b:2f:59:11:7c:15:08:b2:9d:
6d:0b:98:f8:67:f4:06:d7:e7:c3:70:67:d9:5f:59:26:36:03:
a8:e5:47:42:25:c2:c7:8c:2b:27:7f:cf:04:80:99:f8:86:e3:
f4:4e:c6:c1:58:30:8a:d5:ac:75:5c:b4:c8:f6:74:9e:95:27:
10:95:7b:b4:92:52:d0:a5:fb:8f:79:9d:e4:74:06:76:97:85:
e6:55:0f:33:06:73:06:af:2e:4a:95:dd:42:28:84:d4:56:2f:
ff:35:78:5d:5b:64:5d:2e:46:b7:6f:2c:78:40:77:d8:c0:d4:
d6:54:ba:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:18:19 2026 by rpki-client