Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/KXKwXtnGwfLE6ooLIlB7sW-zWiA.roa
File: KXKwXtnGwfLE6ooLIlB7sW-zWiA.roa (raw, json)
Hash identifier: 868y7iV5bE2GlzbPUF2PQ4zfQ8eO7CYYKpck7+qNj00=
Subject key identifier: 29:72:B0:5E:D9:C6:C1:F2:C4:EA:8A:0B:22:50:7B:B1:6F:B3:5A:20
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 01A09F507D0514107A5A0E6A9EBE1715C8E8
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/KXKwXtnGwfLE6ooLIlB7sW-zWiA.roa
Signing time: Mon 14 Sep 2026 09:47:27 +0000
ROA not before: Mon 14 Sep 2026 09:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213705
IP address blocks: 131.123.3.0/24 maxlen: 24
131.123.9.0/24 maxlen: 24
131.123.11.0/24 maxlen: 24
131.123.13.0/24 maxlen: 24
131.123.16.0/24 maxlen: 24
131.123.17.0/24 maxlen: 24
131.123.18.0/24 maxlen: 24
131.123.19.0/24 maxlen: 24
131.123.21.0/24 maxlen: 24
131.123.22.0/24 maxlen: 24
131.123.26.0/24 maxlen: 24
131.123.27.0/24 maxlen: 24
131.123.29.0/24 maxlen: 24
131.123.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 13:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:50:7d:05:14:10:7a:5a:0e:6a:9e:be:17:15:c8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Sep 14 09:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2972b05ed9c6c1f2c4ea8a0b22507bb16fb35a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:26:ff:af:f8:16:f1:f4:ce:51:e0:48:10:f8:
61:42:fb:3a:a6:02:be:60:64:7c:8d:db:b9:7b:be:
46:44:56:71:bc:67:51:90:90:51:5f:b2:e9:88:82:
85:6a:21:54:3d:ed:35:92:c2:5f:94:c1:2d:5d:b9:
75:de:c3:cd:03:3a:be:c2:6c:73:a0:a6:83:32:b9:
3f:7b:e1:0f:e2:09:43:3f:57:5b:23:d7:37:91:05:
83:7e:79:63:22:f8:51:51:ae:04:55:1a:47:09:e8:
9f:60:94:d8:0c:35:6d:b1:fb:eb:9d:02:75:01:0e:
8b:86:d2:95:3d:2d:3a:9f:f7:51:48:e5:82:18:2f:
d8:0a:a3:17:23:3f:fd:ef:dd:90:c1:35:08:ca:89:
64:99:b3:a7:86:e3:2c:ea:32:89:52:79:6b:32:47:
c3:19:c5:1d:8e:f7:9f:67:c8:a2:c8:db:fd:c5:cb:
fd:fa:20:de:06:55:8a:72:0d:10:9b:7e:da:f1:e2:
47:5f:03:c8:c1:14:ac:b4:07:a9:4d:a1:49:bd:36:
69:9e:3a:50:5f:03:10:2e:00:b6:c6:08:47:73:12:
22:83:bd:12:d5:72:ef:f3:80:d9:f1:ce:4d:f0:58:
c8:4a:7d:ce:91:1d:cd:46:c1:41:74:15:ff:4a:c4:
04:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:72:B0:5E:D9:C6:C1:F2:C4:EA:8A:0B:22:50:7B:B1:6F:B3:5A:20
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/KXKwXtnGwfLE6ooLIlB7sW-zWiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.123.3.0/24
131.123.9.0/24
131.123.11.0/24
131.123.13.0/24
131.123.16.0/22
131.123.21.0-131.123.22.255
131.123.26.0/23
131.123.29.0-131.123.30.255
Signature Algorithm: sha256WithRSAEncryption
76:a8:d2:3b:d6:ff:c9:e7:86:8f:00:1d:79:e7:c7:97:f4:ba:
10:6d:52:54:a8:44:22:9d:00:45:bb:7a:de:73:fa:e5:82:54:
65:1f:8c:41:9e:a4:09:9f:0a:6a:15:a6:c2:aa:29:61:8b:1a:
93:c2:f8:a4:5c:43:5c:20:e7:d1:49:95:ff:02:7a:da:6d:be:
eb:f5:34:d7:99:d8:33:3a:45:df:e2:8d:de:8a:2a:e5:39:2e:
7e:aa:39:5d:1c:36:a2:59:fa:25:31:1f:a1:5c:10:7b:8a:3d:
d8:e7:9d:45:e8:b4:9d:25:e4:f3:9d:eb:f8:70:aa:6f:d7:32:
15:f2:1b:d8:ad:11:73:75:fc:d3:b6:d8:c7:d8:aa:22:0a:85:
ec:55:f8:81:e7:6c:d3:30:80:c2:8e:1a:3b:29:06:db:92:fb:
3e:dd:9e:47:75:09:a6:8a:13:61:8f:73:0c:37:9f:65:4a:ae:
4b:ef:11:4d:57:65:10:17:49:40:84:8d:ee:7c:00:d1:8c:55:
94:1f:d1:66:b2:91:d5:82:d1:fd:c3:de:66:a8:62:a9:3e:2e:
b1:db:3e:49:97:4b:fd:ce:45:18:c4:5c:1c:d3:d6:80:fb:9c:
69:18:a6:43:4a:b0:bd:dd:2c:37:99:ea:c1:71:f4:a8:a8:e8:
df:1b:cc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:23:25 2026 by rpki-client