Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/ZOnph3q2WtDrgVbQvKechjGXvdo.roa
File: ZOnph3q2WtDrgVbQvKechjGXvdo.roa (raw, json)
Hash identifier: mqSglzZHwuU9kYmNDMKPxX1vq6m9qHBB/8zS+STdMB4=
Subject key identifier: 64:E9:E9:87:7A:B6:5A:D0:EB:81:56:D0:BC:A7:9C:86:31:97:BD:DA
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 01A06D2CFF44F5C804EE00354F0A8F846D36
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/ZOnph3q2WtDrgVbQvKechjGXvdo.roa
Signing time: Fri 04 Sep 2026 16:07:40 +0000
ROA not before: Fri 04 Sep 2026 16:07:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 131.123.14.0/24 maxlen: 24
2a0b:2dc0::/29 maxlen: 29
2a12:1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:2c:ff:44:f5:c8:04:ee:00:35:4f:0a:8f:84:6d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Sep 4 16:07:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64e9e9877ab65ad0eb8156d0bca79c863197bdda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a8:00:3b:f5:9b:2e:c2:76:2d:ce:cc:c2:db:
98:3a:dc:61:d5:ca:ac:5d:ae:12:8e:ae:54:eb:b6:
d9:d4:2d:2b:c6:d6:f3:e1:ce:26:f9:bf:27:d9:74:
c7:61:75:4d:1f:f8:08:0f:3e:fa:c4:1f:bd:e6:b6:
5a:4c:69:4e:dd:d3:2e:46:bc:0d:6b:fe:e7:85:39:
80:8c:0d:71:f7:c9:ac:a5:d9:8c:7b:e5:f7:e9:76:
d6:ff:c2:19:7d:b7:6d:d4:49:73:92:d0:ac:c4:c7:
e9:08:2e:95:0b:65:33:21:e5:7e:c1:81:8f:03:2b:
ef:b8:ac:3c:00:82:13:45:33:b7:6a:4d:35:80:8b:
5f:da:25:19:cf:94:d8:c6:ba:4f:0d:af:99:85:a5:
df:8e:be:ab:d5:93:0c:4e:5f:0d:1f:00:20:8c:93:
b2:95:3a:6b:7e:fa:1e:aa:10:78:2d:38:af:c5:bb:
05:70:5f:de:fb:67:a8:d1:27:3b:06:5b:ca:7c:94:
37:92:51:b9:9c:35:b4:4c:e4:81:cb:89:b8:86:df:
6c:f1:3b:88:ce:3a:e4:f4:2c:08:b7:16:0b:92:fe:
d2:64:4f:1d:c5:ec:62:a3:0b:64:55:5e:41:d7:7a:
26:bf:0e:63:c9:7d:58:54:10:ab:49:e7:c6:26:59:
ec:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E9:E9:87:7A:B6:5A:D0:EB:81:56:D0:BC:A7:9C:86:31:97:BD:DA
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/ZOnph3q2WtDrgVbQvKechjGXvdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.123.14.0/24
IPv6:
2a0b:2dc0::/29
2a12:1c0::/29
Signature Algorithm: sha256WithRSAEncryption
06:df:82:eb:21:8b:01:88:15:e8:8d:41:d0:5f:d8:52:cc:d9:
79:9c:54:44:5b:41:48:e8:df:a1:af:ef:94:31:59:95:06:c6:
c3:48:3e:54:09:13:27:fa:c2:7e:51:a1:b6:d0:37:70:e5:7a:
ba:c7:95:eb:8c:e8:7a:00:6e:0c:e2:59:86:5f:51:13:fb:cc:
e9:b1:c7:d6:43:3c:56:f6:8d:d8:ef:a9:e1:04:f5:90:db:54:
99:2a:d6:3c:4e:7b:f9:e4:79:e2:a8:1f:cb:e7:7c:4e:0d:2d:
c7:bb:1c:14:eb:ee:17:12:d0:e8:21:89:99:af:88:67:63:69:
ac:09:af:44:95:79:a9:ab:7d:0b:f1:8d:88:fb:43:da:03:00:
7a:4c:33:d1:5c:c9:9b:b3:21:d5:ee:d3:a8:36:9e:a8:d1:d1:
72:27:d6:c6:24:03:8d:14:b3:8a:4d:62:4b:87:e9:00:d1:9b:
13:af:35:29:5f:d8:ef:d1:35:7a:8f:fb:d9:a3:0d:52:77:ad:
26:1a:06:65:06:c5:7a:c6:77:e8:c2:7a:fd:5f:bf:24:07:c7:
cf:92:2f:23:02:6b:7b:f9:27:47:94:ea:da:ee:85:aa:59:ac:
ae:37:d7:d6:b7:b7:55:5f:c4:d5:13:bd:36:e3:6e:77:2e:93:
22:30:92:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:08:42 2026 by rpki-client