Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/kb1i0Euop8uoZI3hbnb2E8DBgcA.roa
File: kb1i0Euop8uoZI3hbnb2E8DBgcA.roa (raw, json)
Hash identifier: /59t43jCATUh6sMhTHPSZs3hBikNt8v++IxN2wJ5leg=
Subject key identifier: 91:BD:62:D0:4B:A8:A7:CB:A8:64:8D:E1:6E:76:F6:13:C0:C1:81:C0
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 019FC7D8664CC21D7F6C93F687DD6FFE6F77
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/kb1i0Euop8uoZI3hbnb2E8DBgcA.roa
Signing time: Mon 03 Aug 2026 13:37:55 +0000
ROA not before: Mon 03 Aug 2026 13:37:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213705
IP address blocks: 131.123.1.0/24 maxlen: 24
131.123.2.0/24 maxlen: 24
131.123.3.0/24 maxlen: 24
131.123.4.0/24 maxlen: 24
131.123.6.0/24 maxlen: 24
131.123.7.0/24 maxlen: 24
131.123.8.0/24 maxlen: 24
131.123.9.0/24 maxlen: 24
131.123.11.0/24 maxlen: 24
131.123.12.0/24 maxlen: 24
131.123.13.0/24 maxlen: 24
131.123.14.0/24 maxlen: 24
131.123.16.0/24 maxlen: 24
131.123.17.0/24 maxlen: 24
131.123.18.0/24 maxlen: 24
131.123.19.0/24 maxlen: 24
131.123.21.0/24 maxlen: 24
131.123.22.0/24 maxlen: 24
131.123.23.0/24 maxlen: 24
131.123.25.0/24 maxlen: 24
131.123.26.0/24 maxlen: 24
131.123.27.0/24 maxlen: 24
131.123.29.0/24 maxlen: 24
131.123.30.0/24 maxlen: 24
131.123.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:d8:66:4c:c2:1d:7f:6c:93:f6:87:dd:6f:fe:6f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Aug 3 13:37:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91bd62d04ba8a7cba8648de16e76f613c0c181c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:30:19:88:ee:b0:22:be:f4:aa:fb:5f:42:6a:
dc:2a:9d:36:dd:1f:b0:c4:cc:6f:22:e2:6f:7f:27:
06:48:2a:b6:e9:17:fd:19:72:48:1d:f2:ad:2b:16:
75:22:c0:6a:81:03:68:8f:c8:4b:6a:0e:57:f9:3b:
85:52:24:f6:6b:44:8b:10:46:7f:b8:9f:98:92:c8:
0a:02:d9:ad:9f:db:c0:0b:5b:f3:01:b0:f8:51:ca:
79:8e:72:16:fc:33:2d:25:33:d2:f4:c1:65:61:26:
f7:e2:9c:34:07:f0:3b:af:76:a0:38:7c:a0:eb:1c:
c2:56:ee:2f:e3:e8:a5:08:f2:39:17:47:5b:21:d3:
e8:3d:39:58:fd:7f:01:a3:38:58:52:ff:bb:e2:ea:
51:8b:5d:23:4d:7d:79:67:9f:98:1b:2f:d8:f7:4e:
5f:b4:a1:4a:25:14:4b:9f:3d:ca:86:e4:dc:bc:e0:
5f:20:87:81:38:6a:d4:a5:cb:57:f0:2f:21:fe:d8:
3f:90:6e:8f:89:c3:af:84:8c:2b:2a:46:33:30:59:
2d:4e:1a:df:95:8c:0f:80:1d:df:d5:c3:b4:ce:3b:
ad:6b:dd:09:ae:3f:41:19:12:51:24:53:9d:fb:44:
1c:a1:ee:af:dd:ac:1e:f6:29:db:21:57:f9:74:72:
b3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BD:62:D0:4B:A8:A7:CB:A8:64:8D:E1:6E:76:F6:13:C0:C1:81:C0
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/kb1i0Euop8uoZI3hbnb2E8DBgcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.123.1.0-131.123.4.255
131.123.6.0-131.123.9.255
131.123.11.0-131.123.14.255
131.123.16.0/22
131.123.21.0-131.123.23.255
131.123.25.0-131.123.27.255
131.123.29.0-131.123.31.255
Signature Algorithm: sha256WithRSAEncryption
7d:08:b9:4e:7e:7a:79:6b:8e:b3:7b:1e:de:ac:f5:9a:75:5d:
6e:57:09:b4:ae:3c:bf:2e:5a:de:5c:3f:fc:ae:5c:88:d0:a4:
32:58:3f:f3:fd:90:af:74:b1:f2:b1:d2:1a:69:b6:d6:c9:22:
a3:b6:d1:97:f0:24:3b:e1:4f:db:b2:14:f0:8b:95:a3:9e:28:
e4:49:f1:b7:3e:df:4f:19:49:de:2b:87:da:1d:f5:1e:31:9c:
68:d3:8e:04:57:b1:1b:46:79:cc:cd:20:d3:55:88:a9:5c:d8:
d9:2f:ab:fc:56:31:f6:b8:68:aa:8b:3e:fb:fd:f1:7a:54:fb:
6e:a7:c0:60:ba:4e:5e:79:11:ec:82:31:0b:cc:0e:dc:c8:da:
e2:e8:db:be:5b:1e:02:87:16:1b:e2:db:64:a6:67:a8:eb:17:
63:f8:0a:06:49:96:1b:fa:6a:a8:93:00:5a:31:42:cd:6c:0f:
78:43:26:1c:59:78:1e:4b:95:43:ae:24:5b:30:dc:a7:ff:65:
8e:a1:b0:87:e9:c6:7f:ef:dd:8f:18:b7:f5:a5:3e:8d:56:27:
63:4b:0c:b1:96:63:5d:69:6e:27:69:f4:f2:86:c4:62:fe:5a:
1b:13:73:87:61:3a:09:0b:89:a4:b5:0d:6d:56:25:5e:e2:ce:
8e:9c:10:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:51:41 2026 by rpki-client