Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/nfyYzr6SOKovI56-jua9mwmGSS4.roa
File: nfyYzr6SOKovI56-jua9mwmGSS4.roa (raw, json)
Hash identifier: KFWVOUQ8wZVE4wFP9dp1LREuzlig6aHY5QqOrPHZ8r4=
Subject key identifier: 9D:FC:98:CE:BE:92:38:AA:2F:23:9E:BE:8E:E6:BD:9B:09:86:49:2E
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 01A0E7C2BD06571E5897C9BD32D9EE16AD79
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/nfyYzr6SOKovI56-jua9mwmGSS4.roa
Signing time: Mon 28 Sep 2026 11:24:54 +0000
ROA not before: Mon 28 Sep 2026 11:24:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 131.123.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:c2:bd:06:57:1e:58:97:c9:bd:32:d9:ee:16:ad:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Sep 28 11:24:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9dfc98cebe9238aa2f239ebe8ee6bd9b0986492e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cc:7e:1e:01:87:c3:ec:82:1e:e1:6b:b3:2b:
e2:4e:a2:4d:a9:22:b0:46:f7:96:d3:7a:d5:0a:57:
64:f1:00:95:a5:61:e0:31:90:4c:e6:40:70:73:05:
06:3c:e1:5a:56:b6:e4:4a:64:6f:b6:72:f1:8d:76:
c3:08:66:fc:b0:a4:3b:f9:62:5b:c1:f8:2f:ba:2a:
f6:a4:81:bb:93:a2:17:d3:5f:6d:65:cd:2d:de:dc:
2e:82:1a:1d:40:cb:18:48:1f:da:bd:90:a0:2e:3c:
3d:0e:79:46:98:ba:70:d1:b9:51:f4:4c:c6:15:0d:
61:e8:e3:b5:f0:03:6a:63:4b:d0:fd:21:d1:b5:84:
56:ee:9d:ec:c9:f0:26:e4:64:62:96:eb:aa:0f:ad:
98:24:78:99:9c:b8:94:97:54:86:8c:8f:24:4e:f0:
27:87:97:34:d5:c7:4e:ed:81:e5:bc:b8:fa:5b:5d:
1e:f2:87:c0:66:fa:f9:b8:40:f4:1c:cb:3e:10:59:
3e:c9:9d:6d:7a:4f:33:68:3d:2f:9a:88:6b:3c:89:
21:43:5e:ae:11:de:33:17:eb:ef:8c:4c:77:a9:73:
ae:86:05:d5:47:61:8c:72:59:e3:9b:0c:ae:f9:dd:
96:5d:f9:81:8d:09:e6:79:2f:5d:37:47:09:ad:6b:
b1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FC:98:CE:BE:92:38:AA:2F:23:9E:BE:8E:E6:BD:9B:09:86:49:2E
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/nfyYzr6SOKovI56-jua9mwmGSS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.123.1.0/24
Signature Algorithm: sha256WithRSAEncryption
51:a4:46:a2:09:29:6c:d8:56:db:14:e5:99:09:ac:9d:bd:d2:
c0:49:11:93:ab:b2:32:37:a8:9f:83:5e:5a:6b:b1:1d:c0:f1:
08:db:4a:7f:63:91:4d:cb:08:e4:97:7b:67:3c:a8:42:ca:23:
98:ec:05:6d:af:8d:d1:d9:f3:7a:82:69:71:a4:09:c9:2e:0c:
ca:ea:f7:4a:05:14:c3:ce:13:90:36:d4:a5:e5:d9:16:19:87:
fb:c5:72:d0:53:54:f3:7b:a1:f9:65:4d:77:22:9e:23:fa:46:
30:87:b6:cc:09:35:c1:2b:68:33:98:1b:fc:55:96:90:ca:c5:
fd:cf:69:a9:6d:17:06:a4:2f:c9:d7:9d:ba:6d:08:73:87:3c:
96:7c:67:59:f3:28:fa:dc:7c:8e:63:bc:a2:6f:86:db:2d:7b:
a7:7c:c3:e8:3d:d3:e8:ef:ba:31:f4:3f:57:37:f4:0c:ce:e3:
90:2c:e5:47:67:cf:a1:ba:1c:aa:f5:f5:5e:ce:c1:a6:25:ba:
dd:39:d7:62:51:cb:4b:ea:4a:aa:38:9e:87:86:6b:69:9e:21:
e1:45:28:09:f8:b1:b0:cc:97:8e:44:15:06:f2:b8:6a:08:8f:
81:4e:9c:77:83:25:ef:f7:4b:b9:5a:25:77:a1:50:85:0d:c3:
83:0b:bb:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDnwr0GVx5Yl8m9MtnuFq15MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz
OGM4ZTEwHhcNMjYwOTI4MTEyNDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGZjOThjZWJlOTIzOGFhMmYyMzllYmU4ZWU2YmQ5YjA5ODY0OTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Mx+HgGHw+yCHuFrsyviTqJNqSKw
RveW03rVCldk8QCVpWHgMZBM5kBwcwUGPOFaVrbkSmRvtnLxjXbDCGb8sKQ7+WJb
wfgvuir2pIG7k6IX019tZc0t3twughodQMsYSB/avZCgLjw9DnlGmLpw0blR9EzG
FQ1h6OO18ANqY0vQ/SHRtYRW7p3syfAm5GRiluuqD62YJHiZnLiUl1SGjI8kTvAn
h5c01cdO7YHlvLj6W10e8ofAZvr5uED0HMs+EFk+yZ1tek8zaD0vmohrPIkhQ16u
Ed4zF+vvjEx3qXOuhgXVR2GMclnjmwyu+d2WXfmBjQnmeS9dN0cJrWuxUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ38mM6+kjiqLyOevo7mvZsJhkkuMB8GA1UdIwQY
MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt
MzBjOWRlMjA1YWZjLzEvbmZ5WXpyNlNPS292STU2LWp1YTltd21HU1M0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj
LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg3sBMA0G
CSqGSIb3DQEBCwUAA4IBAQBRpEaiCSls2FbbFOWZCaydvdLASRGTq7IyN6ifg15a
a7EdwPEI20p/Y5FNywjkl3tnPKhCyiOY7AVtr43R2fN6gmlxpAnJLgzK6vdKBRTD
zhOQNtSl5dkWGYf7xXLQU1Tze6H5ZU13Ip4j+kYwh7bMCTXBK2gzmBv8VZaQysX9
z2mpbRcGpC/J1526bQhzhzyWfGdZ8yj63HyOY7yib4bbLXunfMPoPdPo77ox9D9X
N/QMzuOQLOVHZ8+huhyq9fVezsGmJbrdOddiUctL6kqqOJ6HhmtpniHhRSgJ+LGw
zJeORBUG8rhqCI+BTpx3gyXv90u5WiV3oVCFDcODC7u7
-----END CERTIFICATE-----
Generated at Tue Oct 27 18:11:03 2026 by rpki-client