Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/qM93UF_5cbChcOUVot8OLZ6-sP8.roa
File: qM93UF_5cbChcOUVot8OLZ6-sP8.roa (raw, json)
Hash identifier: yvZ4rCsGHbSUv2j2btQgGFEN/qR7LuIWsmgIOXsHjNM=
Subject key identifier: A8:CF:77:50:5F:F9:71:B0:A1:70:E5:15:A2:DF:0E:2D:9E:BE:B0:FF
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 01A09F507DAB8AE9A7EFD0DCB39F057B6ABF
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/qM93UF_5cbChcOUVot8OLZ6-sP8.roa
Signing time: Mon 14 Sep 2026 09:47:27 +0000
ROA not before: Mon 14 Sep 2026 09:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 131.123.12.0/24 maxlen: 24
131.123.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 13:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:50:7d:ab:8a:e9:a7:ef:d0:dc:b3:9f:05:7b:6a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Sep 14 09:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8cf77505ff971b0a170e515a2df0e2d9ebeb0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:f9:77:ee:49:ef:1b:b3:dd:13:c6:59:34:
6a:6d:2f:ce:a9:b9:e4:28:65:fe:75:bd:e5:28:0d:
af:00:0a:0e:ef:88:ac:dc:ea:0c:85:bb:61:21:ed:
b7:de:59:e8:a4:c6:e5:5f:30:1d:38:5e:8e:39:75:
9f:14:73:b4:1b:d8:3e:46:cb:ce:f6:63:33:3c:9f:
b6:37:18:4b:e7:2d:cb:ac:a6:51:cd:7d:0d:14:1a:
86:fd:9f:a4:a3:a1:f5:5f:43:3c:bf:8c:64:ea:cd:
d6:62:38:79:d4:1a:07:91:ab:03:8f:a3:7a:8c:5a:
59:63:5a:1b:b9:b9:88:32:b7:3b:7d:e4:38:92:75:
2c:9f:be:09:6f:3b:b1:db:6b:da:d9:bb:37:13:5e:
52:a4:95:21:69:d7:a9:61:5a:70:e0:09:25:90:2f:
ee:26:12:e5:c9:fb:27:b9:05:96:40:77:3d:31:f8:
3c:8d:cf:d7:79:f2:86:b4:d9:5b:92:32:b1:7e:be:
6d:ff:3b:25:f7:df:6a:1f:7e:d8:62:ef:2e:93:7c:
01:38:0f:20:31:cd:8f:75:9d:2e:1f:71:5a:d2:cf:
2c:fa:f7:13:a0:fc:f5:98:a7:24:7b:09:04:1b:38:
ae:cc:50:4a:09:ba:ed:bb:6a:e8:6c:e2:7d:24:a0:
01:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CF:77:50:5F:F9:71:B0:A1:70:E5:15:A2:DF:0E:2D:9E:BE:B0:FF
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/qM93UF_5cbChcOUVot8OLZ6-sP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.123.12.0/24
131.123.31.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:ab:8c:da:56:dc:11:1e:77:23:0b:6a:41:5e:77:c0:6b:1c:
fb:fd:a7:cc:9f:99:4a:4f:43:98:c5:07:91:39:9d:76:d3:4f:
3b:47:6f:f7:20:0a:f8:23:6c:dc:d7:82:7d:e7:2e:b4:bd:f3:
a4:97:dd:07:6a:2a:04:55:80:4e:76:b7:17:01:60:bd:6f:80:
e3:fc:27:a7:ca:b5:9f:a7:3a:8f:de:34:f2:37:1e:64:50:7b:
01:74:26:5a:fa:60:5a:1e:ba:b3:ef:6f:14:bf:d3:a4:f1:2c:
b0:2e:11:06:8f:46:29:37:17:36:f0:95:94:5f:b6:a1:3e:60:
0c:46:c9:7a:1e:15:42:94:c2:e0:2c:e3:28:93:6a:87:7e:21:
09:b3:85:1d:5a:e7:c9:31:9a:05:29:d3:3d:11:70:f4:ed:54:
66:c9:40:99:a8:11:fd:59:33:5d:b9:55:81:e4:dc:5d:4a:b0:
45:3c:22:4e:1f:a6:55:29:03:4b:62:21:70:18:fe:70:54:3d:
83:6c:fa:a5:f1:da:21:87:d9:d5:31:16:2f:b1:90:d6:31:5c:
bb:eb:10:f4:a9:1a:a3:a6:5a:4b:88:2a:90:8f:2c:c7:c3:f2:
1f:cf:1d:36:11:f2:04:8d:92:07:a2:6e:35:c0:36:fc:74:0c:
e8:b6:bd:de
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCfUH2riumn79Dcs58Fe2q/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz
OGM4ZTEwHhcNMjYwOTE0MDk0NzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGNmNzc1MDVmZjk3MWIwYTE3MGU1MTVhMmRmMGUyZDllYmViMGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1X5d+5J7xuz3RPGWTRqbS/Oqbnk
KGX+db3lKA2vAAoO74is3OoMhbthIe233lnopMblXzAdOF6OOXWfFHO0G9g+RsvO
9mMzPJ+2NxhL5y3LrKZRzX0NFBqG/Z+ko6H1X0M8v4xk6s3WYjh51BoHkasDj6N6
jFpZY1obubmIMrc7feQ4knUsn74Jbzux22va2bs3E15SpJUhadepYVpw4AklkC/u
JhLlyfsnuQWWQHc9Mfg8jc/XefKGtNlbkjKxfr5t/zsl999qH37YYu8uk3wBOA8g
Mc2PdZ0uH3Fa0s8s+vcToPz1mKckewkEGziuzFBKCbrtu2robOJ9JKABJwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKjPd1Bf+XGwoXDlFaLfDi2evrD/MB8GA1UdIwQY
MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt
MzBjOWRlMjA1YWZjLzEvcU05M1VGXzVjYkNoY09VVm90OE9MWjYtc1A4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj
LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAg3sMAwQA
g3sfMA0GCSqGSIb3DQEBCwUAA4IBAQAcq4zaVtwRHncjC2pBXnfAaxz7/afMn5lK
T0OYxQeROZ120087R2/3IAr4I2zc14J95y60vfOkl90HaioEVYBOdrcXAWC9b4Dj
/CenyrWfpzqP3jTyNx5kUHsBdCZa+mBaHrqz728Uv9Ok8SywLhEGj0YpNxc28JWU
X7ahPmAMRsl6HhVClMLgLOMok2qHfiEJs4UdWufJMZoFKdM9EXD07VRmyUCZqBH9
WTNduVWB5NxdSrBFPCJOH6ZVKQNLYiFwGP5wVD2DbPql8dohh9nVMRYvsZDWMVy7
6xD0qRqjplpLiCqQjyzHw/Ifzx02EfIEjZIHom41wDb8dAzotr3e
-----END CERTIFICATE-----
Generated at Fri Sep 18 20:27:27 2026 by rpki-client