Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/xddt07zyoLb-y4ddIpmNk_Ngnlo.roa
File: xddt07zyoLb-y4ddIpmNk_Ngnlo.roa (raw, json)
Hash identifier: yi5hHDSKd9O5g6YykPT5aDJKpKMiWzWCSa5v86IH4b8=
Subject key identifier: C5:D7:6D:D3:BC:F2:A0:B6:FE:CB:87:5D:22:99:8D:93:F3:60:9E:5A
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 019FC7CDA89AA2A49806BC2C1040028E3F2C
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/xddt07zyoLb-y4ddIpmNk_Ngnlo.roa
Signing time: Mon 03 Aug 2026 13:26:11 +0000
ROA not before: Mon 03 Aug 2026 13:26:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198486
IP address blocks: 131.123.0.0/24 maxlen: 24
131.123.5.0/24 maxlen: 24
131.123.10.0/24 maxlen: 24
131.123.15.0/24 maxlen: 24
131.123.20.0/24 maxlen: 24
131.123.24.0/24 maxlen: 24
131.123.28.0/24 maxlen: 24
131.123.30.0/24 maxlen: 24
206.15.56.0/24 maxlen: 24
206.15.57.0/24 maxlen: 24
206.15.58.0/24 maxlen: 24
206.15.59.0/24 maxlen: 24
206.15.60.0/24 maxlen: 24
206.15.61.0/24 maxlen: 24
206.15.62.0/24 maxlen: 24
206.15.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:cd:a8:9a:a2:a4:98:06:bc:2c:10:40:02:8e:3f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Aug 3 13:26:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5d76dd3bcf2a0b6fecb875d22998d93f3609e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:54:90:4a:d0:06:fd:ec:fb:9e:d2:1e:b6:
15:62:8a:ad:46:64:38:b0:14:7b:ad:96:99:11:74:
12:28:6b:47:4c:18:ab:a8:b3:62:81:95:14:be:b2:
f5:1b:6f:88:09:1b:f8:72:31:b3:88:0f:65:c4:aa:
6d:5d:93:d8:9f:65:d5:43:31:01:fc:c6:92:b7:c0:
20:e4:8e:df:87:98:b9:6e:c8:33:6d:77:f0:1e:a3:
6e:d2:cf:8d:42:4c:28:fb:1b:12:38:bd:28:fc:28:
c0:9f:ff:aa:90:d3:f7:14:dd:10:61:42:92:f0:b8:
21:dc:68:c4:9a:11:89:ba:99:8e:f0:09:cf:74:be:
b9:69:29:78:fa:57:5c:0b:1a:27:d9:75:e7:f5:70:
f6:9d:40:a4:04:fd:85:65:ce:fc:c5:cd:7c:43:40:
91:87:34:93:82:58:04:76:ce:00:9f:eb:10:04:bd:
58:6f:31:9e:0e:d0:9c:09:71:90:75:97:35:00:4b:
7a:44:3a:42:1b:05:05:99:4b:73:bb:c8:a0:75:09:
58:8d:6e:a5:38:fe:f7:84:4c:f2:a6:2d:d4:5c:e7:
d8:18:7f:7b:a7:bd:66:dc:0e:91:92:16:d4:46:c0:
26:04:27:32:1a:30:67:59:42:1e:64:6a:9c:f8:4c:
22:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D7:6D:D3:BC:F2:A0:B6:FE:CB:87:5D:22:99:8D:93:F3:60:9E:5A
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/xddt07zyoLb-y4ddIpmNk_Ngnlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.123.0.0/24
131.123.5.0/24
131.123.10.0/24
131.123.15.0/24
131.123.20.0/24
131.123.24.0/24
131.123.28.0/24
131.123.30.0/24
206.15.56.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:97:e7:b0:85:f0:8b:b4:64:a8:d7:39:53:31:92:17:fb:5d:
d5:5f:91:b0:2d:e0:f2:56:61:55:b0:89:99:d0:8c:36:87:02:
c7:17:e6:e6:0f:71:83:1a:24:c2:ee:af:f1:8c:00:67:90:b6:
ad:cb:b9:5b:de:ff:44:5c:1a:f9:bb:a7:cb:bf:fc:e5:88:81:
c2:94:18:b7:c9:e5:db:d6:b6:0f:f6:61:d9:4f:c8:44:11:a4:
07:4c:89:9b:55:2f:d6:89:4f:ae:58:d7:a5:89:08:c4:be:70:
ba:66:7d:a4:91:35:6e:c6:10:33:c0:01:54:0c:29:0f:10:e9:
5d:77:89:1c:47:2b:3e:27:54:7e:40:b8:9d:05:5b:2f:29:f1:
f6:bf:2b:00:1b:e8:c4:8e:e4:46:d9:b2:b9:18:3f:3d:69:26:
d0:ee:5e:31:08:35:5b:de:42:6d:e9:e0:51:5e:f8:5c:28:e7:
96:5a:2b:f5:70:60:2e:23:00:b7:c7:49:f6:07:30:92:a6:70:
f3:87:c5:63:65:5d:ff:0d:65:d5:84:54:36:ea:d9:84:19:9a:
01:18:55:d1:d2:2b:77:2e:80:c5:7a:25:b6:b8:a1:99:cd:8f:
07:50:48:82:72:4d:68:3d:2b:97:55:57:a9:d7:40:33:82:4a:
f1:b6:ea:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:52:07 2026 by rpki-client