Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/sLR8q51efh8gwm0Fe3T69aWXj3w.roa
File: sLR8q51efh8gwm0Fe3T69aWXj3w.roa (raw, json)
Hash identifier: JjBWHSBgba2LcZvnd+bj3mzt3enjEd3cfGjh1/P7KxU=
Subject key identifier: B0:B4:7C:AB:9D:5E:7E:1F:20:C2:6D:05:7B:74:FA:F5:A5:97:8F:7C
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019FF7F7AB711C492ABAC87159ACAFF9237A
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/sLR8q51efh8gwm0Fe3T69aWXj3w.roa
Signing time: Wed 12 Aug 2026 21:53:51 +0000
ROA not before: Wed 12 Aug 2026 21:53:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 109.122.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:f7:ab:71:1c:49:2a:ba:c8:71:59:ac:af:f9:23:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Aug 12 21:53:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0b47cab9d5e7e1f20c26d057b74faf5a5978f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4a:fd:a7:35:99:b2:21:f1:2f:3e:c3:69:13:
58:ad:5c:11:31:02:76:68:a1:5a:8f:a1:fe:52:80:
db:97:37:2c:b1:89:0e:6d:3f:76:c6:4d:2f:11:2c:
ee:e2:61:82:6e:5b:b0:55:22:85:3e:bf:ba:d2:29:
8a:08:f6:c1:ef:01:28:4c:d8:0b:02:2d:32:5f:29:
21:5a:53:89:f7:d3:b4:78:0f:ec:59:2f:c7:3d:ce:
49:06:95:01:e6:a0:19:b3:50:b3:20:c8:47:21:96:
ed:f5:aa:e3:92:6a:b7:af:67:3c:68:fa:f2:99:2a:
ea:6c:26:3a:44:1d:40:43:b3:ea:b6:f6:d5:7a:43:
bb:e8:c5:59:fd:6e:28:7c:6d:05:64:f6:0d:f0:ce:
d0:99:d3:54:7e:54:bf:f3:e8:04:88:e8:b8:f1:c0:
ae:00:bf:b8:52:05:ca:81:e7:db:d3:23:cb:62:6b:
01:a2:9a:8b:f8:77:79:37:32:f2:c5:08:9b:85:04:
55:0e:30:5b:f4:06:6e:82:3c:7c:36:09:aa:e4:54:
19:0b:a7:f4:47:9c:92:b6:53:e0:ca:d4:1c:e2:16:
0f:bc:ad:f2:e9:d4:6e:55:9f:22:8a:51:de:67:2a:
7e:d4:92:21:b5:b6:42:7f:0e:31:69:63:05:a9:70:
8c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B4:7C:AB:9D:5E:7E:1F:20:C2:6D:05:7B:74:FA:F5:A5:97:8F:7C
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/sLR8q51efh8gwm0Fe3T69aWXj3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.31.0/24
Signature Algorithm: sha256WithRSAEncryption
72:11:55:e4:f3:d6:d7:a0:8c:9b:db:27:a4:d0:11:86:33:84:
82:6e:ea:51:9c:1c:8d:4c:35:6b:09:07:57:bf:67:d9:85:77:
8b:c6:c9:86:72:42:d6:30:b8:86:68:75:f8:38:70:d1:00:0f:
c0:b5:17:2e:84:a2:5a:09:cc:8c:2e:a5:94:67:b3:28:90:57:
a8:10:95:20:39:17:84:74:01:c0:4c:62:9b:49:a9:b1:ab:ef:
70:a6:74:73:c2:ec:de:c4:78:a3:ed:f7:2a:04:ba:4a:9e:2f:
42:65:41:79:cd:91:de:c3:42:45:b7:85:ec:07:76:90:55:68:
5b:33:50:bf:02:00:7c:d2:ee:49:db:fa:4d:96:b3:b1:40:51:
dd:dc:1f:15:e0:03:f0:2b:74:11:70:71:51:c0:f9:17:7c:3a:
61:57:a7:c8:57:3f:81:02:ef:76:c5:e5:5f:54:b0:2a:4d:9b:
ab:f3:13:ba:4f:f7:5c:dd:b9:3b:df:42:c3:e6:1c:6b:45:67:
66:56:30:9a:9e:86:77:1c:db:79:fb:c9:f2:3d:15:ef:e5:aa:
f8:a7:fe:b1:57:6f:03:43:f1:e4:20:31:9f:75:d0:69:80:8e:
c0:94:dd:b2:12:e9:07:b8:d8:e5:7b:a5:e3:db:5d:67:b5:59:
19:e1:0a:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/396txHEkqushxWayv+SN6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3
OGE1NzkwHhcNMjYwODEyMjE1MzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGI0N2NhYjlkNWU3ZTFmMjBjMjZkMDU3Yjc0ZmFmNWE1OTc4ZjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20r9pzWZsiHxLz7DaRNYrVwRMQJ2
aKFaj6H+UoDblzcssYkObT92xk0vESzu4mGCbluwVSKFPr+60imKCPbB7wEoTNgL
Ai0yXykhWlOJ99O0eA/sWS/HPc5JBpUB5qAZs1CzIMhHIZbt9arjkmq3r2c8aPry
mSrqbCY6RB1AQ7PqtvbVekO76MVZ/W4ofG0FZPYN8M7QmdNUflS/8+gEiOi48cCu
AL+4UgXKgefb0yPLYmsBopqL+Hd5NzLyxQibhQRVDjBb9AZugjx8Ngmq5FQZC6f0
R5yStlPgytQc4hYPvK3y6dRuVZ8iilHeZyp+1JIhtbZCfw4xaWMFqXCMcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLC0fKudXn4fIMJtBXt0+vWll498MB8GA1UdIwQY
MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt
YTM5YWMyNTM5ZmM1LzEvc0xSOHE1MWVmaDhnd20wRmUzVDY5YVdYajN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1
LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXofMA0G
CSqGSIb3DQEBCwUAA4IBAQByEVXk89bXoIyb2yek0BGGM4SCbupRnByNTDVrCQdX
v2fZhXeLxsmGckLWMLiGaHX4OHDRAA/AtRcuhKJaCcyMLqWUZ7MokFeoEJUgOReE
dAHATGKbSamxq+9wpnRzwuzexHij7fcqBLpKni9CZUF5zZHew0JFt4XsB3aQVWhb
M1C/AgB80u5J2/pNlrOxQFHd3B8V4APwK3QRcHFRwPkXfDphV6fIVz+BAu92xeVf
VLAqTZur8xO6T/dc3bk730LD5hxrRWdmVjCanoZ3HNt5+8nyPRXv5ar4p/6xV28D
Q/HkIDGfddBpgI7AlN2yEukHuNjle6Xj211ntVkZ4QqP
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:02:56 2026 by rpki-client