Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/xBOx4v8ImFsM1gj_f-ZX_IND0Ag.roa
File: xBOx4v8ImFsM1gj_f-ZX_IND0Ag.roa (raw, json)
Hash identifier: Qe/yWjsWsu5jslfVgulhx9SfZD1Ww0lyjyRIiCJJcIY=
Subject key identifier: C4:13:B1:E2:FF:08:98:5B:0C:D6:08:FF:7F:E6:57:FC:83:43:D0:08
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039823B09B8358F26DAC7D6F84761A7EA
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/xBOx4v8ImFsM1gj_f-ZX_IND0Ag.roa
Signing time: Tue 25 Aug 2026 15:20:31 +0000
ROA not before: Tue 25 Aug 2026 15:20:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48011
IP address blocks: 5.133.124.0/23 maxlen: 23
5.133.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:3b:09:b8:35:8f:26:da:c7:d6:f8:47:61:a7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c413b1e2ff08985b0cd608ff7fe657fc8343d008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bc:68:f7:71:02:12:e7:72:eb:9b:cd:00:06:
fa:44:3f:10:0b:1d:9f:7c:7e:b5:89:e2:8e:67:9a:
43:31:6e:16:22:cf:4d:9f:42:e2:cd:6c:52:eb:96:
10:58:03:30:6f:10:63:70:1a:92:e6:02:b2:e5:68:
97:86:0e:c8:37:96:84:47:eb:15:85:16:9b:5a:69:
44:85:f4:b2:e5:59:72:41:36:a9:01:9b:62:84:8b:
f5:30:f8:b7:b0:fb:35:4f:54:c1:4c:b3:39:f3:ff:
f0:7f:ee:ca:b8:5b:0c:62:12:a5:db:63:cd:eb:85:
f2:a1:2b:cb:b4:5c:46:42:e1:76:d2:cf:e5:72:d3:
4a:ac:76:91:f9:40:53:ef:a0:78:81:2c:19:3e:c8:
89:11:e4:c2:df:ca:16:ee:e8:99:40:7a:24:db:ac:
03:ec:e3:89:f2:22:70:d6:5c:5c:9a:4d:85:63:7e:
4c:f4:17:89:cb:9e:f5:5b:d6:42:e9:ce:90:e2:6c:
0a:13:fc:c1:1d:5b:2f:00:52:4b:68:6d:db:82:64:
4a:a0:64:fc:34:5a:6c:04:a4:24:2b:fe:97:ab:c7:
ae:2e:04:6a:66:cc:24:9f:6c:f6:29:22:4f:d4:02:
88:25:06:95:99:5f:57:8e:4b:f2:37:fc:84:8b:03:
a3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:13:B1:E2:FF:08:98:5B:0C:D6:08:FF:7F:E6:57:FC:83:43:D0:08
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/xBOx4v8ImFsM1gj_f-ZX_IND0Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.124.0/22
Signature Algorithm: sha256WithRSAEncryption
08:f5:78:14:83:99:b7:e6:86:fe:f1:6f:9d:26:3e:10:61:04:
c3:9e:b4:cb:e7:2a:ab:1f:8c:ed:94:4a:cc:85:23:01:45:f3:
b3:18:37:fd:91:e2:5e:67:82:95:ee:cb:58:4c:15:b6:e6:41:
f7:c3:c2:6c:e0:dd:40:de:dc:6e:3c:3d:86:b2:68:0d:18:30:
71:6b:f5:e2:bd:04:a2:1d:70:22:36:33:19:a8:68:54:8e:fc:
24:24:7a:82:6a:c0:08:9a:6c:b0:14:af:f5:25:41:d0:ec:1e:
35:77:be:80:e1:14:ce:d2:8b:21:52:e9:e0:9b:2c:b9:14:4b:
07:2c:d7:f6:3a:94:a4:fa:ca:55:f4:6b:4f:1c:db:6f:04:13:
0d:26:9a:91:75:88:b1:b3:46:ba:8b:c5:11:13:49:6f:f1:b5:
5d:d5:d4:5f:41:6a:65:67:73:d9:8b:64:82:50:06:ea:b7:f8:
9d:93:e1:5e:d0:7a:49:1e:c3:b4:43:83:d2:4c:86:f5:90:1b:
0c:ef:0e:cc:11:62:1c:ee:17:4d:c9:0e:87:22:c5:69:a4:60:
cb:35:e8:f3:8d:9d:a8:45:ee:b6:47:2d:da:c7:64:6c:d2:61:
37:3d:03:08:3e:71:c2:2d:81:0d:c3:22:52:58:1e:a5:f5:63:
5d:55:c3:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA5gjsJuDWPJtrH1vhHYafqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI1MTUyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDEzYjFlMmZmMDg5ODViMGNkNjA4ZmY3ZmU2NTdmYzgzNDNkMDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLxo93ECEudy65vNAAb6RD8QCx2f
fH61ieKOZ5pDMW4WIs9Nn0LizWxS65YQWAMwbxBjcBqS5gKy5WiXhg7IN5aER+sV
hRabWmlEhfSy5VlyQTapAZtihIv1MPi3sPs1T1TBTLM58//wf+7KuFsMYhKl22PN
64XyoSvLtFxGQuF20s/lctNKrHaR+UBT76B4gSwZPsiJEeTC38oW7uiZQHok26wD
7OOJ8iJw1lxcmk2FY35M9BeJy571W9ZC6c6Q4mwKE/zBHVsvAFJLaG3bgmRKoGT8
NFpsBKQkK/6Xq8euLgRqZswkn2z2KSJP1AKIJQaVmV9XjkvyN/yEiwOjtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMQTseL/CJhbDNYI/3/mV/yDQ9AIMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEveEJPeDR2OEltRnNNMWdqX2YtWlhfSU5EMEFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBYV8MA0G
CSqGSIb3DQEBCwUAA4IBAQAI9XgUg5m35ob+8W+dJj4QYQTDnrTL5yqrH4ztlErM
hSMBRfOzGDf9keJeZ4KV7stYTBW25kH3w8Js4N1A3txuPD2GsmgNGDBxa/XivQSi
HXAiNjMZqGhUjvwkJHqCasAImmywFK/1JUHQ7B41d76A4RTO0oshUungmyy5FEsH
LNf2OpSk+spV9GtPHNtvBBMNJpqRdYixs0a6i8URE0lv8bVd1dRfQWplZ3PZi2SC
UAbqt/idk+Fe0HpJHsO0Q4PSTIb1kBsM7w7MEWIc7hdNyQ6HIsVppGDLNejzjZ2o
Re62Ry3ax2Rs0mE3PQMIPnHCLYENwyJSWB6l9WNdVcOu
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:18 2026 by rpki-client