Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/KGIVhKvwEDusYZrvTx-9zTXrYK0.roa
File: KGIVhKvwEDusYZrvTx-9zTXrYK0.roa (raw, json)
Hash identifier: SiYl2WVqhs+6i42FpVTwwT2XOWTUR+UP+fsZf3blCzQ=
Subject key identifier: 28:62:15:84:AB:F0:10:3B:AC:61:9A:EF:4F:1F:BD:CD:35:EB:60:AD
Certificate issuer: /CN=9bed36af13da482fdf79fb5403e5074860eecd0d
Certificate serial: 01A0EC9B561D65B960918C2962CC0ACC3B40
Authority key identifier: 9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/KGIVhKvwEDusYZrvTx-9zTXrYK0.roa
Signing time: Tue 29 Sep 2026 09:59:58 +0000
ROA not before: Tue 29 Sep 2026 09:59:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203680
IP address blocks: 131.117.136.0/22 maxlen: 22
131.117.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:9b:56:1d:65:b9:60:91:8c:29:62:cc:0a:cc:3b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bed36af13da482fdf79fb5403e5074860eecd0d
Validity
Not Before: Sep 29 09:59:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28621584abf0103bac619aef4f1fbdcd35eb60ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:ed:f7:8e:58:77:5f:d6:f3:90:09:79:58:
ed:96:46:fe:f5:0a:1c:9a:18:1d:06:8e:f9:96:2a:
57:45:de:08:97:32:75:0f:aa:b4:5d:63:63:4f:cc:
00:df:a8:6b:6b:39:56:63:b8:a0:ae:56:58:b3:9e:
eb:2b:e5:f9:06:f3:45:73:8c:da:a5:9b:45:e5:16:
cd:c8:94:93:bf:7d:87:bf:6e:44:07:07:f2:92:77:
67:00:16:6b:99:71:0e:1b:03:48:ea:2c:a9:3f:87:
3d:74:f6:4d:ec:81:5a:7e:93:d9:3c:3d:fc:bb:5f:
8b:33:18:b6:01:f4:bf:d9:51:5f:57:ce:98:d9:ba:
d1:9f:ae:53:86:5c:d1:56:b7:f9:34:c2:92:24:57:
65:ca:51:14:3c:a8:2a:46:c7:9f:22:ef:4d:ab:4d:
fe:1f:fd:93:af:d1:a7:64:f6:3b:e2:76:6f:02:b9:
f2:17:f8:53:af:21:f2:21:e8:d1:ed:2a:5a:a7:3e:
f2:12:37:25:c0:8e:e0:f0:52:85:63:8d:92:ee:64:
bc:28:b9:99:29:97:5a:1c:35:2d:ca:05:bf:55:c1:
16:dd:c2:fb:c1:55:e9:b5:0c:90:5f:a9:06:d7:0d:
87:d3:df:68:c5:01:cb:17:a1:04:2f:68:ed:3c:27:
22:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:62:15:84:AB:F0:10:3B:AC:61:9A:EF:4F:1F:BD:CD:35:EB:60:AD
X509v3 Authority Key Identifier:
keyid:9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/KGIVhKvwEDusYZrvTx-9zTXrYK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.117.136.0/21
Signature Algorithm: sha256WithRSAEncryption
15:ee:53:42:2f:e6:c4:13:21:8a:fb:fe:06:66:f9:c9:1b:60:
0c:2d:88:9a:3d:fc:2f:51:5b:aa:59:03:d7:69:b8:67:52:08:
e8:7b:65:da:e9:0a:d7:b0:bb:85:e2:32:6f:1b:96:32:b6:94:
c6:fc:03:03:52:18:3a:1f:df:4a:93:c8:c0:a8:78:95:03:49:
24:23:93:04:fe:1c:66:13:b6:d4:45:35:f1:0a:03:17:71:a1:
8a:81:ad:36:c4:5a:13:f5:41:91:b1:ad:00:22:34:a3:fb:1c:
b6:31:94:a9:62:9d:88:5b:33:bc:59:4b:f1:26:1a:65:32:73:
59:94:e8:4b:a5:8a:d9:d2:07:14:f1:1c:70:02:89:7b:84:ff:
a3:bd:1d:6f:b9:9e:04:e6:ed:e5:96:d1:a4:cd:f5:6e:7c:23:
89:fc:e6:1e:fd:f5:b2:d7:b9:f1:2d:08:2e:d6:ae:4e:20:ce:
1a:81:b7:16:f8:35:9a:5f:9d:85:99:be:79:d8:55:2d:17:91:
d0:55:20:99:eb:20:5b:9a:88:7e:48:b1:3b:10:dd:8b:d4:49:
c0:f6:0b:15:a5:20:4c:30:25:e0:e0:af:08:ae:3b:b6:04:ce:
c7:d5:bc:1f:97:67:c7:56:9b:23:80:90:0f:90:c9:64:d9:4c:
b2:07:bd:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDsm1YdZblgkYwpYswKzDtAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZWQzNmFmMTNkYTQ4MmZkZjc5ZmI1NDAzZTUwNzQ4NjBl
ZWNkMGQwHhcNMjYwOTI5MDk1OTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODYyMTU4NGFiZjAxMDNiYWM2MTlhZWY0ZjFmYmRjZDM1ZWI2MGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqvt945Yd1/W85AJeVjtlkb+9Qoc
mhgdBo75lipXRd4IlzJ1D6q0XWNjT8wA36hrazlWY7igrlZYs57rK+X5BvNFc4za
pZtF5RbNyJSTv32Hv25EBwfykndnABZrmXEOGwNI6iypP4c9dPZN7IFafpPZPD38
u1+LMxi2AfS/2VFfV86Y2brRn65ThlzRVrf5NMKSJFdlylEUPKgqRsefIu9Nq03+
H/2Tr9GnZPY74nZvArnyF/hTryHyIejR7Spapz7yEjclwI7g8FKFY42S7mS8KLmZ
KZdaHDUtygW/VcEW3cL7wVXptQyQX6kG1w2H099oxQHLF6EEL2jtPCciGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFChiFYSr8BA7rGGa708fvc0162CtMB8GA1UdIwQY
MBaAFJvtNq8T2kgv33n7VAPlB0hg7s0NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS0wMnJ4UGFTQ19mZWZ0VUEtVUhTR0R1elEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80YjAyODMtYTkwYy00ZDY0LTgzMDEt
ZDIyMWViZDA4MThkLzEvS0dJVmhLdndFRHVzWVpydlR4LTl6VFhyWUswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80YjAyODMtYTkwYy00ZDY0LTgzMDEtZDIyMWViZDA4MThk
LzEvbS0wMnJ4UGFTQ19mZWZ0VUEtVUhTR0R1elEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg3WIMA0G
CSqGSIb3DQEBCwUAA4IBAQAV7lNCL+bEEyGK+/4GZvnJG2AMLYiaPfwvUVuqWQPX
abhnUgjoe2Xa6QrXsLuF4jJvG5YytpTG/AMDUhg6H99Kk8jAqHiVA0kkI5ME/hxm
E7bURTXxCgMXcaGKga02xFoT9UGRsa0AIjSj+xy2MZSpYp2IWzO8WUvxJhplMnNZ
lOhLpYrZ0gcU8RxwAol7hP+jvR1vuZ4E5u3lltGkzfVufCOJ/OYe/fWy17nxLQgu
1q5OIM4agbcW+DWaX52Fmb552FUtF5HQVSCZ6yBbmoh+SLE7EN2L1EnA9gsVpSBM
MCXg4K8Irju2BM7H1bwfl2fHVpsjgJAPkMlk2UyyB70f
-----END CERTIFICATE-----
Generated at Tue Oct 20 22:18:39 2026 by rpki-client