Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/1-AdQTyCAlxK1UXyPclFb4gBV5sw.roa
File: 1-AdQTyCAlxK1UXyPclFb4gBV5sw.roa (raw, json)
Hash identifier: pb2HK064WqlbzVnuT66ZkPVqqfQuNm50utehXBp8M/I=
Subject key identifier: F8:07:50:4F:20:80:97:12:B5:51:7C:8F:72:51:5B:E2:00:55:E6:CC
Certificate issuer: /CN=11f20d5350a95c2ca0c32bf1e44df2c8d6ad0064
Certificate serial: 019E224300431B05D30A9390ABEFDC371DF4
Authority key identifier: 11:F2:0D:53:50:A9:5C:2C:A0:C3:2B:F1:E4:4D:F2:C8:D6:AD:00:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EfINU1CpXCygwyvx5E3yyNatAGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/1-AdQTyCAlxK1UXyPclFb4gBV5sw.roa
Signing time: Wed 13 May 2026 16:54:36 +0000
ROA not before: Wed 13 May 2026 16:54:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19551
IP address blocks: 131.125.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/EfINU1CpXCygwyvx5E3yyNatAGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/EfINU1CpXCygwyvx5E3yyNatAGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EfINU1CpXCygwyvx5E3yyNatAGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:43:00:43:1b:05:d3:0a:93:90:ab:ef:dc:37:1d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11f20d5350a95c2ca0c32bf1e44df2c8d6ad0064
Validity
Not Before: May 13 16:54:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f807504f20809712b5517c8f72515be20055e6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bd:58:d4:62:5f:91:6f:f2:f3:ee:81:5e:69:
a9:40:34:3c:67:8e:a8:cc:53:84:a1:66:a7:af:55:
05:b0:f7:59:56:4c:a7:94:ff:e8:3e:c5:c6:27:1e:
ec:3a:58:62:4f:14:55:57:cb:7e:f5:b8:e0:ef:03:
1a:a9:bf:6d:30:be:7f:b5:a5:90:75:e2:2c:2b:8e:
6b:35:c4:14:18:21:53:10:f5:42:76:56:9d:5d:ac:
52:67:cf:d3:6e:b1:13:2b:37:68:f5:78:5f:14:aa:
1b:49:e8:11:b6:45:e5:69:46:9f:b6:9a:24:8f:18:
65:0a:79:7c:e3:8c:5e:f7:b9:6d:2c:ae:ea:13:7d:
e4:38:e5:3c:63:07:c7:18:fa:ad:16:2c:4d:5e:47:
50:09:1b:9a:67:ee:d9:9e:80:1d:9d:7d:ab:45:0a:
8c:7d:20:17:2f:50:d5:46:0d:71:9c:e7:84:17:c7:
ed:f7:7c:db:04:c5:1f:a3:c7:5a:8f:60:42:10:ae:
e3:04:0f:b4:83:ce:41:e2:4c:f7:03:79:d9:01:83:
32:09:d2:f7:a8:4b:36:6c:0b:3d:7c:a1:8c:66:ea:
3c:a5:8e:4e:d3:81:9f:04:85:84:77:69:2e:0c:15:
df:93:82:c1:50:bf:ba:85:76:a1:96:ba:a8:1b:bc:
7e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:07:50:4F:20:80:97:12:B5:51:7C:8F:72:51:5B:E2:00:55:E6:CC
X509v3 Authority Key Identifier:
keyid:11:F2:0D:53:50:A9:5C:2C:A0:C3:2B:F1:E4:4D:F2:C8:D6:AD:00:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfINU1CpXCygwyvx5E3yyNatAGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/1-AdQTyCAlxK1UXyPclFb4gBV5sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/EfINU1CpXCygwyvx5E3yyNatAGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.125.128.0/17
Signature Algorithm: sha256WithRSAEncryption
67:5f:25:fe:f1:07:34:88:78:e7:2d:18:b4:07:c6:95:84:53:
a1:92:2f:8f:63:4f:10:c9:de:a7:44:a3:10:cb:2b:0f:60:f2:
fa:df:79:b5:f9:b6:e2:16:39:ce:42:d6:72:97:5e:51:36:7a:
a5:8a:e9:2c:47:a2:b5:b5:9c:a5:bf:3b:f8:c9:ef:74:bd:01:
2a:d9:32:47:c8:95:64:1f:6c:17:81:b3:ef:0a:7a:de:80:e6:
3f:83:92:8d:aa:cd:49:51:62:e0:0a:d9:d2:da:45:37:bb:1e:
39:2b:52:4d:ef:0f:10:63:a9:2d:46:5f:62:d0:b3:8e:fa:12:
cc:35:56:e4:a8:83:cf:4b:d2:85:9b:34:45:f6:1c:79:9d:38:
c3:c3:61:a3:6e:d4:7f:1d:09:9c:21:fa:b8:49:08:4b:92:0e:
3d:c5:01:d0:61:ba:c9:80:2c:d4:19:77:91:15:42:59:a1:0f:
46:9a:75:18:ad:47:2d:0f:19:a8:e9:a1:d4:48:f9:38:ec:af:
76:69:49:05:24:3c:96:ba:c7:b4:21:6c:22:5c:73:c1:f1:b7:
bb:b0:f0:33:cd:d3:50:8d:de:8f:5f:8b:11:9b:3e:bc:07:dd:
90:a8:6b:b9:74:20:d5:c9:18:77:fe:1e:49:ab:b6:57:45:ba:
9f:ff:41:c6
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ4iQwBDGwXTCpOQq+/cNx30MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZjIwZDUzNTBhOTVjMmNhMGMzMmJmMWU0NGRmMmM4ZDZh
ZDAwNjQwHhcNMjYwNTEzMTY1NDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODA3NTA0ZjIwODA5NzEyYjU1MTdjOGY3MjUxNWJlMjAwNTVlNmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L1Y1GJfkW/y8+6BXmmpQDQ8Z46o
zFOEoWanr1UFsPdZVkynlP/oPsXGJx7sOlhiTxRVV8t+9bjg7wMaqb9tML5/taWQ
deIsK45rNcQUGCFTEPVCdladXaxSZ8/TbrETKzdo9XhfFKobSegRtkXlaUaftpok
jxhlCnl844xe97ltLK7qE33kOOU8YwfHGPqtFixNXkdQCRuaZ+7ZnoAdnX2rRQqM
fSAXL1DVRg1xnOeEF8ft93zbBMUfo8daj2BCEK7jBA+0g85B4kz3A3nZAYMyCdL3
qEs2bAs9fKGMZuo8pY5O04GfBIWEd2kuDBXfk4LBUL+6hXahlrqoG7x+fQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPgHUE8ggJcStVF8j3JRW+IAVebMMB8GA1UdIwQY
MBaAFBHyDVNQqVwsoMMr8eRN8sjWrQBkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWZJTlUxQ3BYQ3lnd3l2eDVFM3l5TmF0QUdRLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YTRiZWYtYzdmZS00MmQ4LTliZjMt
OGJmOTJmNDZlNDE5LzEvMS1BZFFUeUNBbHhLMVVYeVBjbEZiNGdCVjVzdy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjAvNGE0YmVmLWM3ZmUtNDJkOC05YmYzLThiZjkyZjQ2ZTQx
OS8xL0VmSU5VMUNwWEN5Z3d5dng1RTN5eU5hdEFHUS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB4N9gDAN
BgkqhkiG9w0BAQsFAAOCAQEAZ18l/vEHNIh45y0YtAfGlYRToZIvj2NPEMnep0Sj
EMsrD2Dy+t95tfm24hY5zkLWcpdeUTZ6pYrpLEeitbWcpb87+MnvdL0BKtkyR8iV
ZB9sF4Gz7wp63oDmP4OSjarNSVFi4ArZ0tpFN7seOStSTe8PEGOpLUZfYtCzjvoS
zDVW5KiDz0vShZs0RfYceZ04w8Nho27Ufx0JnCH6uEkIS5IOPcUB0GG6yYAs1Bl3
kRVCWaEPRpp1GK1HLQ8ZqOmh1Ej5OOyvdmlJBSQ8lrrHtCFsIlxzwfG3u7DwM83T
UI3ej1+LEZs+vAfdkKhruXQg1ckYd/4eSau2V0W6n/9Bxg==
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:03:57 2026 by rpki-client