Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/131oG2pLxVDrTik7Y7SVs6OHpQI.roa
File: 131oG2pLxVDrTik7Y7SVs6OHpQI.roa (raw, json)
Hash identifier: ii8ZbRg1JyHSfpIlWRzXUlkNyGxw01B6nV6EFo1t6Ew=
Subject key identifier: D7:7D:68:1B:6A:4B:C5:50:EB:4E:29:3B:63:B4:95:B3:A3:87:A5:02
Certificate issuer: /CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Certificate serial: 01A046F7D56B9D668815A92B674F0A92CE23
Authority key identifier: B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/131oG2pLxVDrTik7Y7SVs6OHpQI.roa
Signing time: Fri 28 Aug 2026 06:04:02 +0000
ROA not before: Fri 28 Aug 2026 06:04:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218869
IP address blocks: 177.177.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft
rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:46:f7:d5:6b:9d:66:88:15:a9:2b:67:4f:0a:92:ce:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Validity
Not Before: Aug 28 06:04:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d77d681b6a4bc550eb4e293b63b495b3a387a502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:c5:c3:01:ca:b1:e0:2e:df:8b:7f:79:0a:
e0:d5:47:40:e9:e4:08:65:6e:8d:ab:c8:f1:69:a0:
27:4c:fb:d3:78:01:7e:64:1c:7b:a6:2f:95:14:20:
bd:fd:33:7f:a3:2a:a5:2c:ee:59:54:85:5f:ee:90:
13:26:f3:1f:43:da:db:0a:6d:ef:47:e1:77:1f:d0:
00:13:30:3c:aa:81:db:a4:72:3a:ab:59:3b:d7:9f:
84:f2:63:fc:fc:06:aa:2a:42:31:e6:55:4f:d1:51:
d5:c3:5c:9c:7f:e5:ed:68:50:fa:10:0a:ee:52:c1:
a6:9e:26:84:98:89:92:87:81:97:da:da:d0:11:41:
62:ba:dd:58:25:13:7b:f0:a0:e6:ad:5f:2b:7e:b5:
2a:da:e0:a2:cd:ac:3c:33:47:5c:7f:08:83:ea:fe:
29:07:50:97:6f:87:be:f6:8d:61:43:b0:7c:2e:ea:
b9:49:8f:02:99:dc:7d:5e:9d:10:b0:13:fe:16:bf:
00:74:3c:78:0a:5b:e9:86:fe:bf:1c:11:eb:45:f7:
48:69:70:af:38:85:82:f7:3e:94:f0:69:e4:cc:a7:
7a:4e:4b:3f:c9:8e:bf:4a:38:97:a2:49:39:69:c2:
30:28:d8:61:a6:c1:a9:8c:6e:b2:e1:40:16:18:39:
6b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7D:68:1B:6A:4B:C5:50:EB:4E:29:3B:63:B4:95:B3:A3:87:A5:02
X509v3 Authority Key Identifier:
keyid:B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/131oG2pLxVDrTik7Y7SVs6OHpQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.83.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:28:08:7c:41:ed:3a:b5:7d:97:0f:cd:f8:13:d2:54:04:38:
af:7a:10:96:e3:a3:5c:31:76:7b:0e:3e:84:ae:d8:4a:f1:f2:
7f:86:88:3b:dc:66:d8:f1:dd:bf:55:2a:68:3f:2f:a3:13:74:
02:85:09:da:2a:b1:27:59:9a:78:8d:61:94:95:85:2a:ae:e3:
a8:82:e5:95:df:18:fd:cd:a4:88:a1:46:7c:ae:9d:a8:5f:4c:
13:a1:a8:72:56:b8:dc:89:4d:68:2b:f7:8b:82:d0:1b:d6:47:
ca:7b:d5:ae:30:f9:d7:4d:ea:84:c7:76:49:e0:0a:81:6a:fb:
6f:f3:78:1c:29:52:f0:d9:ba:81:3b:1f:d8:de:14:48:bc:69:
0f:45:43:0a:fe:7e:a5:50:fc:98:a5:62:42:8c:da:13:9c:ba:
66:db:60:e7:ff:db:b4:dc:b6:21:7f:85:06:05:80:ec:15:0a:
0f:1b:3c:a7:a1:22:f1:b9:4b:54:80:94:20:68:3d:0e:45:5b:
79:9b:ae:24:ee:48:e9:a0:03:35:46:4c:8a:c1:22:49:31:93:
9e:cb:4b:1e:c9:3c:c0:a0:9c:46:fc:e4:d3:bb:73:53:72:b0:
7c:06:9b:7b:15:98:79:00:c1:e5:d4:e6:40:ef:36:07:59:15:
2c:56:57:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 11:00:40 2026 by rpki-client