Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/1-kM5KqcC9VyVZ5Ukf_g6-Xm-gJk.roa
File: 1-kM5KqcC9VyVZ5Ukf_g6-Xm-gJk.roa (raw, json)
Hash identifier: /SUjSByO6AN75w/G3XvsE4eAt4OoOvQyQ6z6+Bw5tsM=
Subject key identifier: FA:43:39:2A:A7:02:F5:5C:95:67:95:24:7F:F8:3A:F9:79:BE:80:99
Certificate issuer: /CN=98643c057d17327fa50eae843cb1e515b345f95b
Certificate serial: 01A06B91EBF49142413B7A1D4D76C6ADAA86
Authority key identifier: 98:64:3C:05:7D:17:32:7F:A5:0E:AE:84:3C:B1:E5:15:B3:45:F9:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/1-kM5KqcC9VyVZ5Ukf_g6-Xm-gJk.roa
Signing time: Fri 04 Sep 2026 08:38:40 +0000
ROA not before: Fri 04 Sep 2026 08:38:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:91:eb:f4:91:42:41:3b:7a:1d:4d:76:c6:ad:aa:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98643c057d17327fa50eae843cb1e515b345f95b
Validity
Not Before: Sep 4 08:38:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa43392aa702f55c956795247ff83af979be8099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:28:2b:cd:c8:32:53:4f:66:11:79:1c:c6:
b7:74:0b:95:52:26:96:26:1b:47:4a:83:15:fb:74:
72:06:b3:9a:47:a5:6c:8a:61:96:65:aa:b5:c6:5e:
49:83:96:03:d6:a2:b3:ef:dc:ba:84:76:77:85:2e:
a1:ae:28:fc:99:aa:02:04:e1:5c:43:c8:11:3d:03:
0f:fd:d7:d3:5c:ce:ec:5d:94:27:e0:03:52:b4:ad:
1d:cb:e3:6b:61:c0:1b:67:b4:b3:7f:b0:77:81:a8:
57:10:6c:f0:b9:4e:ef:a4:0b:ab:b6:6c:d8:50:17:
21:75:53:0c:cc:11:ca:69:77:7d:3f:7c:c6:cf:9b:
07:b2:fb:93:b6:f5:18:bf:b6:e3:d8:0d:b1:1d:74:
b5:31:2f:88:d5:b0:ee:99:ea:a3:11:ed:6c:c1:6d:
dc:05:a2:5f:ba:d4:fb:76:28:12:0e:66:ff:6b:47:
38:2c:73:65:0a:b3:8e:75:fb:72:80:1f:d2:90:25:
eb:83:f7:44:25:27:a7:91:ed:e5:2f:ce:14:e3:8a:
6d:c2:eb:fe:2d:05:09:bd:15:b7:d0:57:ed:1f:01:
97:67:e7:5f:77:d2:2b:06:0d:fc:59:b6:e6:88:b7:
36:8a:d1:a3:e3:02:69:87:34:56:5c:58:64:2a:9e:
50:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:43:39:2A:A7:02:F5:5C:95:67:95:24:7F:F8:3A:F9:79:BE:80:99
X509v3 Authority Key Identifier:
keyid:98:64:3C:05:7D:17:32:7F:A5:0E:AE:84:3C:B1:E5:15:B3:45:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/1-kM5KqcC9VyVZ5Ukf_g6-Xm-gJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.61.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:07:28:52:df:61:b2:69:6b:84:16:53:a6:27:eb:62:24:96:
e5:32:68:4b:5c:54:38:1b:f2:cb:26:23:95:a6:20:f6:9a:ef:
49:5a:7c:7e:ba:65:4d:4c:7d:58:c4:72:52:70:64:ac:45:68:
96:fd:af:3d:33:81:82:9e:dc:49:31:7e:ca:76:5a:c9:b4:e3:
65:06:8e:6d:0e:fb:73:d3:ec:f8:af:d7:03:b1:8a:39:94:99:
a7:ba:9a:7d:e3:7b:eb:d0:11:71:ce:c7:11:15:0e:7e:3f:53:
37:a1:60:97:c9:78:d4:7f:71:8e:37:62:7c:3c:e9:e5:c5:ba:
d7:4f:1d:ed:56:36:b6:b3:78:79:cf:c3:74:a9:97:d7:c5:07:
21:8f:01:d8:42:9a:22:34:55:d5:65:33:ba:e5:49:9e:22:12:
d2:36:df:e8:2e:06:01:3b:47:fb:4c:08:3a:c8:fc:8a:5c:b7:
83:cf:61:5e:aa:5f:de:b1:5f:03:b4:9f:0d:76:e2:89:0b:40:
e4:d0:96:41:0a:0d:d0:a8:00:23:71:cf:23:10:27:9e:5a:16:
67:18:4f:92:71:42:e7:84:1a:b1:e4:5f:55:89:7e:a7:7d:4d:
ef:e6:08:eb:79:a0:58:bd:56:e9:7d:5c:db:0c:cc:0c:34:74:
05:4a:50:a3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaBrkev0kUJBO3odTXbGraqGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjQzYzA1N2QxNzMyN2ZhNTBlYWU4NDNjYjFlNTE1YjM0
NWY5NWIwHhcNMjYwOTA0MDgzODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTQzMzkyYWE3MDJmNTVjOTU2Nzk1MjQ3ZmY4M2FmOTc5YmU4MDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGwoK83IMlNPZhF5HMa3dAuVUiaW
JhtHSoMV+3RyBrOaR6VsimGWZaq1xl5Jg5YD1qKz79y6hHZ3hS6hrij8maoCBOFc
Q8gRPQMP/dfTXM7sXZQn4ANStK0dy+NrYcAbZ7Szf7B3gahXEGzwuU7vpAurtmzY
UBchdVMMzBHKaXd9P3zGz5sHsvuTtvUYv7bj2A2xHXS1MS+I1bDumeqjEe1swW3c
BaJfutT7digSDmb/a0c4LHNlCrOOdftygB/SkCXrg/dEJSenke3lL84U44ptwuv+
LQUJvRW30FftHwGXZ+dfd9IrBg38WbbmiLc2itGj4wJphzRWXFhkKp5QBQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPpDOSqnAvVclWeVJH/4Ovl5voCZMB8GA1UdIwQY
MBaAFJhkPAV9FzJ/pQ6uhDyx5RWzRflbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdROEJYMFhNbi1sRHE2RVBMSGxGYk5GLVZzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kYzMwOTgtNjQ4Zi00YWU3LWEzYTkt
ZDVjYzFkZTc1YWFjLzEvMS1rTTVLcWNDOVZ5Vlo1VWtmX2c2LVhtLWdKay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZmIvZGMzMDk4LTY0OGYtNGFlNy1hM2E5LWQ1Y2MxZGU3NWFh
Yy8xL21HUThCWDBYTW4tbERxNkVQTEhsRmJORi1Wcy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB/SPTAN
BgkqhkiG9w0BAQsFAAOCAQEAOgcoUt9hsmlrhBZTpifrYiSW5TJoS1xUOBvyyyYj
laYg9prvSVp8frplTUx9WMRyUnBkrEVolv2vPTOBgp7cSTF+ynZaybTjZQaObQ77
c9Ps+K/XA7GKOZSZp7qafeN769ARcc7HERUOfj9TN6Fgl8l41H9xjjdifDzp5cW6
108d7VY2trN4ec/DdKmX18UHIY8B2EKaIjRV1WUzuuVJniIS0jbf6C4GATtH+0wI
Osj8ily3g89hXqpf3rFfA7SfDXbiiQtA5NCWQQoN0KgAI3HPIxAnnloWZxhPknFC
54QaseRfVYl+p31N7+YI63mgWL1W6X1c2wzMDDR0BUpQow==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:30:16 2026 by rpki-client