Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/88dnQosTmSABfI99IcvWCPL7spc.roa
File: 88dnQosTmSABfI99IcvWCPL7spc.roa (raw, json)
Hash identifier: 2BCtzsY/xOez3XIx5DiNcEw87BCOb2OsUOpxHNoeC2w=
Subject key identifier: F3:C7:67:42:8B:13:99:20:01:7C:8F:7D:21:CB:D6:08:F2:FB:B2:97
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 01A18C98EF84DA891F2FA9B23E584DA7EAB9
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/88dnQosTmSABfI99IcvWCPL7spc.roa
Signing time: Fri 30 Oct 2026 11:36:35 +0000
ROA not before: Fri 30 Oct 2026 11:36:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 131.123.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:98:ef:84:da:89:1f:2f:a9:b2:3e:58:4d:a7:ea:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Oct 30 11:36:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3c767428b139920017c8f7d21cbd608f2fbb297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:a7:b8:89:d9:7f:19:48:3b:6f:4d:3e:04:
5f:c4:8d:a3:89:4d:7d:90:f4:0c:af:e7:cc:42:b6:
ac:7e:f6:af:c1:76:2c:9a:47:0f:95:40:44:e3:ca:
c2:80:d6:ff:c5:c6:40:c5:be:45:a4:4f:33:cc:e4:
81:17:46:45:9b:fc:c2:9e:e6:39:28:ab:7c:49:1d:
e1:86:55:16:0f:3a:da:ba:3c:2f:09:e2:a5:40:86:
91:e2:f7:1b:81:4a:86:ad:f9:80:1f:54:20:b0:d5:
eb:a1:a0:b5:d5:33:19:66:8c:0e:93:8b:6d:7f:03:
66:1e:0a:a7:38:02:53:df:43:69:30:c2:13:48:2f:
18:a8:e8:10:7b:fd:b2:0a:3a:94:90:8a:0c:ce:f8:
4d:49:0e:11:d0:b0:f3:61:df:8f:e2:13:7b:a2:17:
85:51:3f:0f:60:04:9b:b6:0f:d0:32:98:3c:c6:b3:
38:ed:69:6e:7c:b7:78:cd:28:f6:9b:4a:75:c4:c7:
de:7b:04:f2:a0:38:a2:ea:2f:7c:e2:c8:46:1c:d0:
b8:99:d1:95:65:2d:b3:4d:75:c7:c9:14:38:9d:aa:
1d:b9:83:d2:c4:dd:5d:61:fa:1a:c6:c2:3c:f5:30:
e5:64:c3:c6:ee:4d:0d:c1:a2:df:3d:65:84:1b:0a:
1f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C7:67:42:8B:13:99:20:01:7C:8F:7D:21:CB:D6:08:F2:FB:B2:97
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/88dnQosTmSABfI99IcvWCPL7spc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.123.31.0/24
Signature Algorithm: sha256WithRSAEncryption
56:8c:00:ca:c9:f6:ba:e1:4a:92:69:47:f1:cd:75:c4:da:ed:
11:34:64:f1:43:29:b5:e9:b0:a2:ad:9d:44:f4:2b:59:5d:eb:
a9:79:19:59:ce:50:09:fd:0e:eb:3e:1c:1e:20:51:28:74:1d:
24:f6:a6:83:9c:f8:44:38:45:e6:e7:54:95:70:cd:76:20:55:
52:e9:c9:39:00:2f:b2:84:11:c2:e4:a3:51:b1:3d:ca:c0:8e:
36:94:0d:d9:1f:21:c9:59:bb:ef:39:00:f5:4a:10:5a:47:61:
ab:7f:05:a6:38:a0:a4:02:4e:69:56:60:58:51:60:62:60:b3:
cd:0e:4f:74:22:c4:09:70:1d:93:5f:c6:7e:c1:33:d2:c8:6a:
0e:f5:30:d9:ff:82:ad:92:12:46:b9:4f:44:5b:82:78:01:46:
76:df:46:b1:49:a8:d0:b5:59:ab:96:10:7b:f8:94:fd:a7:17:
f1:b9:9b:91:3f:88:f3:14:1a:4c:ad:ab:60:55:fa:97:a5:9a:
3f:93:e1:5c:ad:24:14:cc:08:c2:4e:a6:93:6b:02:fb:14:3f:
ce:c1:5a:5c:e8:29:59:61:24:3c:ad:b9:f4:8e:71:d0:5c:69:
92:bc:40:67:a2:9c:87:6c:fa:03:db:f1:5c:7d:41:ba:e6:69:
b0:b7:8e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:51:42 2026 by rpki-client