Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/0k22dehC4H1TiltgFNCMkz4niw0.roa
File: 0k22dehC4H1TiltgFNCMkz4niw0.roa (raw, json)
Hash identifier: 4BSiDUyw5zuKjxb3PJKa8lDclVpP4Vb6mp+VPjLoOqk=
Subject key identifier: D2:4D:B6:75:E8:42:E0:7D:53:8A:5B:60:14:D0:8C:93:3E:27:8B:0D
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398237357F6FFF39D919FDD10BDF0A07
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/0k22dehC4H1TiltgFNCMkz4niw0.roa
Signing time: Tue 25 Aug 2026 15:20:30 +0000
ROA not before: Tue 25 Aug 2026 15:20:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44382
IP address blocks: 31.40.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:37:35:7f:6f:ff:39:d9:19:fd:d1:0b:df:0a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d24db675e842e07d538a5b6014d08c933e278b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5d:9c:1a:df:01:62:e6:e1:41:18:33:a3:03:
76:5e:7c:52:32:a3:81:9f:fe:54:7e:1f:11:90:ff:
c4:e2:f8:1c:67:73:32:f5:59:db:fc:48:d4:c8:01:
39:85:c8:6b:aa:53:b7:77:b4:59:af:3f:95:2f:dc:
51:54:c0:6d:f7:c8:2f:9e:86:f4:80:43:a9:d8:2e:
ef:62:65:63:76:0a:41:96:ff:50:00:b5:56:0a:65:
95:d4:57:76:c2:e2:86:af:be:cc:bf:e9:57:2d:33:
48:c2:f8:29:c8:29:ed:76:66:b6:9f:1b:27:3d:07:
57:f6:3e:a1:cb:16:db:83:68:d4:45:51:5b:4e:4e:
79:ee:21:df:10:b0:fc:39:a9:a2:f0:5e:29:f0:fd:
45:6d:70:77:32:74:d7:55:b5:b1:58:9b:37:d5:f6:
ad:d5:41:46:50:56:a3:39:81:81:d6:83:64:8d:38:
66:7e:3d:15:65:bc:d7:d7:5a:38:b4:97:dc:eb:3e:
35:83:c5:dc:31:7f:47:52:5c:59:2f:e7:19:bc:67:
d8:5e:ae:01:29:da:09:03:04:5c:d9:f5:7e:23:13:
de:19:49:e3:29:1e:e2:20:d0:14:88:7b:b3:87:31:
0e:28:3a:98:03:64:7a:a2:25:2b:10:6a:c8:1b:2c:
b5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4D:B6:75:E8:42:E0:7D:53:8A:5B:60:14:D0:8C:93:3E:27:8B:0D
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/0k22dehC4H1TiltgFNCMkz4niw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.204.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:65:f3:32:ac:cb:2a:43:51:81:4a:11:fb:81:5f:c8:83:22:
44:9b:12:16:b0:3e:6d:11:66:79:66:89:3a:6c:d4:00:d0:38:
10:5f:60:f6:25:d4:4f:ce:ad:9f:8e:8b:30:ee:2a:10:8c:63:
3b:4d:a1:af:82:1e:98:7f:6c:a9:51:e6:38:30:6f:2d:97:7e:
86:4e:1e:50:94:87:d3:21:48:40:24:08:79:27:a8:06:b4:0e:
fb:83:8f:8c:68:64:31:9e:a7:6f:2b:bc:61:38:14:a4:70:77:
fc:c4:27:b4:da:bb:43:c9:5e:84:2b:ab:50:a3:b4:01:4c:69:
cc:fe:3a:90:8a:6f:c5:7c:8f:48:97:ba:02:5f:01:f6:08:79:
4f:49:83:34:12:86:ae:b5:91:3b:85:15:fb:f5:ed:19:7a:12:
9b:60:6b:db:02:ea:7f:95:79:32:59:1a:81:e9:96:64:9b:15:
c9:a5:81:98:78:26:fe:d6:77:d4:7f:a4:da:9c:3f:3b:21:1d:
35:c0:e5:eb:2b:92:20:1b:b2:4f:53:d4:20:2f:a7:7e:de:f3:
d4:55:6b:97:9f:69:7c:15:d6:cd:8c:9b:5b:85:03:2f:9c:6b:
0b:e2:9c:d1:06:03:2c:fb:5d:53:13:7e:6d:95:a5:ab:a7:6b:
41:1c:64:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA5gjc1f2//OdkZ/dEL3woHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI1MTUyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjRkYjY3NWU4NDJlMDdkNTM4YTViNjAxNGQwOGM5MzNlMjc4YjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV2cGt8BYubhQRgzowN2XnxSMqOB
n/5Ufh8RkP/E4vgcZ3My9Vnb/EjUyAE5hchrqlO3d7RZrz+VL9xRVMBt98gvnob0
gEOp2C7vYmVjdgpBlv9QALVWCmWV1Fd2wuKGr77Mv+lXLTNIwvgpyCntdma2nxsn
PQdX9j6hyxbbg2jURVFbTk557iHfELD8Oami8F4p8P1FbXB3MnTXVbWxWJs31fat
1UFGUFajOYGB1oNkjThmfj0VZbzX11o4tJfc6z41g8XcMX9HUlxZL+cZvGfYXq4B
KdoJAwRc2fV+IxPeGUnjKR7iINAUiHuzhzEOKDqYA2R6oiUrEGrIGyy1FwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNJNtnXoQuB9U4pbYBTQjJM+J4sNMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvMGsyMmRlaEM0SDFUaWx0Z0ZOQ01rejRuaXcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyjMMA0G
CSqGSIb3DQEBCwUAA4IBAQAqZfMyrMsqQ1GBShH7gV/IgyJEmxIWsD5tEWZ5Zok6
bNQA0DgQX2D2JdRPzq2fjosw7ioQjGM7TaGvgh6Yf2ypUeY4MG8tl36GTh5QlIfT
IUhAJAh5J6gGtA77g4+MaGQxnqdvK7xhOBSkcHf8xCe02rtDyV6EK6tQo7QBTGnM
/jqQim/FfI9Il7oCXwH2CHlPSYM0EoautZE7hRX79e0ZehKbYGvbAup/lXkyWRqB
6ZZkmxXJpYGYeCb+1nfUf6TanD87IR01wOXrK5IgG7JPU9QgL6d+3vPUVWuXn2l8
FdbNjJtbhQMvnGsL4pzRBgMs+11TE35tlaWrp2tBHGTa
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:07 2026 by rpki-client