Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/OHW74TEU9SN8klZg6j5Du3Vbtg0.roa
File: OHW74TEU9SN8klZg6j5Du3Vbtg0.roa (raw, json)
Hash identifier: pLHKUJAE19N+KhXREWARXAn8N5Y7ETjdQIfHCmejASU=
Subject key identifier: 38:75:BB:E1:31:14:F5:23:7C:92:56:60:EA:3E:43:BB:75:5B:B6:0D
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398245845BAA83BD2C89B02332F926D8
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/OHW74TEU9SN8klZg6j5Du3Vbtg0.roa
Signing time: Tue 25 Aug 2026 15:20:33 +0000
ROA not before: Tue 25 Aug 2026 15:20:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199929
IP address blocks: 31.40.197.0/24 maxlen: 24
31.40.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:45:84:5b:aa:83:bd:2c:89:b0:23:32:f9:26:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3875bbe13114f5237c925660ea3e43bb755bb60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:32:8d:b3:e7:ea:be:51:1d:27:ae:b2:36:78:
61:c3:a7:c8:f0:a1:d9:95:4b:75:ab:4c:cd:d8:95:
e8:e9:1b:0f:1f:81:15:50:53:47:1f:79:db:b9:5c:
0b:9d:63:2e:91:49:72:60:30:b6:d6:34:8d:19:dd:
5d:62:13:1f:38:ea:f1:aa:86:15:5d:fc:6d:44:a4:
2f:43:7f:52:46:be:1b:c5:8f:09:7b:a0:0a:0f:8d:
af:a0:20:87:6d:a1:68:57:fa:35:7d:1e:37:47:68:
f3:a3:97:c4:d3:9f:a9:41:77:75:6f:fe:97:0f:1a:
17:32:6b:fa:8a:56:c6:cb:14:2e:a3:31:3e:c5:5d:
64:16:20:28:9c:85:2b:51:3b:e8:37:b7:90:90:57:
9e:df:18:64:f9:d3:4b:68:c5:b7:a3:40:ad:66:d9:
ac:93:98:4b:dd:0c:b1:a1:ae:e1:42:0c:bf:61:6b:
76:c7:fa:f9:a8:16:15:60:5a:fb:0d:b0:02:8d:7d:
05:c8:a1:4e:61:b1:1d:fa:94:2a:c0:0b:d9:57:ae:
a4:88:4f:1f:23:50:6c:a9:b7:61:9e:b1:ca:d1:bf:
80:c1:20:8d:a2:21:2a:1b:32:3f:4d:11:7c:52:75:
5a:dd:72:ad:f4:e9:90:c1:d2:4c:15:ed:56:4f:39:
a7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:75:BB:E1:31:14:F5:23:7C:92:56:60:EA:3E:43:BB:75:5B:B6:0D
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/OHW74TEU9SN8klZg6j5Du3Vbtg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.197.0/24
31.40.207.0/24
Signature Algorithm: sha256WithRSAEncryption
17:81:86:67:fa:94:48:0d:0e:19:25:9f:a1:c2:a6:cc:e7:a1:
27:6e:b2:7d:14:15:8b:e8:a1:0f:a7:0a:c6:0c:f6:a4:c7:0b:
25:80:92:73:c9:bd:3b:ae:04:05:8f:1b:9c:31:0d:89:ad:68:
f4:b2:89:b2:41:86:29:ee:b1:09:60:32:62:db:aa:99:be:9a:
c2:ad:c1:c5:b2:a0:ab:af:c9:a9:b3:32:45:fd:b5:fb:3c:c3:
9f:4a:46:5f:e5:d7:85:31:09:07:fc:f3:88:4f:6c:0b:5a:fd:
da:f1:39:1b:68:08:fc:b8:02:32:a2:30:00:0e:99:60:33:ff:
92:55:5c:ac:91:84:d9:3f:7b:19:38:a6:c9:0b:08:f3:d2:ca:
66:59:2b:a7:19:20:97:e1:44:5f:94:82:dd:e5:a8:a1:3a:15:
ff:1d:5e:90:c1:bd:11:02:6b:bf:11:69:ca:67:96:2f:68:ae:
7e:8f:b5:67:ef:a3:ad:1f:85:86:aa:40:51:d0:ed:16:54:c4:
0b:05:21:51:ad:ca:6d:fa:f1:e1:0e:8c:69:52:4f:bd:85:c2:
2f:88:5d:64:07:77:8a:50:39:35:0f:e4:a1:c8:21:17:38:41:
a8:cd:b9:d2:e1:da:ea:b2:c4:51:e3:63:8a:b9:d6:fe:d2:d1:
ac:2d:72:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:06 2026 by rpki-client