Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/PKB9enByFvgkwHTjSpB1ypdKTd0.roa
File: PKB9enByFvgkwHTjSpB1ypdKTd0.roa (raw, json)
Hash identifier: EkYnIT4qrq5MHcsrCsr98KOVccBDYlyuWlbtf8ZHAzQ=
Subject key identifier: 3C:A0:7D:7A:70:72:16:F8:24:C0:74:E3:4A:90:75:CA:97:4A:4D:DD
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398239B9472C57FB952689A51F8F2BDF
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/PKB9enByFvgkwHTjSpB1ypdKTd0.roa
Signing time: Tue 25 Aug 2026 15:20:30 +0000
ROA not before: Tue 25 Aug 2026 15:20:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47757
IP address blocks: 31.40.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:39:b9:47:2c:57:fb:95:26:89:a5:1f:8f:2b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ca07d7a707216f824c074e34a9075ca974a4ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:8f:21:96:1c:f1:d5:1f:39:c5:41:d7:6c:
8c:b2:2f:38:1d:5d:98:fa:44:a4:32:8c:75:4e:43:
20:68:52:b4:5b:da:bb:00:16:81:83:1b:e6:85:4c:
2f:5e:6a:72:04:5d:27:1a:3e:b8:43:9e:06:22:a8:
e6:1e:25:2a:02:66:38:37:54:1c:96:6e:d4:7c:e6:
38:c9:86:cc:b2:8a:2b:11:ca:5a:ea:b2:92:86:cb:
12:43:9d:f1:6c:3e:66:a2:c5:da:7f:c6:83:d7:8d:
e5:f6:98:7d:a2:ac:f8:78:3b:44:6d:94:36:02:b7:
69:8f:e0:87:9d:d0:e9:e9:96:e2:54:96:3e:76:d6:
74:32:7c:ea:bc:ee:c8:78:18:d3:d1:fb:30:57:0d:
b4:ad:9f:94:86:68:4f:01:14:1c:e5:44:80:25:24:
ef:73:a9:18:28:1b:ad:f1:1d:a1:b3:57:91:ab:de:
fc:32:ac:f8:1b:30:cc:05:c0:30:e1:7b:e6:c5:2c:
7d:4a:d2:0d:3f:89:1a:ec:56:25:69:14:e1:f6:5c:
a2:8f:a6:94:40:d1:79:ef:7e:df:a2:2f:8d:13:db:
32:82:42:b4:8a:92:e3:de:bd:1d:89:29:ba:9c:c8:
fb:19:a5:c9:c6:80:12:f7:d4:34:73:a2:1b:49:15:
17:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A0:7D:7A:70:72:16:F8:24:C0:74:E3:4A:90:75:CA:97:4A:4D:DD
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/PKB9enByFvgkwHTjSpB1ypdKTd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.206.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:3a:9b:03:b9:c1:9a:11:4d:e4:b7:44:b1:9e:4e:54:b1:60:
43:97:aa:5f:0e:00:ae:e5:e2:f6:29:93:0b:e2:77:d5:d9:f2:
6b:ec:f4:d0:9c:d4:5d:b4:c8:89:8c:00:19:0a:a7:d2:8d:1d:
0e:4e:f3:a7:28:d8:ab:49:67:b6:f4:ab:db:e4:e6:02:b4:96:
d2:17:97:ee:16:35:d2:a5:88:b6:48:e4:5f:05:8f:7f:37:cd:
c6:25:b5:ee:32:b8:84:6a:2f:b4:b3:d5:ab:5e:ab:d1:c3:3c:
72:be:38:9d:60:87:6f:f6:99:85:e1:6a:84:eb:20:f3:da:75:
02:4a:1e:55:66:1a:bd:4d:01:ac:e0:ae:52:d6:e4:11:96:85:
14:e7:e9:a6:0f:bd:ae:30:ce:a1:e3:aa:26:f4:01:49:24:71:
0f:1e:b9:12:b0:80:19:d0:b4:da:d9:76:06:64:af:10:2c:73:
5d:57:d4:fa:41:95:1b:70:fc:dd:9a:1e:93:91:24:c6:82:34:
19:dc:6f:6c:65:18:e0:4c:7b:e1:f6:27:75:fc:1d:c8:05:01:
f1:4a:2d:b7:fe:ec:4c:b8:8e:20:78:e9:c9:fe:6f:3e:8d:ff:
4a:40:50:f5:e6:91:b6:f8:94:aa:c4:a5:ec:f5:0d:6a:7f:f3:
f2:34:3d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:20 2026 by rpki-client