Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/af5pG0_hNFwXmwx8GDBB_5BAxzU.roa
File: af5pG0_hNFwXmwx8GDBB_5BAxzU.roa (raw, json)
Hash identifier: M1rj1+L9Kc9AM6Sweoz0KJsZ7g5wXgJTKOXPQmbvxkE=
Subject key identifier: 69:FE:69:1B:4F:E1:34:5C:17:9B:0C:7C:18:30:41:FF:90:40:C7:35
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039823BAD286ADAB68C5B416B38D12222
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/af5pG0_hNFwXmwx8GDBB_5BAxzU.roa
Signing time: Tue 25 Aug 2026 15:20:31 +0000
ROA not before: Tue 25 Aug 2026 15:20:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 31.40.199.0/24 maxlen: 24
141.98.48.0/24 maxlen: 24
141.98.112.0/24 maxlen: 24
141.98.113.0/24 maxlen: 24
141.98.114.0/24 maxlen: 24
141.98.115.0/24 maxlen: 24
176.96.130.0/24 maxlen: 24
217.18.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:3b:ad:28:6a:da:b6:8c:5b:41:6b:38:d1:22:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69fe691b4fe1345c179b0c7c183041ff9040c735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ba:09:89:72:84:c0:e2:e6:39:bc:af:bf:b8:
0f:1f:7d:59:06:81:aa:1d:8e:66:4c:4b:4d:e4:08:
75:f1:18:f9:c6:c7:fe:71:4b:15:e3:db:ab:cd:a9:
3c:1d:15:64:4d:5e:01:40:c0:81:1e:a8:1a:df:5d:
1b:cc:3c:11:53:33:56:6e:f5:ce:44:e7:d7:68:ad:
08:cb:9c:c7:53:23:db:0f:d5:af:85:ab:58:40:01:
e4:38:19:45:61:18:95:59:f9:e9:0d:c2:5c:54:9d:
9a:eb:da:c9:79:27:d0:5c:48:e2:9e:bd:6b:36:e0:
25:6a:4d:67:02:0e:cf:7d:41:66:3e:01:a4:9a:1a:
dd:8f:58:18:f4:b7:4a:d5:e3:aa:35:62:af:98:32:
bd:c6:00:88:3d:3c:63:6c:a7:d3:ef:35:5f:d2:53:
f3:29:3d:8b:d8:09:ce:76:66:66:fa:d4:c3:f4:7a:
b4:1d:ce:49:a4:91:10:01:53:a8:c5:6e:a5:a9:7f:
3b:89:f0:3a:a5:6d:01:5f:0b:25:71:46:bc:e9:a3:
d6:33:0b:33:f8:96:23:af:2a:22:7a:2a:a5:1e:26:
c6:45:9b:29:73:9c:c7:99:f7:f0:29:82:a7:81:97:
24:af:07:3a:b2:a5:70:79:f9:1a:b9:96:d0:34:64:
98:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FE:69:1B:4F:E1:34:5C:17:9B:0C:7C:18:30:41:FF:90:40:C7:35
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/af5pG0_hNFwXmwx8GDBB_5BAxzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.199.0/24
141.98.48.0/24
141.98.112.0/22
176.96.130.0/24
217.18.209.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a6:7d:3e:17:70:ca:27:b4:d2:5a:bd:9a:fb:81:ac:9e:1d:
2f:03:2c:a8:b1:eb:c2:17:79:a9:95:64:3e:4a:68:e2:87:97:
c0:da:bf:d8:14:05:35:05:5f:dd:d1:33:27:3a:ad:61:d9:08:
a7:15:2f:ae:c6:f1:5b:47:d6:2e:60:80:43:39:7a:fa:7e:36:
ae:2c:12:b0:68:51:87:84:42:4f:95:9d:6e:a3:3c:5f:a9:6f:
0c:87:7d:bd:f0:f6:97:e1:57:cd:e6:cc:89:ab:2f:f5:7f:55:
49:ff:76:97:c9:74:8c:4d:f8:e2:7a:15:b8:7e:61:f9:0d:3d:
c6:c2:1b:e2:74:28:56:9d:d1:59:d7:89:ce:13:90:4d:94:41:
9d:7a:81:77:04:61:c9:27:07:6f:2f:2f:94:ff:fe:5b:87:e0:
fe:a8:cd:38:b0:d6:50:da:a6:20:97:48:06:06:e2:bd:c7:c2:
ab:e7:c8:ee:a9:bf:f7:d0:cf:58:59:8f:3f:84:7d:20:f5:84:
3e:cb:2c:2c:e4:5a:bf:b4:32:69:9d:d3:cd:50:5c:9f:a7:fd:
ec:8f:46:8c:ca:ac:b1:c1:b3:36:2a:ae:45:87:0a:b7:cc:32:
8c:05:ed:11:3c:60:76:5f:a3:c6:b3:dd:05:e8:70:98:de:a8:
d5:fc:97:d7
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaA5gjutKGratoxbQWs40SIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI1MTUyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWZlNjkxYjRmZTEzNDVjMTc5YjBjN2MxODMwNDFmZjkwNDBjNzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjboJiXKEwOLmObyvv7gPH31ZBoGq
HY5mTEtN5Ah18Rj5xsf+cUsV49urzak8HRVkTV4BQMCBHqga310bzDwRUzNWbvXO
ROfXaK0Iy5zHUyPbD9WvhatYQAHkOBlFYRiVWfnpDcJcVJ2a69rJeSfQXEjinr1r
NuAlak1nAg7PfUFmPgGkmhrdj1gY9LdK1eOqNWKvmDK9xgCIPTxjbKfT7zVf0lPz
KT2L2AnOdmZm+tTD9Hq0Hc5JpJEQAVOoxW6lqX87ifA6pW0BXwslcUa86aPWMwsz
+JYjryoieiqlHibGRZspc5zHmffwKYKngZckrwc6sqVwefkauZbQNGSYhwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGn+aRtP4TRcF5sMfBgwQf+QQMc1MB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvYWY1cEcwX2hORndYbXd4OEdEQkJfNUJBeHpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAHyjHAwQA
jWIwAwQCjWJwAwQAsGCCAwQA2RLRMA0GCSqGSIb3DQEBCwUAA4IBAQB7pn0+F3DK
J7TSWr2a+4Gsnh0vAyyosevCF3mplWQ+Smjih5fA2r/YFAU1BV/d0TMnOq1h2Qin
FS+uxvFbR9YuYIBDOXr6fjauLBKwaFGHhEJPlZ1uozxfqW8Mh3298PaX4VfN5syJ
qy/1f1VJ/3aXyXSMTfjiehW4fmH5DT3GwhvidChWndFZ14nOE5BNlEGdeoF3BGHJ
JwdvLy+U//5bh+D+qM04sNZQ2qYgl0gGBuK9x8Kr58juqb/30M9YWY8/hH0g9YQ+
yyws5Fq/tDJpndPNUFyfp/3sj0aMyqyxwbM2Kq5Fhwq3zDKMBe0RPGB2X6PGs90F
6HCY3qjV/JfX
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:31 2026 by rpki-client