Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/g4XAdoXr7GHUBXutpKenYHUgJfk.roa
File: g4XAdoXr7GHUBXutpKenYHUgJfk.roa (raw, json)
Hash identifier: UsUPOtSgBwNxXoo0rK+/Dt673VgBvVex6jskhSEIODg=
Subject key identifier: 83:85:C0:76:85:EB:EC:61:D4:05:7B:AD:A4:A7:A7:60:75:20:25:F9
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A1788F90C882192DC721FF20C74E5152B9
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/g4XAdoXr7GHUBXutpKenYHUgJfk.roa
Signing time: Mon 26 Oct 2026 14:13:57 +0000
ROA not before: Mon 26 Oct 2026 14:13:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211567
IP address blocks: 31.40.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:8f:90:c8:82:19:2d:c7:21:ff:20:c7:4e:51:52:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Oct 26 14:13:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8385c07685ebec61d4057bada4a7a760752025f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:70:a0:2e:ab:98:94:c5:63:a4:44:0c:2c:30:
89:2a:6f:0b:1d:e2:90:ad:3f:9c:46:01:b6:a2:f7:
ca:72:07:f7:62:88:df:11:23:56:7c:28:86:11:ef:
cb:40:66:de:21:dc:b4:d4:56:bd:1a:b6:9d:cc:e6:
6a:d2:b9:a2:d5:72:de:37:16:2c:0c:e7:58:7a:11:
d0:b8:e1:10:98:ed:96:b9:7d:37:68:23:56:11:82:
c0:cb:99:7e:78:c4:6d:0b:91:4e:ec:51:94:cf:04:
a6:f6:cd:26:4b:c2:4b:91:bf:ec:b5:01:bc:fd:20:
bd:b1:74:00:10:15:6e:bb:a1:63:e4:77:2c:64:c2:
c8:02:e4:1a:6f:f1:c5:b2:01:56:d0:45:32:6b:7c:
20:3f:4d:86:bc:a1:2d:6b:27:2a:38:31:c8:52:8b:
7e:17:74:b5:7e:3c:89:98:31:13:03:c9:79:12:d4:
94:2e:aa:5c:1d:c1:b8:a1:56:0b:af:33:fb:a7:bb:
f4:d6:1e:12:11:69:f4:df:7c:8d:4c:10:0f:fd:8b:
24:41:1a:19:a1:7a:83:ff:13:21:67:63:96:d8:bb:
1a:d7:40:70:6f:01:16:e8:00:af:2e:a3:5c:85:25:
8a:fd:1b:33:2e:1c:54:ce:3e:04:92:19:b2:ca:d7:
e3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:85:C0:76:85:EB:EC:61:D4:05:7B:AD:A4:A7:A7:60:75:20:25:F9
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/g4XAdoXr7GHUBXutpKenYHUgJfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.198.0/24
Signature Algorithm: sha256WithRSAEncryption
28:e2:86:0a:42:ef:e8:1f:6b:5b:dc:83:61:c1:a1:e8:92:ed:
d4:d1:83:c4:05:6a:80:69:d4:bc:f6:c8:bb:fa:9f:b6:8a:e2:
ea:ea:17:b1:2b:6c:6e:0d:0b:95:79:c4:ab:81:d5:43:eb:04:
a5:f4:53:fa:98:9f:0d:be:f4:56:bc:25:3e:14:bc:99:fa:a6:
03:fc:80:e9:78:d0:3a:cf:3a:e1:25:ac:49:62:6b:19:4c:fd:
e2:e3:02:52:47:ba:03:ff:a2:83:87:9e:35:96:b4:05:d9:c2:
a2:35:5e:7e:5b:06:b7:1e:bf:e1:7d:d3:71:71:b4:a0:b4:e7:
6a:50:21:08:2e:1c:33:eb:f1:89:f4:ab:f0:e1:58:ac:b7:72:
c0:7b:00:ad:f5:94:e2:07:85:2a:9c:98:76:e3:bf:1d:61:48:
76:bc:ef:2c:f2:b1:cc:6f:9e:f0:e5:10:99:dd:0c:98:47:06:
e1:84:2e:e7:1f:d6:53:38:1e:b3:2a:b4:fe:27:05:ad:b9:9f:
b2:f9:fe:76:5c:bd:bf:9e:ff:2a:48:3a:c1:fb:f9:f1:85:e9:
48:a7:57:67:41:32:c4:cf:73:91:06:d1:03:54:5a:ec:b4:80:
32:8c:57:bf:ff:fd:dd:a0:bf:bd:f9:4b:c4:2d:00:fc:7b:8b:
2b:1d:5c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 02:52:06 2026 by rpki-client