Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/iHtutKQ-Kc0DCjzqvSqhhjslx7E.roa
File: iHtutKQ-Kc0DCjzqvSqhhjslx7E.roa (raw, json)
Hash identifier: MBfBWOOo2JPXsW10EZ6bhbTxzXQT+bgm0ju3ybzg7Vk=
Subject key identifier: 88:7B:6E:B4:A4:3E:29:CD:03:0A:3C:EA:BD:2A:A1:86:3B:25:C7:B1
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0FB415C163483D0AA284CF7C2A82D64E7
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/iHtutKQ-Kc0DCjzqvSqhhjslx7E.roa
Signing time: Fri 02 Oct 2026 06:15:59 +0000
ROA not before: Fri 02 Oct 2026 06:15:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51722
IP address blocks: 31.40.196.0/24 maxlen: 24
31.40.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:41:5c:16:34:83:d0:aa:28:4c:f7:c2:a8:2d:64:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Oct 2 06:15:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=887b6eb4a43e29cd030a3ceabd2aa1863b25c7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:0d:ba:0b:e3:5b:ca:2a:1b:af:20:c1:4d:
6f:02:05:3e:19:42:57:3c:2a:25:7c:90:7c:ac:14:
22:21:8a:9f:4a:75:db:08:df:22:27:0e:59:17:40:
32:5a:c8:2c:5d:38:28:31:46:83:0f:cc:cf:41:61:
b8:be:59:fa:ed:fa:d7:ea:f5:12:56:0a:b8:20:ba:
e5:5c:11:d2:99:70:19:6a:0f:65:74:a7:9c:6c:72:
8b:e2:3b:ac:85:cf:70:d2:4d:0f:00:76:b6:08:16:
80:06:bd:84:9d:7a:6c:23:15:5e:f2:61:84:b1:57:
fe:bd:15:9a:4f:ee:8e:4a:c7:0b:45:81:7d:5d:b8:
5a:cb:69:af:0f:90:99:27:73:c1:1b:0c:41:4a:18:
04:68:23:fc:e6:5d:e7:5c:b8:bb:85:03:05:01:bc:
34:8e:bc:5c:72:6e:7f:83:08:4a:23:54:0b:4a:97:
70:37:1e:cc:02:6e:5b:c4:cb:29:69:e8:6c:7e:ae:
62:1f:79:3f:33:e9:71:35:49:e2:ec:b1:6f:a0:8d:
b8:9a:ab:46:4a:24:a8:f8:81:76:9f:56:fe:e1:f8:
7f:c4:d5:ca:99:55:77:24:a1:0e:68:b8:8e:4a:c0:
a8:2d:a1:7c:88:30:20:29:67:ea:cc:9c:9b:d4:a1:
ad:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7B:6E:B4:A4:3E:29:CD:03:0A:3C:EA:BD:2A:A1:86:3B:25:C7:B1
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/iHtutKQ-Kc0DCjzqvSqhhjslx7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.196.0/24
31.40.204.0/24
Signature Algorithm: sha256WithRSAEncryption
86:9d:81:6a:eb:70:05:26:8e:be:db:af:19:cd:08:ce:26:2d:
58:9c:8c:92:65:b1:c8:62:bf:ac:70:84:94:7c:1e:52:42:e4:
b2:5e:d7:7a:79:d1:c1:b8:6d:23:ec:32:40:c6:ad:3d:b1:b2:
c1:0b:3b:d9:fb:8d:67:8c:0b:c9:15:c6:25:98:bf:38:61:c7:
26:43:7f:81:97:52:8d:ac:12:98:ff:6a:30:f2:2a:e1:15:d6:
74:cd:0b:fa:43:09:76:1d:fa:86:e2:5b:98:c1:69:3e:98:1c:
f7:19:6c:94:63:32:a4:33:44:05:23:c8:68:01:a8:50:68:ee:
52:40:6d:20:fe:f8:c9:cc:e9:7e:84:a4:6a:18:6e:c4:80:6c:
05:c3:80:ea:fa:d0:08:1d:5d:b8:fc:88:b0:bb:47:52:cf:ba:
bd:aa:e7:00:23:11:90:63:20:cf:62:8e:c9:b6:c5:e4:ab:0b:
ec:1c:df:05:37:77:c1:d1:75:73:db:a6:d4:2c:6e:c5:ee:aa:
d8:92:c8:5d:be:a1:47:70:8e:0d:d2:94:4f:81:b5:61:76:42:
bb:14:4b:f9:0b:e0:62:49:c2:75:92:af:7d:ff:71:fb:a0:1e:
ff:00:2a:12:9b:ad:1a:1d:ca:00:37:cb:bc:02:0a:81:97:71:
df:c9:3c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:38:22 2026 by rpki-client