Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/lHPjGqRuiSCvKOFu4s8puafFozE.roa
File: lHPjGqRuiSCvKOFu4s8puafFozE.roa (raw, json)
Hash identifier: c+J+BSyukScwU5sUnIkgPcAkyk1EkNlqY/jukFTdV9E=
Subject key identifier: 94:73:E3:1A:A4:6E:89:20:AF:28:E1:6E:E2:CF:29:B9:A7:C5:A3:31
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039824F3EDA2F49CDA7CC88FDDEC4813C
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/lHPjGqRuiSCvKOFu4s8puafFozE.roa
Signing time: Tue 25 Aug 2026 15:20:36 +0000
ROA not before: Tue 25 Aug 2026 15:20:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208972
IP address blocks: 31.40.205.0/24 maxlen: 24
85.235.73.0/24 maxlen: 24
85.235.74.0/24 maxlen: 24
176.96.128.0/24 maxlen: 24
193.111.79.0/24 maxlen: 24
212.87.196.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:4f:3e:da:2f:49:cd:a7:cc:88:fd:de:c4:81:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9473e31aa46e8920af28e16ee2cf29b9a7c5a331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:85:aa:07:12:1f:a0:94:07:b8:fb:4e:73:b5:
76:e3:eb:da:05:c6:ca:aa:26:61:98:1f:da:57:7c:
e0:92:99:39:14:35:0e:e9:46:50:52:92:d9:35:57:
e6:6f:87:fb:c5:25:06:85:b4:a7:51:8f:fa:d4:24:
4b:b4:73:d2:28:88:60:58:60:6b:f0:ba:97:25:01:
ce:bc:84:44:75:d4:95:8e:ac:c8:5d:b6:d3:5b:9a:
38:f6:6c:63:d7:ca:be:90:28:9b:38:d2:01:c2:e5:
6b:95:b6:7b:d7:7d:af:07:42:fa:c0:03:0c:ff:46:
4d:8d:7f:67:2d:a4:88:47:f6:57:41:20:b5:eb:6a:
68:2f:e8:52:56:66:71:78:2c:92:2e:7f:f0:b7:ac:
00:f1:f1:81:ab:22:76:5e:dd:9b:3f:8f:d7:6a:a6:
da:ad:a3:35:6e:a0:f0:ac:f9:f2:c2:bb:5b:8e:48:
fc:e3:36:cc:2c:4b:48:ef:c7:0e:9c:fa:df:41:ad:
1a:e0:d7:09:94:6c:c7:de:61:ef:e6:8f:7c:38:c1:
eb:69:8c:17:df:74:8f:ea:37:42:d2:c9:2b:3e:f7:
1c:cd:ec:7c:7e:f9:85:9c:97:01:ed:4f:a9:5c:23:
bc:df:49:8d:3a:40:fb:9a:e4:7f:1e:de:e4:24:d1:
e8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:73:E3:1A:A4:6E:89:20:AF:28:E1:6E:E2:CF:29:B9:A7:C5:A3:31
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/lHPjGqRuiSCvKOFu4s8puafFozE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.205.0/24
85.235.73.0-85.235.74.255
176.96.128.0/24
193.111.79.0/24
212.87.196.0/24
217.18.208.0/24
Signature Algorithm: sha256WithRSAEncryption
20:bd:9d:a9:2a:6d:cb:44:67:f8:85:77:6b:3f:a6:3b:a0:22:
9b:ab:3d:3d:50:58:5a:19:3a:db:60:18:c7:90:aa:a5:37:c2:
e9:fc:4a:89:7b:b4:38:8c:2a:2e:1e:96:f6:9d:c9:10:da:61:
10:d6:1b:7a:91:95:b5:f4:63:1e:82:07:94:29:19:f6:02:43:
bb:df:b4:cb:71:9b:87:6e:f5:be:6e:48:21:b1:5c:eb:2d:23:
aa:3c:eb:1c:6b:a6:58:33:8a:61:48:29:24:33:63:5c:71:fc:
8c:b0:96:33:35:aa:c7:95:8d:64:90:eb:e7:7a:19:8c:84:e9:
ad:76:6c:08:15:58:27:b3:11:2b:03:70:66:4e:cc:d8:31:3d:
18:ed:ce:bb:a1:43:d6:0f:be:3e:84:c7:26:e8:43:2a:45:cf:
2b:d2:cb:57:6d:70:22:93:e4:a6:55:fa:ae:96:11:94:af:1a:
54:4d:24:ed:bd:ff:96:ac:67:ce:05:c4:68:17:92:48:01:61:
8e:f4:54:41:7d:d5:57:80:13:d8:eb:34:7a:7a:33:b3:9b:d3:
57:f2:ac:d8:17:08:66:8d:de:47:93:b4:c8:91:03:0f:6a:32:
d1:e8:cc:b3:60:aa:5a:90:f8:e3:18:7e:dd:9c:40:46:84:3c:
88:b0:52:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:20 2026 by rpki-client