Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/pXRHnW0CGelA1v5fOosdfPIK-B0.roa
File: pXRHnW0CGelA1v5fOosdfPIK-B0.roa (raw, json)
Hash identifier: M6o3WafUQDiT+3RmDIv7Cc94kPrZtivQImcttPxTTqw=
Subject key identifier: A5:74:47:9D:6D:02:19:E9:40:D6:FE:5F:3A:8B:1D:7C:F2:0A:F8:1D
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0FB415B6C4729E93428C9A5F148B09D34
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/pXRHnW0CGelA1v5fOosdfPIK-B0.roa
Signing time: Fri 02 Oct 2026 06:15:59 +0000
ROA not before: Fri 02 Oct 2026 06:15:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44382
IP address blocks: 31.40.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:41:5b:6c:47:29:e9:34:28:c9:a5:f1:48:b0:9d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Oct 2 06:15:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a574479d6d0219e940d6fe5f3a8b1d7cf20af81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:af:a1:3e:6b:ac:79:5f:d4:23:51:77:59:
53:14:71:e9:e4:95:7f:5b:d4:92:24:59:c5:0c:4a:
b6:45:66:8d:92:c4:36:d2:5f:e1:77:3c:22:44:c7:
6c:74:12:bd:41:f8:4e:09:17:80:7c:17:a7:a0:48:
ed:6a:25:2d:a3:0e:56:b7:94:26:74:79:0e:10:bb:
89:d7:82:d8:5e:c6:50:16:8f:11:bc:6a:a9:29:17:
10:a0:0c:df:0b:1f:c9:05:c8:c1:79:d3:fb:a4:eb:
48:dd:08:b3:e3:66:a3:c5:ca:6d:b4:9a:30:4d:41:
2b:f9:f2:fa:c9:04:f9:62:0e:a5:01:ab:c0:c0:65:
f5:03:cd:d4:63:d9:66:4a:21:d9:aa:1a:bd:53:14:
18:15:4d:b0:0f:2e:40:f9:79:43:1c:bc:24:e6:d9:
cb:a0:87:b0:6a:44:81:f0:aa:8b:f4:23:9b:c2:2f:
d3:a1:52:cc:53:3f:dd:17:4d:25:01:a6:0f:97:8e:
1e:c4:34:72:60:89:37:48:b5:81:d5:07:84:fc:13:
7c:c9:42:8b:4f:87:ed:c7:91:74:54:c5:bb:6f:6e:
d3:51:83:66:f9:28:95:96:66:e8:7c:47:68:92:aa:
4a:e6:d3:f6:ee:e6:9d:ad:25:61:c6:e4:ac:9a:1b:
53:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:74:47:9D:6D:02:19:E9:40:D6:FE:5F:3A:8B:1D:7C:F2:0A:F8:1D
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/pXRHnW0CGelA1v5fOosdfPIK-B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.204.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:c3:d1:17:8b:42:4f:b0:f7:59:50:0a:5e:1b:ee:e4:02:a9:
af:61:5f:3a:cf:09:e2:ea:ca:5d:6b:44:87:61:ea:5a:2c:cb:
33:7e:30:14:8f:30:4f:aa:b8:48:0f:ec:96:30:e9:07:92:1b:
85:4c:69:4f:d5:46:d1:1e:89:3f:4a:3e:ee:7a:49:e9:3f:39:
ee:71:84:e1:60:6c:99:18:62:d0:a4:fb:46:81:2b:d5:07:f0:
3e:37:ce:3b:38:fa:20:74:f6:97:cf:28:67:b2:56:f6:2e:45:
ca:be:e2:a2:24:39:f3:81:47:7e:11:86:b3:2d:b4:e2:24:9d:
68:06:b1:d4:4b:e3:1d:46:62:ce:43:e7:15:b7:3f:57:0c:9d:
3f:6b:13:ac:61:80:19:f3:33:04:eb:a6:a6:c6:29:e9:39:8b:
e5:34:14:42:f8:b7:9f:0e:b3:01:b4:e6:85:14:53:8b:13:42:
f8:5c:e6:47:ee:7f:d6:7b:0e:2c:83:34:e4:f2:5f:c2:09:9b:
48:66:1b:d2:6f:6a:4c:63:a7:a1:73:16:6c:a9:c0:a1:94:6c:
fc:7c:3f:f3:00:48:11:65:e1:45:ea:c8:ca:18:7b:cf:6b:7a:
a0:77:01:6d:37:0c:18:8e:79:bf:95:6b:3b:33:3c:59:96:e8:
40:d3:bd:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaD7QVtsRynpNCjJpfFIsJ00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYxMDAyMDYxNTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTc0NDc5ZDZkMDIxOWU5NDBkNmZlNWYzYThiMWQ3Y2YyMGFmODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGevoT5rrHlf1CNRd1lTFHHp5JV/
W9SSJFnFDEq2RWaNksQ20l/hdzwiRMdsdBK9QfhOCReAfBenoEjtaiUtow5Wt5Qm
dHkOELuJ14LYXsZQFo8RvGqpKRcQoAzfCx/JBcjBedP7pOtI3Qiz42ajxcpttJow
TUEr+fL6yQT5Yg6lAavAwGX1A83UY9lmSiHZqhq9UxQYFU2wDy5A+XlDHLwk5tnL
oIewakSB8KqL9CObwi/ToVLMUz/dF00lAaYPl44exDRyYIk3SLWB1QeE/BN8yUKL
T4ftx5F0VMW7b27TUYNm+SiVlmbofEdokqpK5tP27uadrSVhxuSsmhtTQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKV0R51tAhnpQNb+XzqLHXzyCvgdMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvcFhSSG5XMENHZWxBMXY1Zk9vc2RmUElLLUIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyjMMA0G
CSqGSIb3DQEBCwUAA4IBAQBsw9EXi0JPsPdZUApeG+7kAqmvYV86zwni6spda0SH
YepaLMszfjAUjzBPqrhID+yWMOkHkhuFTGlP1UbRHok/Sj7ueknpPznucYThYGyZ
GGLQpPtGgSvVB/A+N847OPogdPaXzyhnslb2LkXKvuKiJDnzgUd+EYazLbTiJJ1o
BrHUS+MdRmLOQ+cVtz9XDJ0/axOsYYAZ8zME66amxinpOYvlNBRC+LefDrMBtOaF
FFOLE0L4XOZH7n/Wew4sgzTk8l/CCZtIZhvSb2pMY6ehcxZsqcChlGz8fD/zAEgR
ZeFF6sjKGHvPa3qgdwFtNwwYjnm/lWs7MzxZluhA070C
-----END CERTIFICATE-----
Generated at Tue Oct 13 01:16:43 2026 by rpki-client