Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/w8-3tlYcY-D6cNb2WOYSXR0ZW70.roa
File: w8-3tlYcY-D6cNb2WOYSXR0ZW70.roa (raw, json)
Hash identifier: VMIJXHpVyhtOXNY23Z9aZevbh8y/QYoN/2/8T80RZOs=
Subject key identifier: C3:CF:B7:B6:56:1C:63:E0:FA:70:D6:F6:58:E6:12:5D:1D:19:5B:BD
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039825698C5D7849D70AC10236407C411
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/w8-3tlYcY-D6cNb2WOYSXR0ZW70.roa
Signing time: Tue 25 Aug 2026 15:20:38 +0000
ROA not before: Tue 25 Aug 2026 15:20:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214854
IP address blocks: 31.40.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:56:98:c5:d7:84:9d:70:ac:10:23:64:07:c4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3cfb7b6561c63e0fa70d6f658e6125d1d195bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:b3:3c:01:6e:20:fb:a3:9b:50:1b:ff:14:
9e:18:35:3c:af:43:63:a0:93:8d:8a:72:aa:3a:7f:
23:a1:26:84:21:63:07:5e:c8:3f:05:9f:62:b2:0d:
19:d9:9b:58:51:31:a7:bb:01:99:57:2f:a5:20:40:
b2:52:77:e5:16:49:ab:21:87:17:1a:33:b7:bd:95:
5c:d6:83:d3:d6:44:d1:14:9a:92:d0:39:8c:eb:03:
7f:58:24:07:c5:1e:a7:5d:95:c4:35:2d:f2:26:36:
e0:bf:6d:ef:17:75:69:e0:08:0f:a7:52:83:dd:ae:
fd:8b:92:da:24:86:c5:f5:3e:d0:82:1a:f5:74:78:
9c:40:d9:e1:3d:70:71:57:5b:bb:a9:a6:df:f5:30:
88:7f:fa:d1:e6:d9:33:60:7a:40:e2:88:2c:84:34:
e1:39:74:75:0a:39:8d:e6:46:4b:23:12:88:03:cb:
d9:ff:19:39:3a:7c:7e:9c:9c:a0:d1:5e:8d:86:91:
b5:aa:fb:54:cb:01:30:d8:0b:42:a5:72:93:6f:82:
8b:27:ff:36:05:fc:72:d6:85:ae:53:71:5a:68:f0:
97:e7:4b:d0:38:7f:fb:70:a2:dc:ab:fb:d0:e5:e7:
c7:1f:06:91:d8:76:f6:e9:01:e3:50:b9:27:46:39:
ac:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CF:B7:B6:56:1C:63:E0:FA:70:D6:F6:58:E6:12:5D:1D:19:5B:BD
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/w8-3tlYcY-D6cNb2WOYSXR0ZW70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.199.0/24
Signature Algorithm: sha256WithRSAEncryption
96:55:44:55:07:31:d5:99:e5:d1:90:a2:5c:f7:94:d4:c5:8d:
00:ec:8e:5a:4e:62:91:a0:72:47:7d:28:f6:7e:e2:4d:56:e6:
d4:84:82:57:f2:2e:23:0b:e2:bf:27:b1:79:0d:7a:92:d0:a4:
a7:2c:f1:44:29:34:5a:27:c1:54:a1:7e:d7:6f:15:f9:03:ba:
da:0f:d6:87:01:75:cf:7d:fe:26:4b:de:4a:f1:4e:7a:ef:55:
84:ef:0a:c7:88:d7:a9:9e:df:79:4c:be:65:ec:ae:4f:42:7c:
a7:8e:22:dd:44:d9:ca:f6:a8:9d:7e:c4:ca:f0:77:c6:18:d4:
dd:8b:f5:fa:76:75:68:81:14:09:17:74:60:e4:03:b4:b7:6f:
9e:ff:6c:9f:87:e6:83:b0:71:21:59:50:33:25:c4:d4:07:d6:
b5:e5:18:f9:c6:10:c9:d7:28:d7:82:db:01:87:72:60:49:c2:
df:fc:40:5c:87:8a:8f:2f:35:da:c2:99:93:f8:ae:d0:b0:db:
ef:60:b0:9c:a5:b6:f8:e8:8b:18:7f:a8:59:ef:17:7f:14:f3:
fb:6c:92:93:8b:db:9e:9b:c1:f6:a4:e3:ce:e3:24:33:17:40:
87:49:f9:13:17:c3:98:66:76:37:f2:ed:b2:fd:1e:16:4c:7b:
2d:ce:bc:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA5glaYxdeEnXCsECNkB8QRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI1MTUyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2NmYjdiNjU2MWM2M2UwZmE3MGQ2ZjY1OGU2MTI1ZDFkMTk1YmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOazPAFuIPujm1Ab/xSeGDU8r0Nj
oJONinKqOn8joSaEIWMHXsg/BZ9isg0Z2ZtYUTGnuwGZVy+lIECyUnflFkmrIYcX
GjO3vZVc1oPT1kTRFJqS0DmM6wN/WCQHxR6nXZXENS3yJjbgv23vF3Vp4AgPp1KD
3a79i5LaJIbF9T7Qghr1dHicQNnhPXBxV1u7qabf9TCIf/rR5tkzYHpA4ogshDTh
OXR1CjmN5kZLIxKIA8vZ/xk5Onx+nJyg0V6NhpG1qvtUywEw2AtCpXKTb4KLJ/82
Bfxy1oWuU3FaaPCX50vQOH/7cKLcq/vQ5efHHwaR2Hb26QHjULknRjms8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMPPt7ZWHGPg+nDW9ljmEl0dGVu9MB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvdzgtM3RsWWNZLUQ2Y05iMldPWVNYUjBaVzcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyjHMA0G
CSqGSIb3DQEBCwUAA4IBAQCWVURVBzHVmeXRkKJc95TUxY0A7I5aTmKRoHJHfSj2
fuJNVubUhIJX8i4jC+K/J7F5DXqS0KSnLPFEKTRaJ8FUoX7XbxX5A7raD9aHAXXP
ff4mS95K8U5671WE7wrHiNepnt95TL5l7K5PQnynjiLdRNnK9qidfsTK8HfGGNTd
i/X6dnVogRQJF3Rg5AO0t2+e/2yfh+aDsHEhWVAzJcTUB9a15Rj5xhDJ1yjXgtsB
h3JgScLf/EBch4qPLzXawpmT+K7QsNvvYLCcpbb46IsYf6hZ7xd/FPP7bJKTi9ue
m8H2pOPO4yQzF0CHSfkTF8OYZnY38u2y/R4WTHstzrwf
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:49 2026 by rpki-client