Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/pj30e_0kadqwjq0L3J55WAoKI8E.roa
File: pj30e_0kadqwjq0L3J55WAoKI8E.roa (raw, json)
Hash identifier: 5DdRoX+R76hdeHDFTO1xAik3lfSUfaDcDKvdi+WYi1U=
Subject key identifier: A6:3D:F4:7B:FD:24:69:DA:B0:8E:AD:0B:DC:9E:79:58:0A:0A:23:C1
Certificate issuer: /CN=1bb3fde08b266939256311e1bb2c83e3b2019aa0
Certificate serial: 019FF1D760625AC16A6A41D5D1961F0476E0
Authority key identifier: 1B:B3:FD:E0:8B:26:69:39:25:63:11:E1:BB:2C:83:E3:B2:01:9A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/pj30e_0kadqwjq0L3J55WAoKI8E.roa
Signing time: Tue 11 Aug 2026 17:20:51 +0000
ROA not before: Tue 11 Aug 2026 17:20:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136988
IP address blocks: 31.186.38.0/23 maxlen: 23
31.186.38.0/24 maxlen: 24
31.186.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:d7:60:62:5a:c1:6a:6a:41:d5:d1:96:1f:04:76:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb3fde08b266939256311e1bb2c83e3b2019aa0
Validity
Not Before: Aug 11 17:20:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a63df47bfd2469dab08ead0bdc9e79580a0a23c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e2:7d:8e:df:6d:77:2b:95:71:b7:b2:13:9a:
65:d3:d9:a2:da:34:1a:37:d0:e7:35:a1:f5:27:92:
b6:9a:8c:13:b3:5b:04:30:7c:37:26:31:c5:64:a1:
0b:7c:17:ea:ae:2d:ea:3a:80:2b:b5:6e:be:0d:94:
c2:63:3f:9c:6f:12:70:5a:c6:23:67:e0:f3:4b:ab:
b9:e5:cd:89:4f:c0:1e:d9:19:f1:ec:52:62:af:ac:
a4:ce:56:a9:5e:bd:91:ce:66:c0:74:99:7e:a0:c9:
ee:64:bf:ed:7f:ed:6d:ab:d4:da:2e:18:10:f9:f4:
81:2a:ed:8c:80:8c:ae:96:4d:e5:85:90:67:f9:f7:
24:94:c8:24:1b:d0:38:1a:e4:75:93:50:7b:7b:e9:
f3:59:de:30:77:14:b2:47:34:f5:ca:c4:a6:ab:e3:
5f:57:30:b1:d7:3c:8b:99:80:0e:f3:28:bc:5c:19:
c5:4c:b7:7a:41:0d:17:99:8a:f9:ba:62:31:b1:2e:
4b:c1:de:b3:bf:b5:ae:0e:52:1e:c8:ff:cd:13:ae:
6a:88:29:ec:91:a0:0d:61:3b:74:8d:21:24:6b:6b:
8d:58:b1:4b:b5:74:f7:9a:c1:79:ea:2e:93:15:6d:
9b:4b:65:6d:f6:79:41:40:ac:eb:ac:f2:ef:23:ba:
36:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3D:F4:7B:FD:24:69:DA:B0:8E:AD:0B:DC:9E:79:58:0A:0A:23:C1
X509v3 Authority Key Identifier:
keyid:1B:B3:FD:E0:8B:26:69:39:25:63:11:E1:BB:2C:83:E3:B2:01:9A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/pj30e_0kadqwjq0L3J55WAoKI8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.38.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:37:e3:b5:7c:60:95:35:bc:46:3a:a4:b0:67:ef:fc:8c:e4:
08:50:19:03:27:d7:1e:74:87:44:f9:ad:46:63:88:1f:05:a9:
e5:86:fc:b2:e0:4c:b3:d2:46:2b:a7:6b:ed:bc:40:69:1c:f7:
1e:ac:b9:ae:ae:4c:19:9c:e1:19:00:05:56:04:9f:19:bd:f2:
d3:dd:28:68:4d:10:c5:ee:e4:94:0e:27:7a:74:4c:21:5f:eb:
f3:a5:f2:72:1a:c8:97:1f:8b:c3:f5:bb:9b:35:46:ac:ca:c4:
fe:44:d1:a6:2c:99:5b:69:14:b9:66:0d:58:dc:cc:1b:d1:7f:
d7:c8:78:2b:09:ac:ef:a3:48:05:75:4c:91:9b:0d:e1:12:ff:
1d:7a:b0:34:d7:c2:18:a9:7e:fc:1c:12:61:e4:d5:5e:95:9b:
fc:9b:37:44:4d:df:d5:16:57:8c:cb:c1:c1:43:f5:a6:04:8b:
8b:84:2a:b9:f8:22:e8:ed:01:e8:fa:d7:62:64:31:f6:83:4b:
eb:c2:ff:f7:e6:e8:02:cf:f6:aa:b2:91:08:ab:76:08:9d:5b:
24:24:15:df:8e:de:91:50:c0:32:18:7e:7a:28:57:92:00:45:
d3:cd:fa:13:76:68:01:90:e4:a7:c1:ff:60:14:41:fa:94:61:
d4:cb:a3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 18:11:38 2026 by rpki-client