Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/_O0Chv0xC92KWlZYJyuLeFkq7nE.roa
File: _O0Chv0xC92KWlZYJyuLeFkq7nE.roa (raw, json)
Hash identifier: 1W0pOdtaWY/ubA7A1J8qOGMXpJykknKVvlXXaeGrn1c=
Subject key identifier: FC:ED:02:86:FD:31:0B:DD:8A:5A:56:58:27:2B:8B:78:59:2A:EE:71
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 01A1791D98D7CA7776B102C3C38CD79CBD57
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/_O0Chv0xC92KWlZYJyuLeFkq7nE.roa
Signing time: Mon 26 Oct 2026 16:49:05 +0000
ROA not before: Mon 26 Oct 2026 16:49:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208515
IP address blocks: 31.42.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:1d:98:d7:ca:77:76:b1:02:c3:c3:8c:d7:9c:bd:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Oct 26 16:49:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fced0286fd310bdd8a5a5658272b8b78592aee71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:26:63:48:86:3a:77:d0:5b:c9:98:41:96:34:
7e:01:03:6e:d6:8c:5e:ed:f9:69:e0:8e:04:5f:de:
da:8e:03:9c:29:a7:39:6e:f9:d2:ea:67:12:36:3d:
a8:67:6e:4d:f7:10:fc:9b:ac:7f:a9:61:52:67:cd:
c3:e4:9f:1b:a4:53:02:af:a2:d9:c2:fd:28:1b:27:
61:da:93:49:38:84:bf:f0:1b:87:09:c0:1a:e2:44:
98:80:3f:fb:32:06:4e:91:d3:91:6d:b1:bb:d6:a6:
ab:c7:8e:5a:c1:ea:4a:69:50:0b:13:a2:66:cc:af:
7a:b2:3a:d6:f0:36:6c:3b:a5:eb:47:49:40:3e:b4:
df:ec:ca:17:3d:3a:d1:97:fd:d1:be:12:a6:00:1c:
36:df:90:78:7a:e0:01:0d:f6:2b:be:26:b7:57:0c:
12:af:ce:20:7b:0b:15:84:da:b5:d6:13:ba:d8:b4:
b0:13:e5:cc:82:26:f4:38:a7:06:7d:74:f3:a6:24:
de:92:3b:9f:e7:24:a3:4c:ef:3e:fe:43:f8:3e:6f:
9f:b0:f7:4e:7d:7f:a1:a5:2b:c8:b7:16:f4:40:77:
6c:56:ef:2d:40:ea:b1:41:15:47:f1:7e:be:52:62:
b9:60:2f:e7:f9:70:5b:2c:7f:9b:9b:04:19:32:03:
3f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:ED:02:86:FD:31:0B:DD:8A:5A:56:58:27:2B:8B:78:59:2A:EE:71
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/_O0Chv0xC92KWlZYJyuLeFkq7nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.121.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:1a:be:09:48:6b:20:4c:32:07:9d:21:d7:2b:b8:9c:bc:9d:
4d:57:27:fa:cd:45:53:96:36:63:73:90:31:20:38:34:4c:3f:
1a:64:02:db:ae:5f:4f:a3:df:61:d8:a2:1b:d9:70:02:9e:a7:
ad:9e:8d:e1:6b:5d:71:b9:b2:53:7d:f9:60:7a:f3:4a:4b:3c:
be:80:78:fb:74:52:c6:3d:98:46:11:bd:df:f6:5d:d1:ad:5c:
ff:6a:4d:7a:49:bd:7d:a1:4b:4f:52:33:ce:8d:6f:d8:6c:bb:
ac:46:85:91:09:a5:66:ee:6d:e3:20:b0:01:ea:41:d0:d8:ec:
62:1e:d5:05:d1:79:f8:1d:d5:ca:42:5f:9e:8f:a7:58:2e:fb:
09:a8:2b:e0:14:36:83:f7:80:a7:3f:6d:a1:a4:75:75:9c:b3:
d1:b2:91:fd:10:98:1d:2e:02:66:df:1d:f6:a9:54:39:c3:fd:
84:d2:5c:02:f7:17:24:ef:d4:63:c0:90:dd:c5:60:4d:b1:0b:
71:9c:bc:40:16:e2:f5:20:a8:07:6c:71:98:9d:20:c6:2a:ef:
42:34:f0:93:07:1d:53:4f:af:67:15:db:90:8f:c5:9f:d1:88:
cb:5f:0c:b8:c2:4b:10:55:b1:a7:fd:dc:a9:81:e6:ba:46:1b:
ce:c8:0d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 06:11:39 2026 by rpki-client