Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/bKam-QF0hAVKIr7uU4GhnjFhoNw.roa
File: bKam-QF0hAVKIr7uU4GhnjFhoNw.roa (raw, json)
Hash identifier: IiEAHA6LBRwbMc3DI0Wp/JgQMj2jSHonSenES30jsQk=
Subject key identifier: 6C:A6:A6:F9:01:74:84:05:4A:22:BE:EE:53:81:A1:9E:31:61:A0:DC
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 019E44259F6F3CB2A529A628AB150B029A8A
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/bKam-QF0hAVKIr7uU4GhnjFhoNw.roa
Signing time: Wed 20 May 2026 06:49:36 +0000
ROA not before: Wed 20 May 2026 06:49:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201776
IP address blocks: 31.40.132.0/24 maxlen: 24
31.40.137.0/24 maxlen: 24
31.40.138.0/24 maxlen: 24
31.40.140.0/24 maxlen: 24
31.40.143.0/24 maxlen: 24
31.40.151.0/24 maxlen: 24
31.40.153.0/24 maxlen: 24
31.40.162.0/23 maxlen: 23
31.40.165.0/24 maxlen: 24
31.40.167.0/24 maxlen: 24
31.40.168.0/23 maxlen: 23
31.40.168.0/24 maxlen: 24
31.40.170.0/23 maxlen: 23
31.40.172.0/23 maxlen: 23
31.40.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:25:9f:6f:3c:b2:a5:29:a6:28:ab:15:0b:02:9a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: May 20 06:49:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ca6a6f9017484054a22beee5381a19e3161a0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:20:6a:2b:c8:9f:47:40:df:45:72:1d:e2:d3:
2e:5e:28:9a:8c:38:2f:9d:de:d1:dc:de:53:5c:3a:
c7:bd:e7:62:46:40:83:eb:98:87:54:41:46:02:f3:
2f:0c:d7:4b:1c:04:12:47:47:41:68:9f:ff:11:54:
59:ed:1f:14:b8:06:8e:de:33:17:74:09:ed:ac:73:
62:6d:ae:4a:c3:e4:6f:f8:98:b9:9c:ab:e2:4e:df:
2b:ba:e7:99:7f:93:51:2b:ae:02:51:52:d6:81:b4:
90:62:42:47:bb:e5:07:a3:bd:44:f1:30:01:d6:44:
12:65:a6:6c:54:f1:25:ec:17:1b:b1:50:06:23:3c:
19:64:c7:3c:12:23:d1:3e:0e:29:ff:a6:88:13:21:
da:fb:30:45:e2:45:73:2b:47:78:49:75:18:46:50:
47:11:b5:13:4e:7f:bd:27:f9:b3:7b:10:94:44:3b:
c5:da:68:62:16:95:d5:ab:bf:de:15:20:31:21:f5:
75:43:66:88:cd:d6:ef:53:7c:ff:9b:e7:85:94:a7:
6c:e3:32:9a:44:e5:74:1c:ad:55:84:58:a2:ad:1f:
1d:40:67:f5:86:b6:99:f0:a2:b6:de:13:74:1f:99:
75:e4:c6:a9:3f:1b:d8:99:74:91:58:3f:b8:f7:ab:
1d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A6:A6:F9:01:74:84:05:4A:22:BE:EE:53:81:A1:9E:31:61:A0:DC
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/bKam-QF0hAVKIr7uU4GhnjFhoNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.132.0/24
31.40.137.0-31.40.138.255
31.40.140.0/24
31.40.143.0/24
31.40.151.0/24
31.40.153.0/24
31.40.162.0/23
31.40.165.0/24
31.40.167.0-31.40.173.255
31.40.178.0/23
Signature Algorithm: sha256WithRSAEncryption
71:59:93:bb:47:b2:2a:c9:55:d9:05:ed:cb:be:5c:f8:28:7a:
d6:0f:22:42:92:20:c2:5c:50:c3:eb:8e:4c:54:48:6a:3f:59:
c0:6d:57:a0:8a:25:7b:f3:78:2a:9d:11:35:1a:12:d6:a1:b9:
2d:15:0a:83:34:f1:a0:f0:08:e6:ec:23:70:79:82:cf:05:7f:
6f:c5:3a:51:1b:ae:1c:0a:88:fd:35:ab:ef:ab:6b:3d:d8:85:
56:68:eb:d8:a1:bb:71:94:49:3f:11:cc:b5:1f:21:df:15:e3:
0f:18:43:b4:81:0e:1d:df:8f:5f:45:13:65:8c:b0:95:c9:c6:
f2:ec:f9:db:55:4b:f6:a4:07:dd:ed:cd:6a:82:6c:e4:d1:8e:
89:cc:d0:8c:42:88:cb:95:23:f0:d7:1b:6b:04:36:cc:bd:c8:
41:10:d3:1b:90:f4:36:4d:f9:b7:ec:78:2e:24:16:c9:be:a7:
5f:2c:b7:b3:c2:c1:0d:0b:5d:8b:8d:77:ea:2a:4f:f8:39:74:
8c:14:b6:ef:fa:60:b1:e0:c0:56:df:94:03:d9:e0:e6:08:24:
06:07:d3:8d:7e:b0:0c:84:9d:b6:46:6e:9a:a7:1a:d8:d5:a6:
09:f8:84:9a:aa:02:02:97:c4:96:4f:ef:4b:61:4d:00:c8:43:
bf:91:23:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:40:45 2026 by rpki-client