Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/kDK-2nK5gKpcQBVObK9ollEfabg.roa
File: kDK-2nK5gKpcQBVObK9ollEfabg.roa (raw, json)
Hash identifier: d8DIftqNLq9M0RFEiqKE7lACGh+qIO7x2oC6QxQSAeI=
Subject key identifier: 90:32:BE:DA:72:B9:80:AA:5C:40:15:4E:6C:AF:68:96:51:1F:69:B8
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 01A13023DC360082E0F22F1D3E2999C0B700
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/kDK-2nK5gKpcQBVObK9ollEfabg.roa
Signing time: Mon 12 Oct 2026 12:43:38 +0000
ROA not before: Mon 12 Oct 2026 12:43:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201776
IP address blocks: 31.40.130.0/24 maxlen: 24
31.40.132.0/24 maxlen: 24
31.40.137.0/24 maxlen: 24
31.40.138.0/24 maxlen: 24
31.40.140.0/24 maxlen: 24
31.40.143.0/24 maxlen: 24
31.40.151.0/24 maxlen: 24
31.40.153.0/24 maxlen: 24
31.40.162.0/23 maxlen: 23
31.40.165.0/24 maxlen: 24
31.40.167.0/24 maxlen: 24
31.40.168.0/24 maxlen: 24
31.40.169.0/24 maxlen: 24
31.40.170.0/24 maxlen: 24
31.40.171.0/24 maxlen: 24
31.40.172.0/23 maxlen: 23
31.40.174.0/24 maxlen: 24
31.40.178.0/23 maxlen: 23
92.118.132.0/24 maxlen: 24
92.118.133.0/24 maxlen: 24
92.118.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:23:dc:36:00:82:e0:f2:2f:1d:3e:29:99:c0:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Oct 12 12:43:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9032beda72b980aa5c40154e6caf6896511f69b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:9c:43:54:88:bb:d4:e2:3d:b9:ae:27:33:
87:fe:20:91:e5:d4:14:a9:3c:51:22:9e:bc:1e:3b:
72:e7:17:68:39:5a:44:40:12:d3:b0:b1:df:67:bd:
66:93:8e:92:ff:30:83:05:c4:86:c2:20:34:85:19:
f9:39:fd:a3:4c:f3:5b:6d:25:8f:2f:40:03:5c:74:
c4:42:29:3c:ed:ff:4f:66:f4:99:02:63:b5:16:64:
bc:62:45:8e:a2:cb:7d:0d:e9:18:f5:e3:bc:b5:d7:
82:06:71:ec:bb:8b:d1:70:68:c1:3a:8d:72:7a:a4:
bc:71:f8:ff:d8:80:8c:c9:0f:c6:9a:5b:b0:3c:ba:
84:f7:06:8b:8c:96:84:75:93:ee:b9:34:46:21:66:
28:9a:ca:33:82:1b:39:7d:2f:78:56:ef:4e:b3:7c:
01:55:37:5a:3d:14:22:30:7b:7a:23:c5:1b:98:cb:
fa:b9:34:6a:50:2a:6b:5d:38:be:9c:91:14:b1:7f:
f8:c9:02:3e:10:33:fd:95:86:06:5d:2d:f8:d9:e8:
db:e3:9a:85:20:1b:63:0e:6b:33:de:2e:41:97:c1:
ad:eb:05:bb:92:0c:c9:91:46:c6:dd:5d:42:e8:7b:
38:ec:da:46:ea:74:a0:7d:56:87:e8:bf:a0:8a:56:
c1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:32:BE:DA:72:B9:80:AA:5C:40:15:4E:6C:AF:68:96:51:1F:69:B8
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/kDK-2nK5gKpcQBVObK9ollEfabg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.130.0/24
31.40.132.0/24
31.40.137.0-31.40.138.255
31.40.140.0/24
31.40.143.0/24
31.40.151.0/24
31.40.153.0/24
31.40.162.0/23
31.40.165.0/24
31.40.167.0-31.40.174.255
31.40.178.0/23
92.118.132.0/23
92.118.135.0/24
Signature Algorithm: sha256WithRSAEncryption
31:2d:34:9a:b3:55:75:60:37:f4:60:f0:eb:b9:cc:ef:0d:b0:
5f:7a:ea:c2:2b:8e:7d:c5:47:3a:a0:5c:5e:2b:5e:8d:fa:19:
04:7c:bb:c5:27:c6:71:6b:3b:6f:fc:b7:f2:9c:76:8d:77:4c:
c2:a3:6c:bf:a3:82:fc:83:80:2b:9d:97:5b:d7:b2:76:57:4e:
75:26:c9:5b:62:8f:22:dd:9a:42:01:d6:0d:2c:c5:dd:fc:29:
6d:75:29:5f:0b:22:86:0f:1a:7d:33:d7:97:82:cd:94:10:c3:
e0:ef:5f:d7:cd:60:66:f9:76:db:33:1a:8f:5a:25:87:39:c5:
b0:2d:82:4f:ec:c6:12:b6:a8:64:1c:47:a9:21:6c:06:af:c5:
7f:9c:b8:52:03:de:15:2b:2d:8e:fa:99:5c:56:59:05:25:e7:
bb:7f:23:7d:6a:8f:a7:e6:e7:14:af:6d:c9:d7:65:a6:b1:32:
4e:ac:04:93:b9:a4:bb:85:28:52:9d:aa:d4:72:d5:51:9b:00:
69:13:08:1e:7e:7d:2a:3d:86:01:a6:75:1c:2b:ef:77:6b:03:
e7:1a:c7:13:6b:87:31:c2:be:2d:83:16:12:45:09:a5:ac:ee:
37:9b:a2:7d:33:d8:51:44:cf:67:b6:46:0c:0e:03:7a:77:03:
1f:37:20:f7
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAaEwI9w2AILg8i8dPimZwLcAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl
ZTY2ZDcwHhcNMjYxMDEyMTI0MzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDMyYmVkYTcyYjk4MGFhNWM0MDE1NGU2Y2FmNjg5NjUxMWY2OWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFicQ1SIu9TiPbmuJzOH/iCR5dQU
qTxRIp68Hjty5xdoOVpEQBLTsLHfZ71mk46S/zCDBcSGwiA0hRn5Of2jTPNbbSWP
L0ADXHTEQik87f9PZvSZAmO1FmS8YkWOost9DekY9eO8tdeCBnHsu4vRcGjBOo1y
eqS8cfj/2ICMyQ/GmluwPLqE9waLjJaEdZPuuTRGIWYomsozghs5fS94Vu9Os3wB
VTdaPRQiMHt6I8UbmMv6uTRqUCprXTi+nJEUsX/4yQI+EDP9lYYGXS342ejb45qF
IBtjDmsz3i5Bl8Gt6wW7kgzJkUbG3V1C6Hs47NpG6nSgfVaH6L+gilbBdQIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFJAyvtpyuYCqXEAVTmyvaJZRH2m4MB8GA1UdIwQY
MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt
NGEzNGMxYmJhYjJiLzEva0RLLTJuSzVnS3BjUUJWT2JLOW9sbEVmYWJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi
LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBkBAIAATBeAwQAHyiCAwQA
HyiEMAwDBAAfKIkDBAAfKIoDBAAfKIwDBAAfKI8DBAAfKJcDBAAfKJkDBAEfKKID
BAAfKKUwDAMEAB8opwMEAB8orgMEAR8osgMEAVx2hAMEAFx2hzANBgkqhkiG9w0B
AQsFAAOCAQEAMS00mrNVdWA39GDw67nM7w2wX3rqwiuOfcVHOqBcXitejfoZBHy7
xSfGcWs7b/y38px2jXdMwqNsv6OC/IOAK52XW9eydldOdSbJW2KPIt2aQgHWDSzF
3fwpbXUpXwsihg8afTPXl4LNlBDD4O9f181gZvl22zMaj1olhznFsC2CT+zGErao
ZBxHqSFsBq/Ff5y4UgPeFSstjvqZXFZZBSXnu38jfWqPp+bnFK9tyddlprEyTqwE
k7mku4UoUp2q1HLVUZsAaRMIHn59Kj2GAaZ1HCvvd2sD5xrHE2uHMcK+LYMWEkUJ
pazuN5uifTPYUUTPZ7ZGDA4DencDHzcg9w==
-----END CERTIFICATE-----
Generated at Wed Oct 28 18:41:23 2026 by rpki-client