Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/sBcp-KfPMLb3b0O-MHNhu68HhH4.roa
File: sBcp-KfPMLb3b0O-MHNhu68HhH4.roa (raw, json)
Hash identifier: bn1J4rpbxYSjkRdiPx8otefx7IPJbaM21sshZ5BvBsw=
Subject key identifier: B0:17:29:F8:A7:CF:30:B6:F7:6F:43:BE:30:73:61:BB:AF:07:84:7E
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 01A01A9B1B2622C2757500C6A5598C8FDFFC
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/sBcp-KfPMLb3b0O-MHNhu68HhH4.roa
Signing time: Wed 19 Aug 2026 15:19:27 +0000
ROA not before: Wed 19 Aug 2026 15:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201776
IP address blocks: 31.40.130.0/24 maxlen: 24
31.40.132.0/24 maxlen: 24
31.40.137.0/24 maxlen: 24
31.40.138.0/24 maxlen: 24
31.40.140.0/24 maxlen: 24
31.40.143.0/24 maxlen: 24
31.40.151.0/24 maxlen: 24
31.40.153.0/24 maxlen: 24
31.40.162.0/23 maxlen: 23
31.40.165.0/24 maxlen: 24
31.40.167.0/24 maxlen: 24
31.40.168.0/23 maxlen: 23
31.40.168.0/24 maxlen: 24
31.40.170.0/23 maxlen: 23
31.40.172.0/23 maxlen: 23
31.40.178.0/23 maxlen: 23
92.118.132.0/24 maxlen: 24
92.118.133.0/24 maxlen: 24
92.118.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:9b:1b:26:22:c2:75:75:00:c6:a5:59:8c:8f:df:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Aug 19 15:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b01729f8a7cf30b6f76f43be307361bbaf07847e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:84:5f:66:15:f3:4e:92:ab:cf:33:49:4b:
70:6f:69:a6:83:39:c3:1c:b5:ba:96:8d:e3:18:56:
6c:01:51:87:55:23:47:e0:df:22:2b:85:5a:15:e9:
6f:71:2b:fd:de:ac:4c:66:c7:38:cb:95:45:57:f7:
f7:e8:84:3b:42:6b:d4:5a:ad:da:98:50:9f:29:7e:
ec:8b:36:63:b7:f1:f2:90:13:34:c4:00:de:82:b6:
96:27:6d:77:42:47:ed:f2:54:75:18:56:43:60:e7:
b6:a4:4f:35:dc:56:dd:4b:5b:04:12:be:5a:ea:52:
ed:79:6f:1d:38:6b:a5:2c:e1:88:fc:0a:39:65:29:
1d:97:4a:42:ba:f4:1d:4a:dc:d4:4e:07:e2:4c:3d:
47:36:64:b3:0e:ca:39:fd:fb:41:a2:34:d7:b4:ec:
4b:23:f3:9b:0d:08:39:40:f6:63:ed:0b:79:06:ef:
19:3a:12:b3:20:c7:30:ec:0f:11:a6:d9:fd:c4:e8:
80:03:ae:a0:07:ba:7f:2a:73:8c:48:36:a1:cf:4c:
b5:7c:28:b9:7e:46:51:96:06:b1:92:d1:45:8a:bf:
72:fd:09:bc:94:b5:0c:ab:03:04:d4:1c:50:57:8a:
25:c2:e4:0a:ec:c8:10:45:69:62:86:d5:1a:e1:49:
df:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:17:29:F8:A7:CF:30:B6:F7:6F:43:BE:30:73:61:BB:AF:07:84:7E
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/sBcp-KfPMLb3b0O-MHNhu68HhH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.130.0/24
31.40.132.0/24
31.40.137.0-31.40.138.255
31.40.140.0/24
31.40.143.0/24
31.40.151.0/24
31.40.153.0/24
31.40.162.0/23
31.40.165.0/24
31.40.167.0-31.40.173.255
31.40.178.0/23
92.118.132.0/23
92.118.135.0/24
Signature Algorithm: sha256WithRSAEncryption
60:35:28:90:e1:33:85:40:a5:09:39:bf:c9:a3:72:1f:97:96:
15:c1:12:a8:03:8c:18:f3:f4:f1:78:86:6b:11:d0:54:32:da:
1e:78:94:88:53:44:0c:0d:d3:0e:11:da:6c:b1:52:43:15:66:
82:77:05:06:49:aa:f8:f4:fa:bb:06:b4:5c:06:74:8d:7c:75:
66:56:ee:72:18:57:c7:5b:8d:21:3a:21:d3:c4:3a:61:2b:94:
03:4c:27:70:f7:e3:ff:03:b2:d1:6f:d0:08:24:9e:9a:68:c4:
0f:84:8d:cd:a2:98:00:ad:ef:8f:59:b5:d3:d5:04:11:ec:ef:
5d:b0:7b:97:96:ac:84:0e:55:5b:67:38:9c:12:0a:89:79:71:
4e:ff:3b:88:dc:23:b0:fc:8f:a9:7b:ef:7d:d8:65:6e:1f:c6:
79:71:7f:9b:94:87:3a:51:1d:f0:b2:fc:f3:95:f9:5a:76:b3:
15:ae:98:4e:9d:0b:c0:c1:2e:f1:0b:dd:ba:33:80:ec:a3:cc:
a7:72:fa:cd:20:36:89:c5:6b:90:87:9f:23:b8:b6:74:6a:8c:
dd:3d:92:23:60:e1:e9:e3:18:91:c0:89:6b:31:45:69:cb:c6:
3d:bc:6d:a2:3a:1d:f3:3e:5c:ee:91:6a:fd:f3:2f:14:0a:49:
4a:68:9d:ea
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAaAamxsmIsJ1dQDGpVmMj9/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl
ZTY2ZDcwHhcNMjYwODE5MTUxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDE3MjlmOGE3Y2YzMGI2Zjc2ZjQzYmUzMDczNjFiYmFmMDc4NDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaCEX2YV806Sq88zSUtwb2mmgznD
HLW6lo3jGFZsAVGHVSNH4N8iK4VaFelvcSv93qxMZsc4y5VFV/f36IQ7QmvUWq3a
mFCfKX7sizZjt/HykBM0xADegraWJ213Qkft8lR1GFZDYOe2pE813FbdS1sEEr5a
6lLteW8dOGulLOGI/Ao5ZSkdl0pCuvQdStzUTgfiTD1HNmSzDso5/ftBojTXtOxL
I/ObDQg5QPZj7Qt5Bu8ZOhKzIMcw7A8Rptn9xOiAA66gB7p/KnOMSDahz0y1fCi5
fkZRlgaxktFFir9y/Qm8lLUMqwME1BxQV4olwuQK7MgQRWlihtUa4UnfhwIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFLAXKfinzzC2929DvjBzYbuvB4R+MB8GA1UdIwQY
MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt
NGEzNGMxYmJhYjJiLzEvc0JjcC1LZlBNTGIzYjBPLU1ITmh1NjhIaEg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi
LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBkBAIAATBeAwQAHyiCAwQA
HyiEMAwDBAAfKIkDBAAfKIoDBAAfKIwDBAAfKI8DBAAfKJcDBAAfKJkDBAEfKKID
BAAfKKUwDAMEAB8opwMEAR8orAMEAR8osgMEAVx2hAMEAFx2hzANBgkqhkiG9w0B
AQsFAAOCAQEAYDUokOEzhUClCTm/yaNyH5eWFcESqAOMGPP08XiGaxHQVDLaHniU
iFNEDA3TDhHabLFSQxVmgncFBkmq+PT6uwa0XAZ0jXx1ZlbuchhXx1uNIToh08Q6
YSuUA0wncPfj/wOy0W/QCCSemmjED4SNzaKYAK3vj1m109UEEezvXbB7l5ashA5V
W2c4nBIKiXlxTv87iNwjsPyPqXvvfdhlbh/GeXF/m5SHOlEd8LL885X5WnazFa6Y
Tp0LwMEu8QvdujOA7KPMp3L6zSA2icVrkIefI7i2dGqM3T2SI2Dh6eMYkcCJazFF
acvGPbxtojod8z5c7pFq/fMvFApJSmid6g==
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:10:03 2026 by rpki-client