Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/D3OASNJRyxcVKylwKzpVSr4Ph8c.roa
File: D3OASNJRyxcVKylwKzpVSr4Ph8c.roa (raw, json)
Hash identifier: Z7Uk03nT+HDe/Cth8SAOr4inyUb7bnAc44Mwiwvz1pk=
Subject key identifier: 0F:73:80:48:D2:51:CB:17:15:2B:29:70:2B:3A:55:4A:BE:0F:87:C7
Certificate issuer: /CN=c39bc30a748960b227a1bf26216067edd05c1a7d
Certificate serial: 019D33CD2EFB43971BA84E65444F79EA4A6B
Authority key identifier: C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/D3OASNJRyxcVKylwKzpVSr4Ph8c.roa
Signing time: Sat 28 Mar 2026 09:36:17 +0000
ROA not before: Sat 28 Mar 2026 09:36:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51683
IP address blocks: 31.40.241.0/24 maxlen: 24
31.40.242.0/24 maxlen: 24
31.40.243.0/24 maxlen: 24
185.9.138.0/24 maxlen: 24
185.115.209.0/24 maxlen: 24
2a07:9d40::/48 maxlen: 48
2a07:9d40:1::/48 maxlen: 48
2a07:9d40:2::/48 maxlen: 48
2a07:9d40:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:cd:2e:fb:43:97:1b:a8:4e:65:44:4f:79:ea:4a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c39bc30a748960b227a1bf26216067edd05c1a7d
Validity
Not Before: Mar 28 09:36:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f738048d251cb17152b29702b3a554abe0f87c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bd:3e:3b:c8:46:a4:5c:33:24:0a:20:fe:19:
2e:6c:fb:79:b1:a0:88:6e:53:48:89:34:3a:14:3b:
e0:fe:96:81:01:6c:ce:82:8d:2a:a7:bb:cc:93:92:
89:21:45:22:6e:73:ca:42:66:66:e7:53:fe:94:7d:
b7:c0:24:59:f0:6b:56:54:43:0a:69:26:2d:51:f8:
96:53:4c:b3:15:c1:03:6a:25:d7:a9:d9:f0:2f:d7:
8d:f0:dd:9a:ee:06:84:cc:94:bb:20:1b:48:8a:62:
1b:c7:ec:07:f0:39:5c:a6:c9:c9:89:bf:67:2a:40:
54:8b:f9:cf:74:fc:49:13:1d:cc:55:0e:fa:26:fe:
57:9e:96:49:f6:15:20:0c:4c:74:36:a7:28:b9:bb:
85:6c:11:b5:67:a1:39:b2:43:97:be:b9:3c:2d:49:
bc:29:20:00:da:a8:23:42:43:74:c4:b7:32:a2:4d:
c3:0a:f5:8d:96:eb:d6:66:bc:a7:eb:d4:b2:a7:b0:
4b:79:41:b3:89:ec:e5:46:b4:32:b3:19:c4:ad:d7:
8b:de:c0:8a:c1:d5:c1:04:88:0b:aa:6e:6e:76:77:
57:1d:39:8a:7a:1f:33:37:ee:8b:c5:72:01:d3:56:
04:70:4d:d3:cb:e9:b6:a7:60:cb:3b:00:d0:65:35:
42:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:73:80:48:D2:51:CB:17:15:2B:29:70:2B:3A:55:4A:BE:0F:87:C7
X509v3 Authority Key Identifier:
keyid:C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/D3OASNJRyxcVKylwKzpVSr4Ph8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.241.0-31.40.243.255
185.9.138.0/24
185.115.209.0/24
IPv6:
2a07:9d40::/46
Signature Algorithm: sha256WithRSAEncryption
e7:d2:0e:fa:cb:d7:dd:f9:00:0e:5a:47:e7:37:d2:9b:96:0b:
cd:f8:dd:2c:9d:36:90:4e:90:f7:1e:9e:c4:c7:9d:ae:87:bb:
81:27:34:05:84:b2:98:ba:d6:9c:f1:07:b5:f4:c5:02:e8:5e:
37:80:4d:b4:f2:41:a2:5a:67:69:91:21:2b:d9:fd:4c:e5:e5:
8e:ec:8c:95:2a:11:7e:48:16:88:72:65:f3:ab:c0:e3:e3:54:
b6:f0:11:97:22:ac:a4:e6:50:ff:17:13:7c:71:57:ab:2b:15:
de:e5:62:e5:16:fc:d3:31:5e:1a:e3:22:06:af:7f:53:1d:72:
3d:b0:d6:a4:d4:71:a3:70:45:ac:52:c2:c8:d7:63:4a:8b:63:
4d:59:b0:15:ab:39:10:53:2d:07:87:c4:f2:1a:0b:23:35:84:
66:d3:d2:c8:ae:d6:6a:7b:52:4e:cb:8f:85:c0:4f:6c:5b:5c:
52:86:af:91:ba:d4:d2:04:d7:86:ab:9b:6e:bc:8b:f6:3f:f9:
b9:a3:c2:95:2f:59:6c:c7:ca:ff:72:86:6a:8d:7f:a6:0d:12:
04:db:e2:a7:f6:24:e7:b4:bd:99:b1:a4:55:f3:9b:cf:9f:d5:
93:17:57:49:33:d9:8a:d5:67:d9:3b:4c:dd:1f:c4:43:ed:8d:
a3:73:d6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:00:26 2026 by rpki-client