Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/MkSbjLOlmst8deBiijIo10b1oHk.roa
File: MkSbjLOlmst8deBiijIo10b1oHk.roa (raw, json)
Hash identifier: yW0Ku46kGVp8zzGWpKKCyQj4uBhe1YgR4EtXIh+G4lU=
Subject key identifier: 32:44:9B:8C:B3:A5:9A:CB:7C:75:E0:62:8A:32:28:D7:46:F5:A0:79
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01A0FBAF1569B449FB64640EBF0726D04A28
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/MkSbjLOlmst8deBiijIo10b1oHk.roa
Signing time: Fri 02 Oct 2026 08:15:50 +0000
ROA not before: Fri 02 Oct 2026 08:15:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41789
IP address blocks: 31.129.0.0/20 maxlen: 24
31.129.16.0/24 maxlen: 24
31.129.17.0/24 maxlen: 24
31.129.18.0/24 maxlen: 24
31.129.19.0/24 maxlen: 24
31.129.20.0/24 maxlen: 24
31.129.23.0/24 maxlen: 24
31.129.24.0/24 maxlen: 24
31.129.25.0/24 maxlen: 24
31.129.26.0/24 maxlen: 24
31.129.27.0/24 maxlen: 24
31.129.28.0/24 maxlen: 24
31.129.29.0/24 maxlen: 24
31.129.31.0/24 maxlen: 24
46.19.64.0/22 maxlen: 24
46.19.70.0/24 maxlen: 24
81.200.144.0/21 maxlen: 24
94.198.216.0/22 maxlen: 24
94.198.222.0/24 maxlen: 24
141.98.234.0/24 maxlen: 24
185.166.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:af:15:69:b4:49:fb:64:64:0e:bf:07:26:d0:4a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Oct 2 08:15:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32449b8cb3a59acb7c75e0628a3228d746f5a079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:82:1b:63:63:bc:2a:e4:f7:c3:2b:94:a6:
63:c7:86:4c:ee:5f:96:ca:c0:54:df:d2:64:7d:f8:
df:66:dc:9e:f0:08:3c:f3:98:cb:99:59:6f:8b:07:
65:93:21:2b:64:f5:8c:62:3c:10:86:a0:cf:61:e1:
61:69:71:72:58:e2:48:eb:34:63:d1:51:21:c6:a6:
d8:92:b5:38:2c:27:83:ea:d5:50:32:5d:3a:f3:a2:
03:3c:10:3d:e6:05:4f:9a:c2:38:d9:61:a7:bf:4b:
d3:8e:74:c4:a5:fc:ec:49:9a:18:60:a4:ac:bc:d7:
c6:b2:68:f5:cf:65:5f:d5:8e:75:d9:9c:5b:88:38:
8f:f6:eb:3b:2d:78:73:ca:f6:40:00:fe:fa:02:c4:
8f:19:4d:dd:64:f6:8e:fc:55:65:e7:62:d2:78:e3:
2e:84:13:cf:5e:56:3e:c9:12:b5:3d:75:93:c1:bc:
d5:7d:82:bb:2e:77:4d:66:74:ad:e9:b3:02:6c:cd:
76:c7:7f:bc:20:0c:44:2d:73:41:f9:97:33:c0:f4:
00:5f:6f:59:1c:b8:69:67:ca:fe:b9:b8:e4:5a:0f:
62:b3:c6:bb:51:03:7b:dd:5a:26:d3:53:0a:ac:5d:
a7:65:ad:98:2e:9e:18:38:be:9a:b4:4b:32:74:c9:
66:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:44:9B:8C:B3:A5:9A:CB:7C:75:E0:62:8A:32:28:D7:46:F5:A0:79
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/MkSbjLOlmst8deBiijIo10b1oHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.0.0-31.129.20.255
31.129.23.0-31.129.29.255
31.129.31.0/24
46.19.64.0/22
46.19.70.0/24
81.200.144.0/21
94.198.216.0/22
94.198.222.0/24
141.98.234.0/24
185.166.198.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:a0:94:1a:df:c9:32:10:6e:5f:eb:ba:5f:bb:0f:82:60:f4:
c4:db:2b:85:d9:24:fe:a7:a1:b0:4a:56:3a:07:d0:f5:5d:3e:
ba:db:2a:63:32:a2:5e:92:09:2e:88:fa:a8:6a:60:c6:b2:dc:
5a:48:0f:0f:ad:04:fa:6f:e6:d5:f5:7f:e7:b9:16:05:72:0a:
5b:1c:85:3d:79:cf:91:5d:ec:53:43:ad:4e:df:f7:25:9d:55:
78:70:61:b5:72:51:c7:0a:15:d5:26:c1:ac:7b:10:cd:a4:e7:
98:19:d4:77:30:75:70:89:f0:0a:e1:3e:f0:67:09:0e:3f:78:
1d:d0:eb:d4:58:0f:2d:82:23:d8:e3:10:15:ca:4f:99:1e:e5:
28:29:f7:e8:b0:71:24:72:20:23:36:fe:83:67:5f:aa:aa:d3:
87:66:ca:41:91:e7:71:7e:6a:63:16:a8:aa:6e:bb:02:e2:ec:
68:f7:fe:c6:c0:ec:68:a2:d0:f2:a0:34:b8:43:7d:32:10:f7:
43:f3:59:fe:f0:a5:a2:61:29:76:1a:25:5e:0e:6e:b3:cf:0d:
2b:20:5d:58:d5:40:8d:68:2d:aa:4b:a6:e0:4e:0d:d7:2e:3f:
52:5c:20:d2:c4:39:d6:98:1c:7c:31:65:6e:e7:75:b1:6e:3a:
87:15:c5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:41:14 2026 by rpki-client