Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/7zDEmWPI1ENhomTy26ZsTYp2BBk.roa
File: 7zDEmWPI1ENhomTy26ZsTYp2BBk.roa (raw, json)
Hash identifier: HMKeSJgU65eJmE17l+0Kgm4LpuhW6XeTtaT/MhlrW+s=
Subject key identifier: EF:30:C4:99:63:C8:D4:43:61:A2:64:F2:DB:A6:6C:4D:8A:76:04:19
Certificate issuer: /CN=5f7c4bac24e232139920b6c5cea705ef830fd755
Certificate serial: 01A0344D2B4F88C7D5A49EBA768171AE1261
Authority key identifier: 5F:7C:4B:AC:24:E2:32:13:99:20:B6:C5:CE:A7:05:EF:83:0F:D7:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3xLrCTiMhOZILbFzqcF74MP11U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/7zDEmWPI1ENhomTy26ZsTYp2BBk.roa
Signing time: Mon 24 Aug 2026 15:04:27 +0000
ROA not before: Mon 24 Aug 2026 15:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198433
IP address blocks: 31.40.236.0/24 maxlen: 24
31.40.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3xLrCTiMhOZILbFzqcF74MP11U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:4d:2b:4f:88:c7:d5:a4:9e:ba:76:81:71:ae:12:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7c4bac24e232139920b6c5cea705ef830fd755
Validity
Not Before: Aug 24 15:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef30c49963c8d44361a264f2dba66c4d8a760419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:5d:cc:75:6e:32:78:b0:7f:9b:bb:1d:e8:
d6:5a:83:01:d6:ab:31:71:2a:b1:ab:8a:a4:36:57:
89:86:e2:bc:08:9d:53:29:cb:8a:99:7e:df:60:7e:
c8:7c:c1:ad:19:e1:73:48:15:74:9d:c4:fc:9c:b5:
a1:f3:5b:04:a0:cd:c5:ac:47:fd:b2:2c:d3:a4:12:
4a:ed:fa:2c:e5:8a:89:8d:d0:44:ae:01:ac:12:0d:
4f:47:9d:6b:5e:13:0b:80:00:ac:7a:5e:7e:61:fc:
93:ba:73:6f:f2:77:b4:c5:e9:d9:2b:b6:d4:01:68:
a3:36:04:d5:89:27:5b:d6:da:95:ec:30:5a:3a:fd:
a3:9e:fc:0c:bf:fd:4b:31:6f:50:3c:61:e3:0c:8d:
43:1b:e3:b4:d2:dd:5e:d4:98:7f:69:99:11:4b:03:
80:eb:68:67:29:5f:1a:b5:0b:2d:29:2e:42:90:e9:
f3:77:3f:41:a7:b6:b7:7f:99:cb:c8:2a:d7:19:06:
f5:c5:7c:7a:fa:75:a1:b0:2f:1f:a4:a2:da:9b:cd:
b3:97:03:bb:10:04:3f:d5:5f:97:35:9d:3b:17:1a:
87:7c:55:40:57:0a:1c:65:cb:aa:c2:6a:1b:9d:e5:
49:89:0a:61:a3:7d:a3:d4:8f:2f:08:e1:d1:b1:64:
99:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:30:C4:99:63:C8:D4:43:61:A2:64:F2:DB:A6:6C:4D:8A:76:04:19
X509v3 Authority Key Identifier:
keyid:5F:7C:4B:AC:24:E2:32:13:99:20:B6:C5:CE:A7:05:EF:83:0F:D7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3xLrCTiMhOZILbFzqcF74MP11U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/7zDEmWPI1ENhomTy26ZsTYp2BBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.236.0/23
Signature Algorithm: sha256WithRSAEncryption
73:27:06:20:46:8e:d2:25:29:8f:4a:4e:77:7c:c7:45:bb:34:
7b:f6:96:09:4b:a0:14:16:8f:4e:1e:65:8d:ee:52:a5:3e:a6:
c2:de:43:4b:45:a7:45:2e:e3:e1:0e:f6:fa:7b:65:6a:8c:1f:
a4:b6:7e:53:2b:3a:96:08:ab:21:4a:e0:21:3d:56:d4:0f:28:
bb:00:27:78:60:cb:b3:e8:66:d6:15:c0:4b:fa:69:4e:d4:29:
e2:9f:cf:fd:61:12:83:94:53:4f:aa:10:bd:25:11:a4:7e:3b:
ef:21:c6:ba:0f:1e:52:2a:b8:f1:b9:22:25:6d:f0:48:a1:a2:
b2:10:8a:a2:d0:df:94:0c:fc:22:b2:53:65:c9:eb:79:e7:5d:
ab:4f:1d:5c:5c:9d:61:5b:da:df:c9:3c:80:50:b1:49:41:2a:
22:4d:7e:52:51:cc:28:4e:5b:ef:23:88:c0:91:ec:c3:bd:40:
8e:48:76:b9:e3:33:90:05:00:11:00:eb:06:92:c7:6e:c4:50:
ee:d4:e4:a0:4b:73:57:0f:99:63:a6:f3:2f:0f:d9:cf:29:b0:
e8:a3:61:d7:73:59:72:7d:87:30:a1:9b:6f:1f:02:ab:d1:7c:
75:4d:1b:84:ea:4b:1f:ce:10:4c:37:8d:b8:bb:ae:73:40:38:
01:dd:8d:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA0TStPiMfVpJ66doFxrhJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmN2M0YmFjMjRlMjMyMTM5OTIwYjZjNWNlYTcwNWVmODMw
ZmQ3NTUwHhcNMjYwODI0MTUwNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjMwYzQ5OTYzYzhkNDQzNjFhMjY0ZjJkYmE2NmM0ZDhhNzYwNDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnJdzHVuMniwf5u7HejWWoMB1qsx
cSqxq4qkNleJhuK8CJ1TKcuKmX7fYH7IfMGtGeFzSBV0ncT8nLWh81sEoM3FrEf9
sizTpBJK7fos5YqJjdBErgGsEg1PR51rXhMLgACsel5+YfyTunNv8ne0xenZK7bU
AWijNgTViSdb1tqV7DBaOv2jnvwMv/1LMW9QPGHjDI1DG+O00t1e1Jh/aZkRSwOA
62hnKV8atQstKS5CkOnzdz9Bp7a3f5nLyCrXGQb1xXx6+nWhsC8fpKLam82zlwO7
EAQ/1V+XNZ07FxqHfFVAVwocZcuqwmobneVJiQpho32j1I8vCOHRsWSZLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO8wxJljyNRDYaJk8tumbE2KdgQZMB8GA1UdIwQY
MBaAFF98S6wk4jITmSC2xc6nBe+DD9dVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDN4THJDVGlNaE9aSUxiRnpxY0Y3NE1QMTFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi84Y2Q5M2YtZmM4Yy00YzU1LTkyMGYt
ZTUzYmUyZDVlNDJjLzEvN3pERW1XUEkxRU5ob21UeTI2WnNUWXAyQkJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi84Y2Q5M2YtZmM4Yy00YzU1LTkyMGYtZTUzYmUyZDVlNDJj
LzEvWDN4THJDVGlNaE9aSUxiRnpxY0Y3NE1QMTFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHyjsMA0G
CSqGSIb3DQEBCwUAA4IBAQBzJwYgRo7SJSmPSk53fMdFuzR79pYJS6AUFo9OHmWN
7lKlPqbC3kNLRadFLuPhDvb6e2VqjB+ktn5TKzqWCKshSuAhPVbUDyi7ACd4YMuz
6GbWFcBL+mlO1Cnin8/9YRKDlFNPqhC9JRGkfjvvIca6Dx5SKrjxuSIlbfBIoaKy
EIqi0N+UDPwislNlyet5512rTx1cXJ1hW9rfyTyAULFJQSoiTX5SUcwoTlvvI4jA
kezDvUCOSHa54zOQBQARAOsGksduxFDu1OSgS3NXD5ljpvMvD9nPKbDoo2HXc1ly
fYcwoZtvHwKr0Xx1TRuE6ksfzhBMN424u65zQDgB3Y09
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:39:16 2026 by rpki-client