Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/KfnbNfU9ZxvmhptyjfFhFWHuJt8.roa
File: KfnbNfU9ZxvmhptyjfFhFWHuJt8.roa (raw, json)
Hash identifier: +GPAxa0SoVONSU4eCDooLlIFBbz+CcbxRC+6f+1yY04=
Subject key identifier: 29:F9:DB:35:F5:3D:67:1B:E6:86:9B:72:8D:F1:61:15:61:EE:26:DF
Certificate issuer: /CN=988ce6e4ee09ef66658286451790969d7cffe9b9
Certificate serial: 019FCC4B4F5DC5439A6FC7D066C86E1D4A75
Authority key identifier: 98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/KfnbNfU9ZxvmhptyjfFhFWHuJt8.roa
Signing time: Tue 04 Aug 2026 10:21:55 +0000
ROA not before: Tue 04 Aug 2026 10:21:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50810
IP address blocks: 31.40.0.0/21 maxlen: 21
31.40.0.0/24 maxlen: 24
31.40.1.0/24 maxlen: 24
31.40.2.0/24 maxlen: 24
31.40.3.0/24 maxlen: 24
31.40.4.0/22 maxlen: 22
31.40.4.0/24 maxlen: 24
31.40.5.0/24 maxlen: 24
31.40.6.0/24 maxlen: 24
31.40.7.0/24 maxlen: 24
91.206.177.0/24 maxlen: 24
92.51.56.0/21 maxlen: 21
153.51.0.0/19 maxlen: 19
153.51.128.0/19 maxlen: 19
185.163.216.0/22 maxlen: 22
185.172.72.0/22 maxlen: 22
185.206.236.0/22 maxlen: 22
185.213.200.0/22 maxlen: 22
185.254.108.0/22 maxlen: 22
193.37.38.0/24 maxlen: 24
194.5.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:4b:4f:5d:c5:43:9a:6f:c7:d0:66:c8:6e:1d:4a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988ce6e4ee09ef66658286451790969d7cffe9b9
Validity
Not Before: Aug 4 10:21:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29f9db35f53d671be6869b728df1611561ee26df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c2:ac:6f:0a:0a:f2:6b:c9:ed:a7:21:22:9e:
aa:f0:0d:93:5a:c4:0a:34:3a:69:10:68:31:7f:39:
12:bd:9c:59:a6:58:09:17:1e:90:46:80:2b:27:d2:
ba:7a:b3:cc:07:fa:02:c9:88:f5:5d:0e:cd:b2:ae:
14:8a:c1:69:6d:47:ce:39:1e:7f:97:46:d7:92:63:
dc:e7:71:1c:c2:12:d8:bd:17:36:12:b1:2a:81:58:
e3:06:b7:0b:77:7b:5f:24:18:50:aa:c5:ac:a4:2e:
e2:25:c3:18:1b:bc:df:cf:e0:bb:72:fc:e5:14:04:
8e:31:1b:b6:04:5f:60:29:b2:9a:7f:da:47:2b:0f:
93:10:a7:41:c8:be:26:97:39:5f:6c:b5:66:3c:2a:
0b:44:9d:a6:31:af:70:66:f5:e0:78:c5:1a:fd:1c:
90:ee:db:e1:c0:1a:e0:ef:d5:24:df:04:1a:94:84:
b4:cd:4a:59:35:62:30:bd:a1:78:89:4e:b2:3e:56:
ef:28:87:56:bb:05:64:fb:c3:1d:e6:2d:ce:42:c8:
bd:88:ad:76:c6:2e:87:f8:b7:9d:86:40:9e:34:fd:
e8:28:0c:e3:27:bb:c0:e1:10:98:df:e6:63:9d:89:
d4:3e:21:6e:2d:1e:7a:7e:e9:4b:cc:57:49:9f:11:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F9:DB:35:F5:3D:67:1B:E6:86:9B:72:8D:F1:61:15:61:EE:26:DF
X509v3 Authority Key Identifier:
keyid:98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/KfnbNfU9ZxvmhptyjfFhFWHuJt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.0.0/21
91.206.177.0/24
92.51.56.0/21
153.51.0.0/19
153.51.128.0/19
185.163.216.0/22
185.172.72.0/22
185.206.236.0/22
185.213.200.0/22
185.254.108.0/22
193.37.38.0/24
194.5.16.0/24
Signature Algorithm: sha256WithRSAEncryption
79:6c:80:dc:c9:2e:db:e9:5e:2b:67:fc:1a:64:1c:7e:a9:4f:
a1:e9:c8:cf:27:7c:b3:cd:0c:0d:10:ae:ca:d5:6e:8f:c7:d5:
d6:a0:b6:fc:be:f1:fe:17:d3:b3:3f:7a:5d:f9:8d:44:42:3a:
65:1a:44:42:62:c3:3c:65:8c:f8:2a:cc:08:42:28:b7:b1:8f:
58:86:eb:3f:de:93:8d:f5:ed:35:81:d1:d6:3f:36:6b:85:51:
8e:95:e3:0d:49:d4:d5:da:28:4a:39:b7:ba:98:39:53:a9:45:
53:4e:9d:92:7f:d4:c6:35:c1:18:32:17:7f:6b:f4:51:11:3c:
96:92:08:c0:56:e2:44:5b:17:f6:06:08:89:28:69:8e:cf:f5:
f1:1d:87:56:b1:5a:29:b3:23:75:e5:13:7d:e0:7f:dd:06:5a:
33:60:c0:26:78:a8:8a:4f:6b:96:f7:26:f0:6a:66:36:40:eb:
3a:60:72:87:07:e7:fb:94:ee:b2:af:b0:b1:74:bc:f3:64:27:
b5:f1:80:41:80:2d:b2:24:fc:80:ec:09:39:5a:ec:43:d9:f7:
e1:2e:86:77:48:ee:7e:02:8f:66:8b:66:17:dd:90:60:5c:1a:
ed:6e:ab:31:7d:f5:6d:12:53:85:c6:df:9a:31:06:aa:58:66:
09:03:be:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:51:52 2026 by rpki-client