Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/Cj_kS8CojscD3FHU0iwPbQS5gtU.roa
File: Cj_kS8CojscD3FHU0iwPbQS5gtU.roa (raw, json)
Hash identifier: nfkDC61Z5WwgijGGYwT5yxFtloghLLfXYDg9Swlfx80=
Subject key identifier: 0A:3F:E4:4B:C0:A8:8E:C7:03:DC:51:D4:D2:2C:0F:6D:04:B9:82:D5
Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Certificate serial: 019F10BA5B7BB112943F5A6453E3E52630A7
Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/Cj_kS8CojscD3FHU0iwPbQS5gtU.roa
Signing time: Mon 29 Jun 2026 00:14:36 +0000
ROA not before: Mon 29 Jun 2026 00:14:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 31.98.140.0/22 maxlen: 22
31.98.144.0/20 maxlen: 20
31.98.160.0/19 maxlen: 19
31.98.192.0/19 maxlen: 19
31.98.224.0/19 maxlen: 19
31.105.0.0/18 maxlen: 18
31.105.64.0/19 maxlen: 19
31.105.96.0/19 maxlen: 19
31.105.128.0/17 maxlen: 17
165.65.128.0/19 maxlen: 19
165.65.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:ba:5b:7b:b1:12:94:3f:5a:64:53:e3:e5:26:30:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Validity
Not Before: Jun 29 00:14:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a3fe44bc0a88ec703dc51d4d22c0f6d04b982d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:f8:b9:73:92:8f:96:1f:9b:6a:e6:02:05:
b8:a8:e4:1c:bc:c3:f3:5e:c5:00:21:e5:69:3a:4b:
db:4f:4b:a3:6c:64:2e:de:c5:ec:87:13:f9:88:62:
8b:3f:1b:66:f2:4a:90:c5:32:6e:95:80:b6:f7:1c:
0b:b2:42:5f:ff:4f:ee:4d:88:2f:ab:9d:2b:9f:1b:
ea:a8:0f:0c:91:b2:b9:b3:5f:cc:d0:91:f4:87:61:
5c:1f:1c:11:3d:46:cd:62:4a:b1:6c:52:8a:75:0a:
c6:05:f0:9f:42:60:1f:d9:8b:e1:3b:89:a0:f7:46:
4a:96:1c:99:24:13:9c:a2:7d:8e:a4:21:bc:41:c2:
1b:3e:be:5e:d0:dc:90:ad:f6:b3:2e:36:82:bf:00:
19:24:4c:9b:f1:8e:28:2e:f1:76:86:86:2e:a1:20:
8d:1c:5f:9c:79:7a:19:82:a5:6e:23:2a:44:2f:45:
e1:62:2c:78:c7:02:66:98:9b:51:d8:e6:d0:87:40:
b3:9b:83:41:4e:18:24:46:46:5b:bc:e7:56:59:29:
40:0a:1e:c6:87:3c:b6:22:0f:46:60:12:31:a4:22:
6a:92:37:68:42:d7:4d:39:da:bc:98:e1:70:38:40:
a4:9f:5b:f5:4d:60:3d:10:ee:8a:60:e4:05:d6:0f:
5a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3F:E4:4B:C0:A8:8E:C7:03:DC:51:D4:D2:2C:0F:6D:04:B9:82:D5
X509v3 Authority Key Identifier:
keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/Cj_kS8CojscD3FHU0iwPbQS5gtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.98.140.0-31.98.255.255
31.105.0.0/16
165.65.128.0-165.65.167.255
Signature Algorithm: sha256WithRSAEncryption
a8:c0:ee:e8:de:9f:a9:47:f0:ff:6a:aa:5b:f5:ee:d7:8b:9c:
cb:56:34:37:4f:10:7f:84:f6:ad:ce:73:30:24:10:ee:89:f3:
08:6d:d1:6f:17:9f:c8:46:db:1e:04:d7:1b:0d:30:db:9e:85:
5d:c6:1d:2d:53:f4:a9:51:f8:32:eb:98:2a:25:04:50:47:6f:
67:6b:81:ea:54:4d:70:88:4d:03:ff:79:d1:79:12:97:9e:12:
17:21:e5:89:e3:37:cf:19:77:20:0a:cc:25:74:27:2a:e8:45:
b5:b3:fa:9a:d5:1c:78:67:56:b9:77:99:ae:56:74:04:2e:3c:
a0:eb:39:75:68:9a:73:23:82:88:80:b2:ba:e3:73:0e:67:c0:
31:03:ac:9b:a7:04:e9:93:08:99:59:70:44:03:24:84:98:b5:
07:ad:a5:e9:0b:78:01:12:de:91:41:41:92:ec:8f:20:76:13:
5c:b5:3e:38:82:ae:a8:fd:a2:49:8a:c4:89:05:2c:c3:83:48:
cf:0a:b9:eb:73:a7:13:89:36:01:76:2f:9a:19:fe:cd:b5:8a:
b1:38:6f:73:5c:e3:e9:7f:bb:7e:3f:d5:31:b0:bf:03:f8:87:
36:c5:73:08:93:69:49:57:1b:cb:59:f1:cc:4c:14:39:7d:d2:
35:3e:9b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:55 2026 by rpki-client