Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/DM-CAiMb0OP7sA_R_va_WjXZp9g.roa
File: DM-CAiMb0OP7sA_R_va_WjXZp9g.roa (raw, json)
Hash identifier: 5KvSPO1BJZlwFlgFjFBgYlWy9dALEU054kk9XwFMh34=
Subject key identifier: 0C:CF:82:02:23:1B:D0:E3:FB:B0:0F:D1:FE:F6:BF:5A:35:D9:A7:D8
Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Certificate serial: 01A1116AACD86235FEE515557F02C14998DC
Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/DM-CAiMb0OP7sA_R_va_WjXZp9g.roa
Signing time: Tue 06 Oct 2026 13:32:46 +0000
ROA not before: Tue 06 Oct 2026 13:32:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 31.98.140.0/22 maxlen: 22
31.98.144.0/20 maxlen: 20
31.98.160.0/19 maxlen: 19
31.98.192.0/19 maxlen: 19
31.98.224.0/19 maxlen: 19
31.105.0.0/18 maxlen: 18
31.105.64.0/19 maxlen: 19
31.105.128.0/17 maxlen: 17
165.65.128.0/19 maxlen: 19
165.65.160.0/21 maxlen: 21
165.65.168.0/21 maxlen: 21
165.65.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:6a:ac:d8:62:35:fe:e5:15:55:7f:02:c1:49:98:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Validity
Not Before: Oct 6 13:32:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ccf8202231bd0e3fbb00fd1fef6bf5a35d9a7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:7d:03:aa:10:29:5d:ac:b9:3e:fb:f8:8d:
fe:0b:dd:1a:f1:b0:6a:94:2d:2f:45:3d:d8:e9:33:
cd:97:56:36:72:a4:92:68:fb:78:c5:2b:ec:f8:e5:
1e:f6:a0:df:13:dd:99:3c:c9:46:ca:d4:ff:dd:ba:
3b:1f:22:0c:6d:fb:6a:f3:ba:43:43:c3:6f:27:43:
17:b4:99:b4:8e:ae:72:8b:33:1f:09:54:c1:ee:29:
58:19:d4:fd:f5:0b:5e:eb:30:c7:5d:22:86:fe:60:
68:4a:05:fe:cc:ed:a1:83:cf:de:da:54:1e:ed:32:
55:41:d9:c8:9d:52:76:e1:3a:57:6b:8e:20:c4:df:
a5:2f:da:aa:83:c6:ca:43:a2:3d:c4:ab:d6:b9:b7:
37:b0:1b:93:73:71:45:be:47:ab:b7:f5:db:46:6c:
46:f9:77:e3:6c:f0:c1:5d:2c:a1:51:c6:a5:1d:a2:
e0:3e:68:ff:90:b7:9b:57:da:1f:49:d4:e1:8e:dd:
b1:e3:cd:f7:ac:8b:a5:94:3a:e0:ce:2d:6a:05:52:
22:d3:20:e6:9a:60:f3:08:56:8b:03:f4:a7:1b:7e:
cf:d9:25:10:27:3d:ec:d8:d0:24:b3:07:25:6d:a4:
da:7f:28:8e:c5:96:4f:66:20:78:3f:2a:99:e2:b3:
e2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CF:82:02:23:1B:D0:E3:FB:B0:0F:D1:FE:F6:BF:5A:35:D9:A7:D8
X509v3 Authority Key Identifier:
keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/DM-CAiMb0OP7sA_R_va_WjXZp9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.98.140.0-31.98.255.255
31.105.0.0-31.105.95.255
31.105.128.0/17
165.65.128.0/18
Signature Algorithm: sha256WithRSAEncryption
ae:5f:09:e3:3e:24:09:c4:3e:37:da:8a:ba:22:ab:80:cb:34:
db:c4:2c:e8:7d:4c:d2:37:d1:43:a6:26:90:8c:4d:8d:d7:17:
78:fe:d0:8a:84:ce:18:a9:de:7b:43:26:e8:b7:ac:b5:e9:de:
75:b2:1b:66:f0:2e:4b:8c:c8:4f:93:d8:a8:1e:8f:13:1a:1b:
af:26:54:18:9b:bb:23:1d:fc:84:14:06:ea:b3:8a:5a:b3:37:
b6:ca:e0:e6:60:a3:52:31:84:15:58:ca:eb:e9:c6:c3:35:33:
26:e1:31:1b:f2:5f:90:67:a2:fb:40:5b:f1:9d:ef:41:71:71:
2d:0e:70:cd:1a:de:2b:6f:95:99:87:50:3b:21:b4:6e:c5:38:
df:7f:39:09:10:22:56:a8:fe:2d:02:33:5a:d5:f5:45:e6:c0:
63:d0:06:d0:05:09:31:34:db:44:be:e3:86:39:2c:2a:df:65:
02:88:0f:c8:a5:b1:22:4f:01:d1:03:40:45:bf:2b:09:ef:77:
f1:ef:30:11:d6:26:b3:cc:9e:b3:0f:b5:d2:78:2d:6a:d5:e7:
11:bd:67:be:fb:1a:22:28:83:ed:ce:5f:52:49:7b:07:62:c4:
ba:5d:74:cb:ca:1b:69:8b:33:bc:dd:18:cd:2b:25:5e:8f:9c:
1f:47:e7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:25:41 2026 by rpki-client