Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/RcrqyxRPEYWDMYhoZx5Tu6-53go.roa
File: RcrqyxRPEYWDMYhoZx5Tu6-53go.roa (raw, json)
Hash identifier: dyIezlqIgwh9UnehbnS/EHWimAQvzRReZBnOQVKpigg=
Subject key identifier: 45:CA:EA:CB:14:4F:11:85:83:31:88:68:67:1E:53:BB:AF:B9:DE:0A
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0ABFE09B5650A37E407B090B2F5DFFF5F
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/RcrqyxRPEYWDMYhoZx5Tu6-53go.roa
Signing time: Wed 16 Sep 2026 20:52:27 +0000
ROA not before: Wed 16 Sep 2026 20:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51722
IP address blocks: 31.40.196.0/24 maxlen: 24
31.40.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:fe:09:b5:65:0a:37:e4:07:b0:90:b2:f5:df:ff:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Sep 16 20:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45caeacb144f118583318868671e53bbafb9de0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9b:e6:3c:20:0a:60:ae:67:ae:f7:b7:2c:c6:
14:dc:bf:8a:fd:63:c5:77:a3:3c:41:49:3b:5b:ef:
c9:f1:29:89:d6:6b:48:b2:43:72:bb:e5:20:b8:d7:
f2:b7:5f:2c:1a:83:9b:c6:c1:f6:e1:fd:a0:b5:67:
6c:ce:f5:39:5e:c5:7d:62:0d:a8:7a:04:a3:93:73:
70:aa:f6:10:db:58:4a:5a:31:43:94:b9:78:c5:be:
08:71:96:05:20:6f:a3:6a:d0:c6:18:4b:d9:58:f8:
4a:e3:d0:4c:70:8b:6c:5b:94:f1:83:e2:1f:2f:68:
1c:f1:c7:f6:b7:14:37:97:7b:1f:46:11:b1:28:9b:
00:28:62:3f:b4:45:7e:46:4f:0d:47:ff:fb:10:5f:
82:b1:0c:ac:33:fd:e8:41:dc:33:17:ff:e2:29:c2:
fd:b8:53:78:81:a9:8f:3d:ac:8f:42:f2:4b:c5:f0:
42:a3:d0:81:a5:27:6f:f1:58:3f:13:0f:8a:12:e3:
23:b2:d0:2b:a8:37:5e:a3:08:b3:56:a5:4d:14:fd:
65:59:9e:cb:44:a1:5a:b7:28:d9:d9:c0:9a:aa:c5:
1b:92:5c:c5:03:aa:dc:d1:02:d4:00:97:d1:21:68:
76:bc:7e:ac:f1:ed:0e:23:f2:65:fe:99:93:12:87:
1f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CA:EA:CB:14:4F:11:85:83:31:88:68:67:1E:53:BB:AF:B9:DE:0A
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/RcrqyxRPEYWDMYhoZx5Tu6-53go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.196.0/24
31.40.204.0/24
Signature Algorithm: sha256WithRSAEncryption
86:22:0c:93:54:ed:81:4b:43:ff:ab:e7:2e:2a:c1:0a:0d:50:
15:7a:8c:76:07:9e:2f:45:c5:b3:5c:a0:1f:6c:5b:81:6c:2b:
50:10:58:2c:69:8a:27:1b:1f:20:59:d6:21:b9:69:52:16:52:
9f:86:6d:6e:71:f6:ed:f5:bd:d7:30:b8:53:f8:4e:59:0b:e4:
d9:d8:14:1a:6c:ec:d4:79:47:1d:ef:88:1a:9f:05:8e:bb:2f:
91:74:c0:7e:9e:b8:86:b6:da:35:48:b5:d4:8d:d0:ac:49:2c:
a8:0c:a5:74:b1:c9:06:64:5f:67:c1:1e:8e:42:75:1d:39:d1:
fa:4d:21:16:ca:31:b0:2b:a8:c0:1a:ed:93:3a:7c:28:ed:f6:
f5:36:00:7d:2c:af:7a:f0:57:d2:37:78:fc:aa:7c:60:c1:6d:
7e:3c:39:c6:f4:ee:04:0e:c4:bf:a2:e4:5f:62:b7:67:b3:5e:
18:fc:1e:22:2a:51:15:81:ca:16:20:a9:42:af:5b:56:ad:03:
71:ae:93:06:45:12:73:ed:ba:64:fa:90:30:a1:b7:90:07:35:
2b:a0:59:f1:e0:0e:1f:b3:48:56:3f:f4:cd:01:dc:be:57:95:
09:67:90:cd:84:ca:89:89:93:3c:c2:aa:5f:78:59:d2:ff:cf:
8d:d9:7d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:03:05 2026 by rpki-client