Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/w_RStRlxfKJtXFpee92v8_7yEGo.roa
File: w_RStRlxfKJtXFpee92v8_7yEGo.roa (raw, json)
Hash identifier: prCsKnKMoruEm7kEV6H2v2g07eV+NNPhQX90KtWpJPI=
Subject key identifier: C3:F4:52:B5:19:71:7C:A2:6D:5C:5A:5E:7B:DD:AF:F3:FE:F2:10:6A
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0D2AB9BB9E3920E1884021261B9196C19
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/w_RStRlxfKJtXFpee92v8_7yEGo.roa
Signing time: Thu 24 Sep 2026 09:07:36 +0000
ROA not before: Thu 24 Sep 2026 09:07:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 31.40.199.0/24 maxlen: 24
141.98.48.0/24 maxlen: 24
141.98.113.0/24 maxlen: 24
141.98.114.0/24 maxlen: 24
141.98.115.0/24 maxlen: 24
176.96.130.0/24 maxlen: 24
217.18.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:ab:9b:b9:e3:92:0e:18:84:02:12:61:b9:19:6c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Sep 24 09:07:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3f452b519717ca26d5c5a5e7bddaff3fef2106a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:6d:c8:a4:0e:e1:d2:fe:22:86:fa:1f:3d:
70:4d:5e:b9:74:58:50:15:db:77:49:d4:a6:e3:0e:
f4:51:1b:3c:40:3f:d3:ed:22:23:b9:20:d3:72:6f:
d8:15:e3:02:5c:47:71:45:59:af:34:d2:fa:9b:c2:
d8:ed:d9:3d:f2:02:53:ec:a4:a3:3c:bd:d5:55:77:
2e:a6:11:ef:c7:b6:1d:d1:24:fb:24:85:ed:b2:0c:
85:10:ef:7e:4c:97:de:9a:61:2a:3c:d4:34:4a:c4:
cf:a0:d3:0a:b1:95:87:1f:94:f2:c2:3e:0d:70:db:
02:7e:ed:fa:25:0d:d3:2b:4f:df:7e:6b:f7:c3:5b:
4f:79:c0:d4:9a:1d:b7:71:0b:f5:97:67:5b:32:33:
9c:7c:6a:b1:d3:1f:b1:4c:4c:95:ae:e0:a6:f5:fb:
32:b9:d8:99:2d:31:61:14:ff:d8:88:1b:b5:d7:fe:
09:24:b5:9e:5f:14:15:63:7f:07:fb:a2:56:1a:6f:
49:6d:f1:2a:02:1d:84:04:2f:4a:4a:1a:61:f8:6e:
35:2a:b4:e3:10:81:35:40:6c:04:81:ca:d2:90:1a:
35:c9:79:60:27:71:ed:45:45:eb:2a:be:2f:fd:a7:
0d:a5:60:e0:10:92:02:cd:17:c7:38:b6:73:17:c4:
45:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F4:52:B5:19:71:7C:A2:6D:5C:5A:5E:7B:DD:AF:F3:FE:F2:10:6A
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/w_RStRlxfKJtXFpee92v8_7yEGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.199.0/24
141.98.48.0/24
141.98.113.0-141.98.115.255
176.96.130.0/24
217.18.209.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e5:f1:6e:bb:a7:bc:18:e2:60:b5:0c:67:c0:73:29:00:da:
03:ec:6d:75:49:4c:29:7d:f3:02:7b:95:23:84:0d:4c:2b:b5:
28:f0:ca:3e:df:c1:69:1f:07:ab:bf:65:2e:6d:2c:20:bc:a3:
0c:2d:c7:24:5a:ef:ee:be:71:8a:ef:d0:6b:1b:8d:ad:83:de:
8d:90:b4:d3:5d:1f:61:19:87:40:ae:b1:9e:88:58:03:cd:c0:
ae:bc:75:39:f8:c4:cd:53:7b:70:98:7f:67:2c:6c:55:59:d9:
ef:09:38:4b:6d:e4:cc:fc:8d:06:3e:cb:a5:17:70:c0:ba:56:
f2:47:a3:bf:58:92:f1:7b:5f:b9:59:db:63:65:89:cf:58:57:
1e:77:a9:32:ac:79:1e:a0:7e:b2:0b:cc:21:7b:b8:ca:7d:b5:
e2:dd:fb:db:61:45:87:fc:95:7c:f4:de:27:83:20:0a:df:62:
7a:ad:ad:77:ab:ba:14:bf:58:38:be:7c:d7:08:d3:0d:83:87:
2d:ea:16:fe:4c:ac:8a:28:6b:70:b0:7b:a6:71:50:73:00:29:
04:76:65:d7:8e:5f:96:34:b0:d3:1e:9a:e0:0a:21:6d:3f:79:
93:60:52:37:52:49:9e:0f:e7:a6:c1:34:fb:75:ac:16:62:a6:
09:fd:85:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:58:42 2026 by rpki-client