Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/31_gBAMS1bqbdVGa42Af77_POtY.roa
File: 31_gBAMS1bqbdVGa42Af77_POtY.roa (raw, json)
Hash identifier: ITlhR0Yxy8HauTP46nVQYvbJCaUZPZLt95jI5H8Asdw=
Subject key identifier: DF:5F:E0:04:03:12:D5:BA:9B:75:51:9A:E3:60:1F:EF:BF:CF:3A:D6
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E1D079A54586EF55F25BB4AB9EDDD8522
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/31_gBAMS1bqbdVGa42Af77_POtY.roa
Signing time: Tue 12 May 2026 16:31:38 +0000
ROA not before: Tue 12 May 2026 16:31:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150249
IP address blocks: 2.27.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:07:9a:54:58:6e:f5:5f:25:bb:4a:b9:ed:dd:85:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 12 16:31:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df5fe0040312d5ba9b75519ae3601fefbfcf3ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:95:d7:cc:2b:08:a9:6a:6f:c5:6f:0a:c5:
2e:16:be:46:5c:b2:14:61:91:c2:70:00:de:2b:f4:
fc:d3:10:4f:c3:32:e7:14:e0:d1:e9:16:2c:2f:6e:
6b:08:c8:58:77:7d:b8:32:d7:1b:3b:e6:6d:04:74:
d0:03:1e:3d:c2:ce:44:4e:23:28:52:ed:a2:79:8d:
71:ed:4d:13:7e:7f:ba:8b:f0:66:42:23:b4:97:59:
c5:2b:4a:ce:1a:f1:52:cf:84:47:73:3e:de:23:a2:
55:68:c6:23:52:36:de:ae:7d:9d:50:a4:89:92:a1:
fe:18:4c:19:72:8c:bb:d4:19:c1:9e:66:d3:53:a7:
20:9f:7d:17:28:a8:83:ff:49:8f:12:0d:fe:40:cd:
83:ed:4e:6a:60:83:3d:6b:00:e8:d8:5b:d3:b6:62:
9c:1b:b7:26:41:26:4d:23:4b:84:c7:18:f4:3f:d9:
5d:40:31:6b:6d:af:7a:27:7e:fb:45:4e:1f:e9:39:
bb:30:34:4a:c4:5e:64:9b:ec:31:20:56:6a:4f:20:
ca:57:8e:df:72:02:8c:15:27:7f:bd:b6:91:3f:15:
4a:0d:fe:2c:f7:af:93:2b:9a:9e:06:55:1e:f2:24:
8d:55:fc:93:04:ac:42:83:57:c6:a4:e9:f7:8b:2c:
e3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5F:E0:04:03:12:D5:BA:9B:75:51:9A:E3:60:1F:EF:BF:CF:3A:D6
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/31_gBAMS1bqbdVGa42Af77_POtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.165.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:83:d5:2f:1d:70:b8:2d:0a:8f:bf:01:f1:f9:3a:d3:9f:83:
6b:ae:05:e9:c3:78:9d:ca:a3:9d:f4:de:16:50:dd:0c:05:d3:
57:52:fa:de:9b:a7:61:28:77:c8:da:7f:b5:17:aa:f2:58:f1:
d4:1e:65:1c:8d:51:38:3e:8e:97:e3:78:d6:9d:a8:c1:35:16:
7b:a8:59:37:bf:50:6e:93:98:0a:f1:7d:38:f3:b7:be:38:1d:
24:af:6f:e2:91:ce:00:43:1e:3e:be:35:ee:f8:dd:fa:6d:7c:
9d:60:ce:1a:97:be:91:8b:42:66:8d:77:b5:40:0b:10:69:b8:
ba:52:38:0e:11:72:71:3b:41:08:a1:0c:6a:a4:d0:10:43:64:
7d:66:34:52:8c:8c:d8:96:b9:83:fb:c1:85:a4:47:49:c9:3e:
d8:05:3c:d9:5d:a9:b7:b3:76:4b:c5:4e:0e:0c:e4:96:b4:d4:
46:c0:8c:06:3e:be:e1:3f:e6:ea:c7:52:0f:8d:22:db:e6:d1:
7a:e6:82:a3:4c:94:bb:2b:6d:e0:f7:dd:66:3d:40:e3:30:b0:
d6:07:a3:cb:56:e0:4f:3e:eb:50:89:4c:66:12:94:06:ca:f1:
a2:1a:e8:73:c9:aa:aa:58:37:4a:bb:d4:5f:a8:ce:32:47:32:
79:31:f5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:37:26 2026 by rpki-client