Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Q58s62YBvVH9EaDI3Bnf2dWh9ls.roa
File: Q58s62YBvVH9EaDI3Bnf2dWh9ls.roa (raw, json)
Hash identifier: /OA4JBXiKTYfCGguxVwpQsIOrqTLwNB1aLeJEIQspZI=
Subject key identifier: 43:9F:2C:EB:66:01:BD:51:FD:11:A0:C8:DC:19:DF:D9:D5:A1:F6:5B
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 01A0AFDFFC7456BFF33199D1C72D7DCE1D41
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Q58s62YBvVH9EaDI3Bnf2dWh9ls.roa
Signing time: Thu 17 Sep 2026 14:58:07 +0000
ROA not before: Thu 17 Sep 2026 14:58:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201776
IP address blocks: 31.40.130.0/24 maxlen: 24
31.40.132.0/24 maxlen: 24
31.40.137.0/24 maxlen: 24
31.40.138.0/24 maxlen: 24
31.40.140.0/24 maxlen: 24
31.40.143.0/24 maxlen: 24
31.40.151.0/24 maxlen: 24
31.40.153.0/24 maxlen: 24
31.40.162.0/23 maxlen: 23
31.40.165.0/24 maxlen: 24
31.40.167.0/24 maxlen: 24
31.40.168.0/23 maxlen: 23
31.40.168.0/24 maxlen: 24
31.40.169.0/24 maxlen: 24
31.40.170.0/23 maxlen: 23
31.40.170.0/24 maxlen: 24
31.40.171.0/24 maxlen: 24
31.40.172.0/23 maxlen: 23
31.40.174.0/24 maxlen: 24
31.40.178.0/23 maxlen: 23
92.118.132.0/24 maxlen: 24
92.118.133.0/24 maxlen: 24
92.118.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:df:fc:74:56:bf:f3:31:99:d1:c7:2d:7d:ce:1d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Sep 17 14:58:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=439f2ceb6601bd51fd11a0c8dc19dfd9d5a1f65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:dc:1f:75:e2:b3:66:65:de:15:dc:34:c8:0b:
d0:8c:37:a4:7e:9e:69:56:5f:77:97:c4:54:d0:28:
c0:1f:c5:53:61:ed:09:d2:4c:0d:c9:b3:e9:9b:e2:
a7:5b:a0:8a:29:8f:8c:04:86:0f:a0:f5:19:61:8d:
31:04:41:6a:36:f0:98:31:07:ee:3e:8f:b0:5f:65:
49:1c:97:31:4a:60:4e:9c:8a:fb:60:6b:1f:ea:c3:
c7:dc:f7:15:51:72:55:9f:7a:ad:2e:f7:20:a4:0e:
de:56:0e:d1:9a:fb:51:31:bb:f1:37:a7:ca:80:ca:
3e:c1:50:ec:09:0e:34:58:56:12:30:a0:ac:e5:9e:
05:ad:81:63:2e:99:1f:ea:0d:76:00:ab:12:55:65:
d4:40:7c:6c:dc:82:12:d6:8a:56:f7:ba:73:3a:5b:
e1:9d:01:68:af:5d:99:67:18:e8:cb:cf:04:68:70:
0f:e7:37:6f:92:fe:04:41:92:47:78:ab:4f:ea:6a:
db:e9:6e:cc:e7:fe:e6:25:dd:b4:00:1c:83:54:17:
b8:47:a7:ad:33:72:87:e9:7d:38:e6:49:67:dd:32:
cb:9b:14:a8:77:50:0a:41:73:d4:71:72:bd:25:ed:
8f:79:ca:7b:6d:26:56:be:46:2d:2a:16:f9:0b:2a:
83:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9F:2C:EB:66:01:BD:51:FD:11:A0:C8:DC:19:DF:D9:D5:A1:F6:5B
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Q58s62YBvVH9EaDI3Bnf2dWh9ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.130.0/24
31.40.132.0/24
31.40.137.0-31.40.138.255
31.40.140.0/24
31.40.143.0/24
31.40.151.0/24
31.40.153.0/24
31.40.162.0/23
31.40.165.0/24
31.40.167.0-31.40.174.255
31.40.178.0/23
92.118.132.0/23
92.118.135.0/24
Signature Algorithm: sha256WithRSAEncryption
74:aa:0a:2a:8b:98:93:e0:6a:d4:2d:f5:6c:f7:fd:12:a3:d3:
00:45:c1:4c:bd:37:29:0b:f4:0d:d2:98:95:a4:0e:42:15:a9:
13:3c:98:6d:8e:f8:47:c2:7a:a7:77:4d:c1:47:3f:62:ea:29:
79:8a:4b:3a:56:04:0e:fb:8a:c8:35:46:6b:16:7c:ce:23:93:
06:a0:69:33:17:64:40:a6:60:84:da:4e:4c:4c:ad:2b:1a:67:
bd:ae:2a:48:45:6d:a8:b4:e4:2d:79:c5:d2:e1:7f:1d:b1:dc:
4d:19:a4:88:2d:a2:b2:2b:5b:5f:45:b2:16:38:67:89:cf:5c:
01:36:62:f5:ac:e9:f3:65:e3:df:ad:ac:3d:f5:ef:6f:a0:7e:
e0:2e:04:84:4a:61:ce:ea:cf:cd:d6:6b:7e:3d:d2:a0:70:24:
62:f2:8b:e8:9c:fd:6b:92:cf:75:23:35:f1:70:4d:a1:3a:78:
d5:17:9a:03:02:c3:9a:cb:80:3c:ca:34:d3:fd:04:de:5d:65:
0e:13:0f:74:b9:13:04:fb:03:34:13:2d:f1:53:06:f0:ff:c3:
94:12:2d:d7:10:fe:39:0a:f5:6c:36:58:b2:15:23:a1:0a:bb:
02:09:50:3a:1b:88:7f:d3:85:d1:53:a6:22:b2:f6:33:ee:85:
b1:f9:c4:8f
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAaCv3/x0Vr/zMZnRxy19zh1BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl
ZTY2ZDcwHhcNMjYwOTE3MTQ1ODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzlmMmNlYjY2MDFiZDUxZmQxMWEwYzhkYzE5ZGZkOWQ1YTFmNjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NwfdeKzZmXeFdw0yAvQjDekfp5p
Vl93l8RU0CjAH8VTYe0J0kwNybPpm+KnW6CKKY+MBIYPoPUZYY0xBEFqNvCYMQfu
Po+wX2VJHJcxSmBOnIr7YGsf6sPH3PcVUXJVn3qtLvcgpA7eVg7RmvtRMbvxN6fK
gMo+wVDsCQ40WFYSMKCs5Z4FrYFjLpkf6g12AKsSVWXUQHxs3IIS1opW97pzOlvh
nQFor12ZZxjoy88EaHAP5zdvkv4EQZJHeKtP6mrb6W7M5/7mJd20AByDVBe4R6et
M3KH6X045kln3TLLmxSod1AKQXPUcXK9Je2Pecp7bSZWvkYtKhb5CyqDdwIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFEOfLOtmAb1R/RGgyNwZ39nVofZbMB8GA1UdIwQY
MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt
NGEzNGMxYmJhYjJiLzEvUTU4czYyWUJ2Vkg5RWFESTNCbmYyZFdoOWxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi
LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBkBAIAATBeAwQAHyiCAwQA
HyiEMAwDBAAfKIkDBAAfKIoDBAAfKIwDBAAfKI8DBAAfKJcDBAAfKJkDBAEfKKID
BAAfKKUwDAMEAB8opwMEAB8orgMEAR8osgMEAVx2hAMEAFx2hzANBgkqhkiG9w0B
AQsFAAOCAQEAdKoKKouYk+Bq1C31bPf9EqPTAEXBTL03KQv0DdKYlaQOQhWpEzyY
bY74R8J6p3dNwUc/YuopeYpLOlYEDvuKyDVGaxZ8ziOTBqBpMxdkQKZghNpOTEyt
Kxpnva4qSEVtqLTkLXnF0uF/HbHcTRmkiC2isitbX0WyFjhnic9cATZi9azp82Xj
362sPfXvb6B+4C4EhEphzurPzdZrfj3SoHAkYvKL6Jz9a5LPdSM18XBNoTp41Rea
AwLDmsuAPMo00/0E3l1lDhMPdLkTBPsDNBMt8VMG8P/DlBIt1xD+OQr1bDZYshUj
oQq7AglQOhuIf9OF0VOmIrL2M+6FsfnEjw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:10:47 2026 by rpki-client