Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/srQhx9sIjZNbQnm0t4UEW3deG1s.roa
File: srQhx9sIjZNbQnm0t4UEW3deG1s.roa (raw, json)
Hash identifier: cNnh8705CpKhEx6h/I59Oq+zBrL9F/BeoLhEWIh1/Hs=
Subject key identifier: B2:B4:21:C7:DB:08:8D:93:5B:42:79:B4:B7:85:04:5B:77:5E:1B:5B
Certificate issuer: /CN=dd206b8bd221574c96592443195b9005769c724d
Certificate serial: 019EC56845D35B88DF96BED40A9574B63793
Authority key identifier: DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/srQhx9sIjZNbQnm0t4UEW3deG1s.roa
Signing time: Sun 14 Jun 2026 09:13:25 +0000
ROA not before: Sun 14 Jun 2026 09:13:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56632
IP address blocks: 31.7.128.0/24 maxlen: 24
31.7.129.0/24 maxlen: 24
31.7.130.0/23 maxlen: 23
31.7.130.0/24 maxlen: 24
31.7.131.0/24 maxlen: 24
31.7.133.0/24 maxlen: 24
31.7.134.0/23 maxlen: 23
31.7.134.0/24 maxlen: 24
31.7.135.0/24 maxlen: 24
31.7.136.0/24 maxlen: 24
31.7.137.0/24 maxlen: 24
31.7.138.0/24 maxlen: 24
31.7.139.0/24 maxlen: 24
31.7.140.0/24 maxlen: 24
31.7.141.0/24 maxlen: 24
31.7.142.0/24 maxlen: 24
31.7.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c5:68:45:d3:5b:88:df:96:be:d4:0a:95:74:b6:37:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd206b8bd221574c96592443195b9005769c724d
Validity
Not Before: Jun 14 09:13:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2b421c7db088d935b4279b4b785045b775e1b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5f:e9:af:02:44:72:55:12:51:f7:a2:01:f1:
59:3f:4d:c6:29:5b:b7:16:bc:a1:5f:5c:83:da:8a:
fd:eb:3f:87:f7:4b:49:d9:b0:2d:35:fe:30:2e:6b:
e8:07:ae:60:fc:7a:7b:69:8c:9c:b2:16:f1:1e:ed:
a8:e9:cc:34:31:90:f6:38:66:77:a3:95:0c:cc:a0:
88:7b:65:9a:ca:61:c6:ae:c7:f5:a6:3a:b9:56:d0:
66:94:74:3e:51:69:6d:54:e0:c9:af:fc:29:29:dd:
5f:f1:26:d8:08:9c:c4:6e:74:e0:fd:32:07:4d:06:
d5:91:55:81:59:d4:8d:ac:66:f8:30:11:0a:75:48:
97:fb:f8:ce:1d:09:1a:c1:81:48:eb:cf:91:98:ad:
7f:91:f8:03:64:87:1d:cf:ea:6d:51:cb:09:7b:f2:
aa:f1:33:57:19:d1:34:5e:cb:c1:17:1a:ff:d0:85:
20:de:7d:65:52:8e:ce:f8:f0:d8:ef:3f:8e:c1:5e:
bd:d5:ba:e0:db:7f:fd:90:13:f8:2c:ac:1e:ed:72:
cc:05:05:38:91:96:20:08:fe:7a:55:f7:5b:1d:3d:
e8:11:42:cf:cf:f8:1d:dc:df:59:c3:0c:cc:28:7b:
bd:9c:ab:d3:c9:0c:18:d1:c3:b1:08:cb:56:1b:fc:
90:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B4:21:C7:DB:08:8D:93:5B:42:79:B4:B7:85:04:5B:77:5E:1B:5B
X509v3 Authority Key Identifier:
keyid:DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/srQhx9sIjZNbQnm0t4UEW3deG1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.128.0/22
31.7.133.0-31.7.143.255
Signature Algorithm: sha256WithRSAEncryption
06:1a:38:52:8b:bb:03:2c:39:47:44:42:fb:41:af:73:07:71:
83:84:5e:e2:18:e9:07:4e:45:13:20:06:70:6c:65:76:04:eb:
4e:d4:b2:eb:ff:dc:47:63:f4:ce:08:02:48:93:19:95:78:30:
e8:18:52:1d:8b:5c:09:45:d6:08:40:a2:41:51:86:ac:75:99:
d6:4f:ac:17:02:23:0b:fd:0e:07:8e:d2:ed:c2:a6:7d:86:b0:
94:f0:f2:60:f3:4c:48:fe:ae:1f:19:ed:69:20:1b:14:18:d1:
3b:4d:28:08:e6:48:4a:20:9a:0e:69:d4:e4:1b:ab:ca:e1:ef:
90:fd:56:a2:87:1d:d3:97:7b:83:1f:5e:06:a5:68:e6:93:c9:
90:41:1f:38:52:a3:fa:ce:59:15:fb:4e:be:cf:a1:06:d4:74:
0a:e2:36:9a:18:ea:7e:9f:80:98:e7:b3:69:6d:06:57:d7:c8:
8e:5b:1d:24:a6:cd:bb:2c:af:f3:81:cd:0d:94:a6:28:1c:de:
73:29:ce:55:75:e0:39:02:9e:b3:29:17:72:9b:0e:7f:e5:6e:
fd:8f:f8:fb:0b:e8:27:53:eb:02:03:23:7c:25:74:f8:95:3d:
a8:e6:1c:d3:4f:ea:b7:a6:bc:5e:bb:df:d1:05:ea:14:66:81:
6f:8a:62:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:31:28 2026 by rpki-client