Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/WPDcmKjGYnQwVtZjqSEEVIEMong.roa
File: WPDcmKjGYnQwVtZjqSEEVIEMong.roa (raw, json)
Hash identifier: SBZGEYTk+vR8jfNGn9Ju01XN2DJPoRlrE5cozVxIBRY=
Subject key identifier: 58:F0:DC:98:A8:C6:62:74:30:56:D6:63:A9:21:04:54:81:0C:A2:78
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 019EA07DF5E68881ADAC4149F6D12C2A482C
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/WPDcmKjGYnQwVtZjqSEEVIEMong.roa
Signing time: Sun 07 Jun 2026 05:11:09 +0000
ROA not before: Sun 07 Jun 2026 05:11:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56703
IP address blocks: 31.40.0.0/23 maxlen: 23
31.40.2.0/24 maxlen: 24
31.40.3.0/24 maxlen: 24
31.40.4.0/24 maxlen: 24
31.40.5.0/24 maxlen: 24
194.26.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a0:7d:f5:e6:88:81:ad:ac:41:49:f6:d1:2c:2a:48:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Jun 7 05:11:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58f0dc98a8c662743056d663a9210454810ca278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:77:57:44:57:be:b6:23:72:cf:56:57:b8:61:
21:a7:dd:7c:15:13:e2:5f:be:35:5d:1d:4e:55:85:
03:d4:a6:fb:49:ed:21:72:a1:10:fb:75:80:1a:19:
a5:78:75:d2:db:51:8d:b0:d9:00:c3:cc:94:23:c2:
74:7a:6e:ee:b4:9b:d5:eb:03:82:81:b1:37:a0:00:
c4:95:2b:83:b0:52:70:43:46:ae:45:6d:57:90:f9:
83:a5:c7:d7:c5:49:0a:28:e6:97:d2:b8:ab:83:48:
e1:1e:dc:20:fc:fb:05:c5:ef:7f:e3:07:a7:8d:a4:
e1:ef:bb:e5:12:6f:89:c9:e2:3e:6f:20:9f:a7:34:
6c:c0:58:31:cd:d5:37:6c:30:3d:55:e2:5c:ca:a9:
6e:6a:a7:c3:dd:47:e2:93:a1:34:06:f8:ad:12:5c:
cf:62:3d:e5:34:98:71:11:f3:61:19:21:cd:71:55:
86:c2:64:f7:9b:42:49:a2:f6:1e:73:85:f7:6c:96:
e4:8d:82:c9:b1:4c:e5:f1:f2:0b:2f:ed:0e:81:3a:
90:29:ac:85:ff:dc:68:fc:b1:f6:8c:39:63:f8:22:
d5:95:47:7a:26:70:d9:d8:c2:b0:de:e7:db:d5:ae:
82:da:05:d0:c3:2d:14:6a:50:5b:92:e1:82:28:a3:
b6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F0:DC:98:A8:C6:62:74:30:56:D6:63:A9:21:04:54:81:0C:A2:78
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/WPDcmKjGYnQwVtZjqSEEVIEMong.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.0.0-31.40.5.255
194.26.117.0/24
Signature Algorithm: sha256WithRSAEncryption
23:e5:57:df:85:da:16:c0:d1:7b:02:ac:b2:7c:4d:f4:74:92:
66:cc:12:a5:6e:9c:6f:da:bb:b2:24:4b:e9:92:c1:80:02:d4:
1d:13:c3:e9:a8:18:81:f5:1c:55:20:f6:1d:b5:2c:26:08:90:
7e:59:15:2b:44:9b:e6:23:94:b0:6b:52:f9:86:8e:2d:f1:56:
07:c0:9c:f5:75:fa:95:0c:9d:71:ac:45:ec:b1:05:b9:a0:5f:
98:82:47:c5:d8:cf:ea:2e:a9:97:01:af:66:16:67:dd:f6:b4:
0a:b7:db:1e:55:87:25:6c:51:96:4d:97:ac:32:39:ec:bd:9d:
29:56:62:9c:c5:0b:e0:bc:59:85:65:11:f7:4f:a7:c0:06:17:
4f:95:37:6e:a5:bd:66:d1:d5:3c:ae:4c:c5:f4:bd:a7:f1:94:
24:3a:2e:7d:81:ff:da:3d:63:45:29:31:5d:3d:cb:6f:fd:cc:
01:93:ef:26:a2:20:a8:3c:d6:0a:78:4a:c4:a8:af:d8:c6:52:
02:a8:fd:07:b9:b5:e9:10:93:92:22:7f:d4:8f:32:8b:fc:82:
7f:a8:ca:ca:41:13:cd:b7:2c:6f:35:79:1b:ef:e3:c3:19:8d:
7e:10:c3:59:fd:a4:54:d0:d2:79:e0:47:ef:06:5e:ef:76:d1:
59:68:cb:d1
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZ6gffXmiIGtrEFJ9tEsKkgsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZTAyYjdlZWRmZmMzOGFiNWVhYjQ0MTYxNzJlN2Q4OGU5
YWQxZTIwHhcNMjYwNjA3MDUxMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGYwZGM5OGE4YzY2Mjc0MzA1NmQ2NjNhOTIxMDQ1NDgxMGNhMjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHdXRFe+tiNyz1ZXuGEhp918FRPi
X741XR1OVYUD1Kb7Se0hcqEQ+3WAGhmleHXS21GNsNkAw8yUI8J0em7utJvV6wOC
gbE3oADElSuDsFJwQ0auRW1XkPmDpcfXxUkKKOaX0rirg0jhHtwg/PsFxe9/4wen
jaTh77vlEm+JyeI+byCfpzRswFgxzdU3bDA9VeJcyqluaqfD3Ufik6E0BvitElzP
Yj3lNJhxEfNhGSHNcVWGwmT3m0JJovYec4X3bJbkjYLJsUzl8fILL+0OgTqQKayF
/9xo/LH2jDlj+CLVlUd6JnDZ2MKw3ufb1a6C2gXQwy0UalBbkuGCKKO2DQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFFjw3JioxmJ0MFbWY6khBFSBDKJ4MB8GA1UdIwQY
MBaAFI/gK37t/8OKteq0QWFy59iOmtHiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvai1BcmZ1M193NHExNnJSQllYTG4ySTZhMGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kMmMyMzUtYTFmNS00OTg0LWFhZGYt
NTE0NmYxM2I3MWExLzEvV1BEY21LakdZblF3VnRaanFTRUVWSUVNb25nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kMmMyMzUtYTFmNS00OTg0LWFhZGYtNTE0NmYxM2I3MWEx
LzEvai1BcmZ1M193NHExNnJSQllYTG4ySTZhMGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATMAsDAwMfKAME
AR8oBAMEAMIadTANBgkqhkiG9w0BAQsFAAOCAQEAI+VX34XaFsDRewKssnxN9HSS
ZswSpW6cb9q7siRL6ZLBgALUHRPD6agYgfUcVSD2HbUsJgiQflkVK0Sb5iOUsGtS
+YaOLfFWB8Cc9XX6lQydcaxF7LEFuaBfmIJHxdjP6i6plwGvZhZn3fa0CrfbHlWH
JWxRlk2XrDI57L2dKVZinMUL4LxZhWUR90+nwAYXT5U3bqW9ZtHVPK5MxfS9p/GU
JDoufYH/2j1jRSkxXT3Lb/3MAZPvJqIgqDzWCnhKxKiv2MZSAqj9B7m16RCTkiJ/
1I8yi/yCf6jKykETzbcsbzV5G+/jwxmNfhDDWf2kVNDSeeBH7wZe73bRWWjL0Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:03:15 2026 by rpki-client