Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/aS8mVetVV64JjwlhI8fk4CgYJuY.roa
File: aS8mVetVV64JjwlhI8fk4CgYJuY.roa (raw, json)
Hash identifier: 5ScmfISq4FtoPsxtoa+DY1bHZcOcz3J826X0cZ02V54=
Subject key identifier: 69:2F:26:55:EB:55:57:AE:09:8F:09:61:23:C7:E4:E0:28:18:26:E6
Certificate issuer: /CN=40ea5e39f8635736e48df53822a5cacc10b43a1f
Certificate serial: 019B7B36DD9325083DD61FDFCF5BFB006CC4
Authority key identifier: 40:EA:5E:39:F8:63:57:36:E4:8D:F5:38:22:A5:CA:CC:10:B4:3A:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/aS8mVetVV64JjwlhI8fk4CgYJuY.roa
Signing time: Thu 01 Jan 2026 20:19:11 +0000
ROA not before: Thu 01 Jan 2026 20:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12985
IP address blocks: 31.41.136.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:dd:93:25:08:3d:d6:1f:df:cf:5b:fb:00:6c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ea5e39f8635736e48df53822a5cacc10b43a1f
Validity
Not Before: Jan 1 20:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=692f2655eb5557ae098f096123c7e4e0281826e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:d8:48:e8:fb:1b:7a:bd:07:8c:e5:38:f2:
30:14:43:6c:eb:a2:b1:2e:ba:72:90:c5:af:fd:b5:
32:59:40:39:fa:48:b1:c7:c0:d1:ed:b0:b1:7c:3e:
dd:ef:3e:54:63:c9:0d:d1:39:44:4a:15:6e:43:9b:
e9:ce:29:32:0d:69:b5:f4:19:ee:99:0a:41:96:21:
2f:ec:27:86:b0:46:aa:e9:55:20:48:e5:5d:cc:6f:
e3:a8:45:f0:3e:7b:61:1e:21:d3:28:fe:db:fd:fa:
a2:70:a9:0e:a9:f7:86:2a:b5:ed:db:b4:44:1e:ba:
fb:18:c2:3b:87:fe:43:1e:80:83:11:ad:24:d6:c1:
29:8d:2d:a1:3a:c0:eb:e6:7f:a2:9f:1b:40:29:03:
bf:99:0f:70:68:33:fb:e3:aa:07:37:88:1e:a6:54:
58:d1:d3:e3:63:9d:8b:5e:08:a3:0e:19:76:a4:b1:
a1:02:ca:64:d9:a3:b5:21:15:ab:3e:58:18:44:ce:
d0:92:71:58:ef:7f:86:ad:4d:bf:b3:d4:a0:49:ef:
f5:06:e9:4f:7a:2e:ff:37:95:2b:78:05:31:20:2a:
55:da:c7:92:1d:54:a2:e2:1c:d1:ff:21:ba:7e:9b:
dd:a5:58:11:b6:2e:3c:82:9a:0c:b0:69:d7:c2:d1:
28:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2F:26:55:EB:55:57:AE:09:8F:09:61:23:C7:E4:E0:28:18:26:E6
X509v3 Authority Key Identifier:
keyid:40:EA:5E:39:F8:63:57:36:E4:8D:F5:38:22:A5:CA:CC:10:B4:3A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/aS8mVetVV64JjwlhI8fk4CgYJuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.136.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:86:85:22:c5:92:89:1e:98:46:56:a5:2a:ea:5d:79:9e:09:
cc:e6:a4:ab:7b:34:32:a9:ac:dd:f5:17:ab:8e:b3:9c:d6:87:
84:05:d1:43:58:d6:9e:22:46:d2:d3:e5:4a:bb:5d:39:54:58:
b3:c2:de:1d:6e:2e:b8:85:ac:28:4d:02:f4:27:42:49:e2:c4:
92:9a:15:f3:3d:73:37:d9:90:fb:83:66:89:e7:6b:1f:3b:b7:
64:92:2d:bc:23:79:80:a0:0a:12:88:a5:1f:28:62:e6:5f:bc:
88:a3:49:f5:2c:11:d1:f4:e0:48:2b:03:2f:46:54:02:05:2b:
01:68:59:e5:35:50:d4:d3:ea:b0:3f:82:5d:cb:4a:4c:5c:aa:
2f:43:37:f3:d4:80:3a:30:bb:48:ed:9e:d0:9a:ac:0a:50:ae:
53:ec:9f:70:9f:54:35:73:9e:5e:9a:a1:09:ee:bc:b0:9d:61:
f3:5a:f5:c5:eb:7e:bb:09:7f:ef:75:55:e9:35:ad:d7:86:07:
71:bb:ac:23:9b:16:2e:39:54:5b:c0:63:f4:c4:c8:5b:39:5e:
e1:bb:f4:cb:91:48:03:de:fc:2e:60:95:25:8b:43:f0:71:91:
0c:ec:28:b3:80:f0:65:2e:1a:76:90:ee:7c:c2:69:d7:cf:81:
8e:ec:7c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:59:09 2026 by rpki-client