Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/vEJs2SnUIIpadefjvWpVjOcdWIo.roa
File: vEJs2SnUIIpadefjvWpVjOcdWIo.roa (raw, json)
Hash identifier: B4tVC7LpTfki/9dpUMetUexqLXQn7ZVvuYAjP6iDSEg=
Subject key identifier: BC:42:6C:D9:29:D4:20:8A:5A:75:E7:E3:BD:6A:55:8C:E7:1D:58:8A
Certificate issuer: /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial: 019D47D50B43DDBAC9F339ADD2D1D24F38C4
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/vEJs2SnUIIpadefjvWpVjOcdWIo.roa
Signing time: Wed 01 Apr 2026 06:57:17 +0000
ROA not before: Wed 01 Apr 2026 06:57:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209296
IP address blocks: 31.31.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:47:d5:0b:43:dd:ba:c9:f3:39:ad:d2:d1:d2:4f:38:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Validity
Not Before: Apr 1 06:57:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc426cd929d4208a5a75e7e3bd6a558ce71d588a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:42:ec:d2:a8:42:f8:13:b0:86:5a:e4:f9:
c8:e5:2f:d0:39:b7:d6:8d:4a:8b:c7:7e:5a:35:a2:
3b:de:de:dc:27:76:21:fd:74:e4:e5:25:23:6d:59:
c0:ed:e8:86:12:09:64:12:73:39:db:3f:84:84:34:
26:f6:8c:3b:65:34:6e:b6:d9:e0:53:a7:aa:61:cf:
66:86:1a:85:5c:ac:f6:00:f6:b5:db:9e:ce:f2:82:
70:8f:1e:4d:ee:33:58:d0:e5:22:73:b9:cb:7c:06:
7e:15:2f:53:47:8e:5b:1b:c2:73:7f:c9:f4:c6:b0:
08:22:4e:18:67:82:89:13:c1:98:68:b5:60:31:d8:
8f:db:d0:2f:d9:b7:9b:2b:ec:61:f1:96:26:3e:02:
2a:81:b7:c2:b6:76:b0:aa:19:0e:fd:ba:b0:a2:ce:
15:50:42:b5:d4:f8:f9:75:91:8b:dd:86:70:b9:a8:
9d:43:c5:d5:7e:32:8a:26:b5:a7:56:0c:24:0f:d1:
17:45:3b:2a:73:f3:8b:13:94:77:cd:72:74:e3:dd:
7e:ab:db:7d:f7:7f:f9:5e:c6:7e:af:a9:56:98:70:
b8:29:a6:dc:9f:e4:42:70:e8:8f:32:d5:bc:34:b9:
43:ff:ef:7f:b9:fd:56:f7:fd:c3:ac:fd:1b:82:4b:
0a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:42:6C:D9:29:D4:20:8A:5A:75:E7:E3:BD:6A:55:8C:E7:1D:58:8A
X509v3 Authority Key Identifier:
keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/vEJs2SnUIIpadefjvWpVjOcdWIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.171.0/24
Signature Algorithm: sha256WithRSAEncryption
99:4c:9e:35:4c:dc:83:1f:3a:6b:70:4d:cd:81:b5:80:3f:23:
4a:e0:82:2d:ce:40:4a:a5:d5:3c:b5:f1:7f:fe:fc:e9:ce:f7:
d5:8f:be:2b:f0:ed:4a:8f:0d:0c:3f:a3:64:6f:0d:69:48:74:
4f:12:44:a0:90:94:40:5c:29:07:ce:23:2e:8a:4e:97:4c:e5:
19:ef:67:b7:76:c3:d1:1f:d4:39:f0:15:e0:51:48:03:de:b5:
5c:98:aa:a1:06:b1:61:6a:8b:f5:4c:08:eb:77:c3:6e:c7:56:
d5:d8:9a:c0:8e:ef:09:fc:6f:4e:b4:ea:81:3a:ee:e6:25:dd:
14:71:16:b7:47:13:84:83:0a:e5:ca:51:1f:be:9e:71:7e:f4:
fb:c9:10:2b:08:cb:d2:e2:fd:a9:17:c3:da:d3:7c:39:a4:02:
bc:0f:91:ec:34:b2:3d:c1:52:a7:14:3f:ef:1b:ec:c0:b4:f8:
0a:61:23:65:5c:ce:98:ea:d1:9e:4a:1c:d0:ee:e6:03:d9:42:
8a:f9:dc:27:a3:a1:35:52:e5:49:d5:d0:9d:73:aa:d9:75:c6:
2a:02:83:2d:8b:83:da:7f:ce:a0:7c:78:ad:41:e0:8f:38:88:
e2:bc:8e:98:3c:a5:05:33:07:d7:b4:69:d0:b4:4e:5a:e8:ef:
ea:14:8c:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1H1QtD3brJ8zmt0tHSTzjEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMzg4NDAyMWQxYjAyZThjMTZiNTU1NzQzZGZlYjlkYThl
NDhlMzEwHhcNMjYwNDAxMDY1NzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzQyNmNkOTI5ZDQyMDhhNWE3NWU3ZTNiZDZhNTU4Y2U3MWQ1ODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqlC7NKoQvgTsIZa5PnI5S/QObfW
jUqLx35aNaI73t7cJ3Yh/XTk5SUjbVnA7eiGEglkEnM52z+EhDQm9ow7ZTRuttng
U6eqYc9mhhqFXKz2APa1257O8oJwjx5N7jNY0OUic7nLfAZ+FS9TR45bG8Jzf8n0
xrAIIk4YZ4KJE8GYaLVgMdiP29Av2bebK+xh8ZYmPgIqgbfCtnawqhkO/bqwos4V
UEK11Pj5dZGL3YZwuaidQ8XVfjKKJrWnVgwkD9EXRTsqc/OLE5R3zXJ0491+q9t9
93/5XsZ+r6lWmHC4Kabcn+RCcOiPMtW8NLlD/+9/uf1W9/3DrP0bgksKWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLxCbNkp1CCKWnXn471qVYznHViKMB8GA1UdIwQY
MBaAFNw4hAIdGwLowWtVV0Pf652o5I4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wY2IyZjktOGVmOS00ZWViLTk2MmEt
ZDhiNGUwZDBkNmQ1LzEvdkVKczJTblVJSXBhZGVmanZXcFZqT2NkV0lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8wY2IyZjktOGVmOS00ZWViLTk2MmEtZDhiNGUwZDBkNmQ1
LzEvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHx+rMA0G
CSqGSIb3DQEBCwUAA4IBAQCZTJ41TNyDHzprcE3NgbWAPyNK4IItzkBKpdU8tfF/
/vzpzvfVj74r8O1Kjw0MP6Nkbw1pSHRPEkSgkJRAXCkHziMuik6XTOUZ72e3dsPR
H9Q58BXgUUgD3rVcmKqhBrFhaov1TAjrd8Nux1bV2JrAju8J/G9OtOqBOu7mJd0U
cRa3RxOEgwrlylEfvp5xfvT7yRArCMvS4v2pF8Pa03w5pAK8D5HsNLI9wVKnFD/v
G+zAtPgKYSNlXM6Y6tGeShzQ7uYD2UKK+dwno6E1UuVJ1dCdc6rZdcYqAoMti4Pa
f86gfHitQeCPOIjivI6YPKUFMwfXtGnQtE5a6O/qFIxo
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:29:30 2026 by rpki-client