Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/a3XVK1fK4yL5dzbsh_z79qkwjlg.roa
File: a3XVK1fK4yL5dzbsh_z79qkwjlg.roa (raw, json)
Hash identifier: 0mBC2ShCFRLj+q6c3IME/vz+ys6CyTWrvuBmxO2vhXU=
Subject key identifier: 6B:75:D5:2B:57:CA:E3:22:F9:77:36:EC:87:FC:FB:F6:A9:30:8E:58
Certificate issuer: /CN=988ce6e4ee09ef66658286451790969d7cffe9b9
Certificate serial: 019FAD0F852365875A7A4E851F34AA16513E
Authority key identifier: 98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/a3XVK1fK4yL5dzbsh_z79qkwjlg.roa
Signing time: Wed 29 Jul 2026 08:48:23 +0000
ROA not before: Wed 29 Jul 2026 08:48:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50810
IP address blocks: 31.40.0.0/24 maxlen: 24
31.40.1.0/24 maxlen: 24
31.40.2.0/24 maxlen: 24
31.40.3.0/24 maxlen: 24
31.40.4.0/22 maxlen: 22
31.40.4.0/24 maxlen: 24
31.40.5.0/24 maxlen: 24
31.40.6.0/24 maxlen: 24
31.40.7.0/24 maxlen: 24
91.206.177.0/24 maxlen: 24
92.51.56.0/21 maxlen: 21
153.51.0.0/19 maxlen: 19
153.51.128.0/19 maxlen: 19
185.213.200.0/22 maxlen: 22
193.37.38.0/24 maxlen: 24
194.5.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:0f:85:23:65:87:5a:7a:4e:85:1f:34:aa:16:51:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988ce6e4ee09ef66658286451790969d7cffe9b9
Validity
Not Before: Jul 29 08:48:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b75d52b57cae322f97736ec87fcfbf6a9308e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:12:fc:b1:43:e5:4c:2d:35:d7:2c:29:9a:39:
e8:d2:35:7f:fa:8a:aa:b5:72:6a:d8:7c:77:b2:a4:
12:40:15:23:2b:af:d3:af:f2:2e:e9:29:86:e5:1c:
3f:0f:6a:99:54:66:cf:78:68:3d:4c:5c:31:66:44:
ee:be:01:0e:96:78:39:cf:b4:38:d3:91:ed:67:5a:
1b:ca:20:fc:09:96:e7:08:34:24:78:7c:5a:be:3d:
ae:78:18:9b:6e:5f:d0:c0:3f:cf:b8:26:95:4c:37:
e9:8a:79:02:3f:21:6c:d2:45:8a:dd:6d:17:f6:3f:
42:48:4e:32:80:65:60:7d:cf:06:1c:c4:5a:a6:98:
cf:6a:d5:d8:b0:7d:b4:67:0a:ba:dd:e1:9b:3d:be:
05:55:93:c9:36:d6:fa:65:79:0b:e8:68:8a:24:4f:
81:75:de:0e:93:55:14:a2:c7:5c:d2:1e:c6:e7:10:
d5:af:b8:91:9a:1f:0b:12:34:06:5d:92:e7:f7:bf:
5e:0e:96:36:58:5b:e5:a7:57:72:05:85:0d:5b:bb:
3d:dd:78:a2:83:db:58:8c:71:03:d7:78:e7:2f:8f:
19:12:83:95:97:c0:3f:f0:9c:2f:d1:f1:9d:cc:26:
f6:15:03:48:25:8a:01:fe:0c:0e:b3:42:ba:a2:62:
b1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:75:D5:2B:57:CA:E3:22:F9:77:36:EC:87:FC:FB:F6:A9:30:8E:58
X509v3 Authority Key Identifier:
keyid:98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/a3XVK1fK4yL5dzbsh_z79qkwjlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.0.0/21
91.206.177.0/24
92.51.56.0/21
153.51.0.0/19
153.51.128.0/19
185.213.200.0/22
193.37.38.0/24
194.5.16.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:bf:aa:e4:79:02:46:99:c9:ea:44:c5:9c:ad:aa:ae:dd:a0:
27:23:c0:7e:64:f0:88:4e:49:0c:e5:1a:f1:10:94:8c:d6:83:
1f:10:94:b5:96:f8:d9:97:a7:46:c7:bf:97:b9:ca:ee:d6:08:
dd:c1:e6:12:7c:ee:ed:b7:e3:11:eb:b8:c0:cf:e2:b1:f8:b0:
76:94:23:6c:81:da:a7:8b:63:9a:42:cf:c3:d2:77:bb:6e:2b:
b6:1a:83:2a:fc:ed:b8:77:32:a3:fa:61:3a:0e:ea:3c:ef:42:
41:75:2d:b5:c1:9f:a7:5e:35:45:af:11:c3:1e:9b:65:5e:6f:
88:95:1c:9e:0a:72:c2:57:8e:6b:25:ba:aa:91:5f:c2:05:0d:
9e:64:3a:a6:b4:67:2d:c3:2b:8c:6e:f8:a7:c8:3c:0d:6d:90:
a5:fd:f0:f4:43:da:67:36:4b:07:d7:e6:b7:ae:d3:60:61:ef:
ec:61:9e:da:9a:4a:f4:50:da:16:ec:33:53:96:ae:61:8e:0e:
1e:c2:a7:6c:76:39:42:58:d9:b6:06:8e:6f:41:b6:40:f0:97:
93:ca:00:99:0c:2d:26:10:e5:fb:01:d5:10:b4:c5:c2:eb:9b:
76:3b:af:31:1e:05:f3:58:4d:ce:d5:c2:2d:63:55:09:09:49:
fe:f1:22:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:36:55 2026 by rpki-client