Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/1-B-W1CSDI6bR5xOD8iHSBu7x7tI.roa
File: 1-B-W1CSDI6bR5xOD8iHSBu7x7tI.roa (raw, json)
Hash identifier: CfjF3SZAdjPqJOrdB0hBuqX8UJ9deq/HcLszHmoUDcg=
Subject key identifier: F8:1F:96:D4:24:83:23:A6:D1:E7:13:83:F2:21:D2:06:EE:F1:EE:D2
Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Certificate serial: 019C50264BFD9D7BC2C4BD6460BFE0121BBB
Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/1-B-W1CSDI6bR5xOD8iHSBu7x7tI.roa
Signing time: Thu 12 Feb 2026 04:40:12 +0000
ROA not before: Thu 12 Feb 2026 04:40:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 31.98.140.0/22 maxlen: 22
31.98.144.0/20 maxlen: 20
31.98.160.0/19 maxlen: 19
31.98.192.0/19 maxlen: 19
31.98.224.0/19 maxlen: 19
31.105.0.0/18 maxlen: 18
31.105.64.0/19 maxlen: 19
31.105.96.0/19 maxlen: 19
31.105.128.0/17 maxlen: 17
87.56.0.0/19 maxlen: 19
176.20.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:50:26:4b:fd:9d:7b:c2:c4:bd:64:60:bf:e0:12:1b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Validity
Not Before: Feb 12 04:40:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f81f96d4248323a6d1e71383f221d206eef1eed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7e:2d:7b:44:a5:58:62:7d:05:98:34:7b:a2:
04:8e:8b:7a:95:0e:8d:7e:58:96:db:1c:3e:70:bf:
4d:47:e5:fb:58:8e:7b:32:e3:94:f0:1d:10:34:cb:
f5:34:91:03:b8:a0:a0:c9:48:57:eb:e8:5b:8a:f3:
22:bd:ba:7b:36:ca:4b:52:5a:f9:20:71:dc:fe:13:
00:f0:21:98:91:94:a8:df:14:f2:63:d2:7f:3a:20:
c5:84:3f:e4:3f:12:2f:7a:97:76:aa:97:4e:cd:95:
8d:b3:c2:ac:5d:67:5a:ca:03:e4:c5:9a:af:32:5d:
d2:1d:b5:7c:ea:53:95:7c:83:de:a4:fa:fc:10:1b:
39:6b:8b:47:4f:1e:b0:56:c5:89:16:cf:f2:5e:ad:
7e:60:c9:87:c8:88:2c:db:c3:b3:0f:37:2d:ff:bf:
24:a8:bc:e1:4f:73:b0:73:f2:81:4a:13:53:12:b9:
c3:8f:81:5e:c8:37:d8:52:6d:38:8e:18:87:73:50:
84:22:9f:e8:ec:32:47:0f:ab:98:17:14:1a:05:8b:
73:2c:96:6b:c9:1c:24:cb:23:27:a9:06:e3:ab:52:
72:a4:0b:4b:50:8f:3a:4b:4b:1e:e5:67:72:3c:3e:
a8:32:1d:e7:ee:31:39:43:ce:f6:46:8b:a4:78:4e:
48:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1F:96:D4:24:83:23:A6:D1:E7:13:83:F2:21:D2:06:EE:F1:EE:D2
X509v3 Authority Key Identifier:
keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/1-B-W1CSDI6bR5xOD8iHSBu7x7tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.98.140.0-31.98.255.255
31.105.0.0/16
87.56.0.0/19
176.20.192.0/19
Signature Algorithm: sha256WithRSAEncryption
a8:a1:fd:75:a6:96:89:e5:01:a7:30:e4:bc:93:64:0d:b8:64:
ad:16:fe:63:ef:b2:ba:f9:7b:59:3a:06:88:ee:e6:26:47:38:
4f:20:1d:9f:c1:fd:69:90:42:8f:44:d4:cc:40:79:91:95:42:
4b:9c:6f:c5:54:f5:62:c9:e3:c8:bd:43:65:92:ba:da:ed:c2:
2a:cb:1a:ba:a1:5d:c7:78:26:9e:43:5d:b4:5a:d1:89:81:7e:
a9:2f:52:71:fe:b8:7b:52:77:9e:11:f6:bd:51:a2:7c:c5:96:
22:64:7b:88:62:0a:1b:f9:a5:a4:e6:26:81:68:c7:29:e3:23:
85:b5:61:89:f3:ad:81:d5:bc:a7:0f:33:36:c1:a8:04:75:7f:
4b:e5:87:f3:6b:42:96:bd:75:ba:60:d4:70:2e:2a:98:b7:31:
2a:cc:35:3e:cd:05:fe:4e:ca:ba:9b:9f:6d:03:58:39:28:ff:
41:22:b9:ee:5b:a2:a0:0b:c7:fe:56:0b:a3:c7:96:ec:14:ae:
42:67:95:f8:01:ad:1f:13:83:9a:0f:8e:af:2e:b4:57:6d:c8:
3b:b5:a8:c7:9e:bc:81:4c:b1:1c:ca:54:57:5e:86:4a:51:d5:
b1:8d:07:aa:4e:41:f1:45:01:a8:cb:e8:5e:88:57:06:db:2e:
58:3c:c2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:51 2026 by rpki-client