Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/1-RVhNjAXm8xuCwG5LYtyoy0Dhf8.roa
File: 1-RVhNjAXm8xuCwG5LYtyoy0Dhf8.roa (raw, json)
Hash identifier: uX0sCoDOEDEPL9f2dz9l6RUAfsAorlI8GWZL2eglqUs=
Subject key identifier: F9:15:61:36:30:17:9B:CC:6E:0B:01:B9:2D:8B:72:A3:2D:03:85:FF
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039823F9EAA5123C3C207852A843DB0B3
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/1-RVhNjAXm8xuCwG5LYtyoy0Dhf8.roa
Signing time: Tue 25 Aug 2026 15:20:32 +0000
ROA not before: Tue 25 Aug 2026 15:20:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60647
IP address blocks: 217.18.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:3f:9e:aa:51:23:c3:c2:07:85:2a:84:3d:b0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f915613630179bcc6e0b01b92d8b72a32d0385ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9b:05:43:4e:f5:59:78:5d:23:11:f6:07:65:
12:3e:a3:d9:23:04:96:35:d2:d6:a8:ad:56:60:ea:
f5:bb:ce:41:e6:fe:35:1c:b9:35:b5:26:cb:92:8e:
03:36:12:7a:9c:25:18:86:8e:79:1c:be:8a:66:cc:
f2:26:c7:d9:06:09:f7:60:15:7f:56:d3:5f:4d:ad:
64:0f:19:1d:b8:76:86:2a:85:fb:ef:e1:71:98:ce:
34:fe:c2:ea:29:84:0d:26:dd:36:9c:4a:8c:4b:82:
2f:ef:2a:15:1f:f0:03:c3:e3:24:59:97:66:26:8d:
8a:ae:8e:fd:55:36:8b:0d:e0:26:88:94:0a:53:7e:
af:86:79:6c:ed:13:65:6d:da:e6:26:ea:bc:d5:9e:
92:d6:31:50:dd:f5:c5:2f:67:f5:1a:7c:d2:a5:f7:
e3:08:a9:75:5d:3a:76:e4:cc:6b:fb:5e:38:04:b4:
99:bf:1e:85:f5:4e:93:25:a9:e4:7b:b5:b8:5c:73:
26:93:1f:06:f0:70:c6:e4:3f:fe:2f:39:11:87:7e:
af:e6:48:46:41:e9:f9:96:66:0d:ce:0f:08:ca:b6:
88:e6:0c:bc:d3:bf:dd:59:c1:ed:68:d8:82:54:53:
4d:ce:4a:19:ef:97:ba:14:0a:0f:06:e3:67:c8:cb:
5a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:15:61:36:30:17:9B:CC:6E:0B:01:B9:2D:8B:72:A3:2D:03:85:FF
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/1-RVhNjAXm8xuCwG5LYtyoy0Dhf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.209.0/24
Signature Algorithm: sha256WithRSAEncryption
60:8d:5e:26:41:4c:2b:9a:7c:03:72:83:1f:4b:bc:36:66:52:
34:39:4b:6d:32:e4:46:95:4c:0b:93:88:99:0d:0f:1f:09:35:
67:87:50:eb:74:ad:ab:c7:83:8d:1e:e2:c2:a2:62:b0:db:75:
40:8e:74:e5:dd:b9:a5:34:e7:e8:23:d7:b8:cd:d2:aa:c4:e5:
36:6b:c0:d3:fa:5f:5c:17:b5:89:6d:e3:29:40:3e:fe:f8:f9:
f4:51:41:8e:a3:ee:4b:78:25:e1:96:68:d4:6f:46:7d:0d:2c:
e5:26:13:56:dc:8c:e7:84:dc:a1:a8:33:10:29:79:76:1c:d8:
42:6d:7c:5c:ef:5e:fd:88:9b:9c:da:c9:3c:da:cb:91:5a:c3:
29:c8:b4:2c:56:46:1e:96:75:a2:a1:e1:7f:98:37:55:f8:5d:
39:06:cf:73:22:ed:65:ac:21:81:46:56:4b:5a:68:34:4a:c9:
eb:63:7c:64:36:83:f3:17:40:64:8a:f3:f3:79:bf:e3:80:08:
cf:64:02:2f:b0:94:66:c3:1b:43:cd:e3:c0:7d:04:62:5a:fb:
c3:a7:27:f2:09:44:7a:09:43:c0:4b:46:5d:9b:c7:58:d1:00:
e5:a0:35:a8:60:e0:51:ad:fe:dd:d7:be:a8:3c:6a:f7:3e:f1:
9c:a0:c4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:27 2026 by rpki-client