Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/1-WKHp0mCj7xhMc4PCiFMnWGM1Kc.roa
File: 1-WKHp0mCj7xhMc4PCiFMnWGM1Kc.roa (raw, json)
Hash identifier: hYfs+t8Vfvzy6Ypaa0VwSaLYab1gi5/bLZds7X8/iN0=
Subject key identifier: F9:62:87:A7:49:82:8F:BC:61:31:CE:0F:0A:21:4C:9D:61:8C:D4:A7
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039825516BC48109DCA5FF4B957505105
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/1-WKHp0mCj7xhMc4PCiFMnWGM1Kc.roa
Signing time: Tue 25 Aug 2026 15:20:37 +0000
ROA not before: Tue 25 Aug 2026 15:20:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213908
IP address blocks: 37.221.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:55:16:bc:48:10:9d:ca:5f:f4:b9:57:50:51:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f96287a749828fbc6131ce0f0a214c9d618cd4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c0:da:4f:2b:f8:9b:e6:12:5d:9e:90:61:2b:
9d:33:e5:0b:de:31:7d:1d:bb:5d:ed:80:6a:c6:19:
db:72:b8:8a:2d:0f:4f:87:94:d9:e2:3d:c8:75:f7:
41:8c:6c:14:1a:d6:73:6b:da:1e:13:e5:37:7a:41:
de:96:d3:71:22:46:b4:10:7c:78:d1:11:fb:df:0f:
a9:1c:25:15:8e:89:f1:96:8a:35:53:1c:92:90:18:
80:15:fa:0e:15:1a:4d:ba:83:13:b5:ad:2c:d9:3a:
9d:d9:04:db:f0:73:43:37:6a:c3:e4:4c:60:9c:3a:
5e:16:f6:e3:89:5c:7f:f0:37:f5:10:96:06:15:e5:
20:d7:41:55:32:21:71:be:5b:08:18:d4:87:37:6e:
99:d5:ba:27:6f:00:41:cc:97:a8:51:9c:bd:04:36:
44:90:3a:dc:e2:e2:6c:84:ab:85:93:4a:74:82:6a:
ab:26:2d:b5:8f:d2:dd:96:02:83:05:59:22:56:e0:
cc:df:ab:a6:5d:f9:18:e4:3f:bf:11:2c:57:56:03:
dd:68:2f:da:7f:7c:2d:24:58:ce:b8:04:d5:54:bd:
0b:3f:fb:95:e7:bb:8d:98:d7:1d:c6:76:50:90:f9:
39:fb:3a:29:3a:fc:eb:1e:57:50:54:bd:28:94:df:
8c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:62:87:A7:49:82:8F:BC:61:31:CE:0F:0A:21:4C:9D:61:8C:D4:A7
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/1-WKHp0mCj7xhMc4PCiFMnWGM1Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.78.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:03:cd:7b:57:36:c0:e4:78:e4:ff:e7:ee:02:69:e0:cd:37:
43:9f:73:dc:7f:3a:43:c8:83:55:37:7e:5e:90:34:a2:75:0a:
dc:21:e8:4b:6a:0c:ef:a9:90:80:a0:3d:0f:c9:01:c5:31:cb:
ad:b8:85:85:a3:de:72:bd:c7:28:a9:1e:3a:0b:12:11:3c:9b:
ca:b5:42:17:ba:da:15:59:ef:ab:75:87:46:8f:75:81:67:cd:
22:4d:97:e7:37:5d:ce:f9:0f:44:fa:d3:1b:e6:45:ba:73:e0:
c5:3a:52:f9:c9:74:82:bc:04:5d:ae:19:ce:f1:99:6e:b8:b4:
c5:87:26:5f:df:ef:7c:ab:b6:10:b8:76:69:dd:dd:50:66:fe:
35:81:76:24:0f:8f:22:8d:f0:42:fc:b2:58:9a:b2:d9:b2:57:
92:69:00:64:93:2a:af:07:87:43:2e:2d:51:18:ef:82:43:0c:
0e:aa:f1:93:66:e0:70:c7:de:79:77:e9:2d:7d:a2:66:b4:63:
1b:a9:9a:bb:15:02:55:71:55:00:bf:39:c0:de:69:c9:63:20:
1b:b2:99:fe:ea:1f:ec:06:af:54:bf:1f:4b:ff:83:e4:87:84:
76:04:be:44:94:f1:40:81:da:c7:89:44:c9:34:40:c6:c5:6b:
85:39:b3:ff
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaA5glUWvEgQncpf9LlXUFEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI1MTUyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTYyODdhNzQ5ODI4ZmJjNjEzMWNlMGYwYTIxNGM5ZDYxOGNkNGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8DaTyv4m+YSXZ6QYSudM+UL3jF9
Hbtd7YBqxhnbcriKLQ9Ph5TZ4j3IdfdBjGwUGtZza9oeE+U3ekHeltNxIka0EHx4
0RH73w+pHCUVjonxloo1UxySkBiAFfoOFRpNuoMTta0s2Tqd2QTb8HNDN2rD5Exg
nDpeFvbjiVx/8Df1EJYGFeUg10FVMiFxvlsIGNSHN26Z1bonbwBBzJeoUZy9BDZE
kDrc4uJshKuFk0p0gmqrJi21j9LdlgKDBVkiVuDM36umXfkY5D+/ESxXVgPdaC/a
f3wtJFjOuATVVL0LP/uV57uNmNcdxnZQkPk5+zopOvzrHldQVL0olN+MtwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPlih6dJgo+8YTHODwohTJ1hjNSnMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvMS1XS0hwMG1Dajd4aE1jNFBDaUZNbldHTTFLYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMWMvM2VhOTIyLTM1MDQtNDYxZS05N2QzLTUzOTEzMTUxNGFk
ZC8xL0M4bVdXQi0xWHQzN2lyLTRkbUtYS19yX183WS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACXdTjAN
BgkqhkiG9w0BAQsFAAOCAQEAPwPNe1c2wOR45P/n7gJp4M03Q59z3H86Q8iDVTd+
XpA0onUK3CHoS2oM76mQgKA9D8kBxTHLrbiFhaPecr3HKKkeOgsSETybyrVCF7ra
FVnvq3WHRo91gWfNIk2X5zddzvkPRPrTG+ZFunPgxTpS+cl0grwEXa4ZzvGZbri0
xYcmX9/vfKu2ELh2ad3dUGb+NYF2JA+PIo3wQvyyWJqy2bJXkmkAZJMqrweHQy4t
URjvgkMMDqrxk2bgcMfeeXfpLX2iZrRjG6mauxUCVXFVAL85wN5pyWMgG7KZ/uof
7AavVL8fS/+D5IeEdgS+RJTxQIHax4lEyTRAxsVrhTmz/w==
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:49 2026 by rpki-client