Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/4SmrWqlonzsp1krWxk1e-MxB-NA.roa
File: 4SmrWqlonzsp1krWxk1e-MxB-NA.roa (raw, json)
Hash identifier: KeC4hTj3D1RQU1KczxSXlECRVDsveXSCgETXiqRSmIM=
Subject key identifier: E1:29:AB:5A:A9:68:9F:3B:29:D6:4A:D6:C6:4D:5E:F8:CC:41:F8:D0
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A03982501FD6429AE422F72BD777CEFCB2
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/4SmrWqlonzsp1krWxk1e-MxB-NA.roa
Signing time: Tue 25 Aug 2026 15:20:36 +0000
ROA not before: Tue 25 Aug 2026 15:20:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210574
IP address blocks: 141.98.112.0/24 maxlen: 24
141.98.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:50:1f:d6:42:9a:e4:22:f7:2b:d7:77:ce:fc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e129ab5aa9689f3b29d64ad6c64d5ef8cc41f8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2f:8c:4e:60:d1:57:af:29:64:73:59:d0:4f:
5a:5d:19:d6:27:c9:25:f1:38:7c:9f:d2:35:c3:5a:
e5:05:e1:e5:0d:69:cf:22:43:f5:19:81:c1:16:21:
a5:1b:97:df:77:c4:d3:d5:95:cf:31:84:ca:67:59:
70:22:27:e7:15:03:19:35:fd:5d:3d:0c:cc:9e:90:
f3:ce:65:73:0e:8f:4e:72:b6:20:d3:be:d8:56:51:
1c:a0:11:de:02:ab:a1:a0:e9:6d:9e:55:4c:8b:c4:
04:89:3e:fc:79:0d:b1:c5:cb:b5:95:8e:7b:d9:fe:
cd:76:e4:fc:93:4f:e6:da:e4:dd:38:57:5d:2c:94:
da:0c:61:21:3a:7f:e2:e2:22:60:ee:87:e8:12:d5:
8a:d6:dd:be:ad:fb:56:b8:a0:3f:7e:fd:fd:f8:fe:
6f:30:1b:5f:d6:bd:b7:a0:54:09:c7:7f:11:7d:a2:
95:79:ed:6c:f7:92:d6:5b:99:09:69:51:84:89:cc:
03:8b:67:27:08:99:1e:e2:2c:d2:6c:c8:60:f0:96:
46:7a:30:85:03:9c:20:04:6c:c8:9b:56:e2:5a:57:
bc:1d:4c:48:02:29:76:eb:9a:d8:c7:8c:b1:34:ed:
c8:56:80:76:46:a0:6e:36:51:a7:f4:bc:6d:f7:8f:
02:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:29:AB:5A:A9:68:9F:3B:29:D6:4A:D6:C6:4D:5E:F8:CC:41:F8:D0
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/4SmrWqlonzsp1krWxk1e-MxB-NA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.112.0/24
141.98.115.0/24
Signature Algorithm: sha256WithRSAEncryption
02:cd:f7:67:c7:48:50:a6:2b:28:40:86:0e:3e:b2:ed:d7:3f:
a1:9e:07:f3:ce:ac:20:66:25:72:73:4d:81:9f:70:b4:f4:22:
41:f1:84:d4:57:ab:a5:07:86:e9:75:c2:34:31:14:8e:9a:5b:
4c:56:49:6d:1b:9c:a2:e2:4e:2d:5b:84:11:59:3b:a2:ef:9f:
17:f8:ef:e4:9d:64:da:75:1f:bf:e7:c5:b2:ec:fb:f7:b0:85:
f1:57:f4:34:ec:66:08:aa:8a:f3:51:98:6a:2c:a8:92:21:fa:
b1:e9:5e:2f:b5:5d:5a:91:96:b7:c0:29:ce:20:cc:63:e1:4b:
64:dd:fb:94:4d:10:69:88:dc:1e:78:84:08:d9:4b:31:52:8e:
e1:22:12:19:75:c6:ab:96:2b:36:d1:a4:bf:2c:b1:1b:30:44:
5f:ab:16:42:de:cd:3d:26:90:aa:38:d3:41:68:a8:31:8f:98:
a1:74:55:fc:54:63:7f:5b:bb:7b:36:bb:bb:a5:ec:4a:cb:4b:
f1:e5:b4:d1:f4:09:8d:ab:3d:ea:da:1a:26:11:ce:83:b2:a8:
31:44:8d:f0:0b:46:b0:2c:be:15:a6:c7:42:50:7d:bf:dd:d3:
5f:fe:98:54:0c:1c:59:a5:a5:a3:53:00:1b:96:75:ab:1a:d9:
d1:b8:f9:13
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaA5glAf1kKa5CL3K9d3zvyyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI1MTUyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTI5YWI1YWE5Njg5ZjNiMjlkNjRhZDZjNjRkNWVmOGNjNDFmOGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS+MTmDRV68pZHNZ0E9aXRnWJ8kl
8Th8n9I1w1rlBeHlDWnPIkP1GYHBFiGlG5ffd8TT1ZXPMYTKZ1lwIifnFQMZNf1d
PQzMnpDzzmVzDo9OcrYg077YVlEcoBHeAquhoOltnlVMi8QEiT78eQ2xxcu1lY57
2f7NduT8k0/m2uTdOFddLJTaDGEhOn/i4iJg7ofoEtWK1t2+rftWuKA/fv39+P5v
MBtf1r23oFQJx38RfaKVee1s95LWW5kJaVGEicwDi2cnCJke4izSbMhg8JZGejCF
A5wgBGzIm1biWle8HUxIAil265rYx4yxNO3IVoB2RqBuNlGn9Lxt948CwQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOEpq1qpaJ87KdZK1sZNXvjMQfjQMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvNFNtcldxbG9uenNwMWtyV3hrMWUtTXhCLU5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjWJwAwQA
jWJzMA0GCSqGSIb3DQEBCwUAA4IBAQACzfdnx0hQpisoQIYOPrLt1z+hngfzzqwg
ZiVyc02Bn3C09CJB8YTUV6ulB4bpdcI0MRSOmltMVkltG5yi4k4tW4QRWTui758X
+O/knWTadR+/58Wy7Pv3sIXxV/Q07GYIqorzUZhqLKiSIfqx6V4vtV1akZa3wCnO
IMxj4Utk3fuUTRBpiNweeIQI2UsxUo7hIhIZdcarlis20aS/LLEbMERfqxZC3s09
JpCqONNBaKgxj5ihdFX8VGN/W7t7Nru7pexKy0vx5bTR9AmNqz3q2homEc6Dsqgx
RI3wC0awLL4VpsdCUH2/3dNf/phUDBxZpaWjUwAblnWrGtnRuPkT
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:56 2026 by rpki-client