Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/4wjtam0wAWUiMBauViBdOs7UJaw.roa
File: 4wjtam0wAWUiMBauViBdOs7UJaw.roa (raw, json)
Hash identifier: 4pkQ8JgSMvTLGZv41opkD6pr8kfUosbHXntiPZmR7qg=
Subject key identifier: E3:08:ED:6A:6D:30:01:65:22:30:16:AE:56:20:5D:3A:CE:D4:25:AC
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A03982491A4CCBF5970C4CE79A46AF8EB8
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/4wjtam0wAWUiMBauViBdOs7UJaw.roa
Signing time: Tue 25 Aug 2026 15:20:34 +0000
ROA not before: Tue 25 Aug 2026 15:20:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202736
IP address blocks: 176.53.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:49:1a:4c:cb:f5:97:0c:4c:e7:9a:46:af:8e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e308ed6a6d300165223016ae56205d3aced425ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:91:ca:40:f4:85:06:27:52:d5:77:02:e5:13:
00:65:91:c8:39:3c:49:49:a2:28:2c:61:6b:d3:35:
87:d7:df:d7:de:76:3b:dd:c4:f9:01:31:04:74:3d:
b9:24:2a:09:50:8a:a4:d9:bd:44:dc:64:b0:30:e9:
c0:c5:52:cb:d5:77:cb:53:02:ab:47:70:8a:f7:05:
74:9c:d5:c3:b0:9e:8f:d2:df:c0:77:97:ad:c2:89:
00:f2:59:6c:7f:32:3f:9f:7f:e5:4e:90:7b:1a:e3:
57:88:aa:11:d1:91:d1:90:67:96:df:dd:8d:2f:a4:
88:82:88:32:bc:55:a3:ef:85:ae:57:95:96:f2:7d:
f7:d9:ae:38:59:33:f0:00:f4:38:1b:ef:ed:f3:cf:
fa:f3:26:fc:bc:5a:1c:7d:f2:93:22:bd:f7:1a:6f:
d3:1d:8b:20:27:dd:de:83:d7:ce:8f:de:71:73:e2:
7b:32:94:53:ad:1e:3e:18:65:c2:7f:17:67:56:e1:
c1:02:1b:53:bd:54:ca:fd:39:e0:fa:bf:7c:96:f8:
f0:2f:64:5d:de:86:4b:81:b6:4c:26:96:6b:5f:57:
bb:f2:f9:33:d5:d4:65:0f:53:26:e3:dc:06:50:d7:
29:c2:0b:0a:b1:96:af:65:d5:91:84:3d:b8:e3:11:
4e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:08:ED:6A:6D:30:01:65:22:30:16:AE:56:20:5D:3A:CE:D4:25:AC
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/4wjtam0wAWUiMBauViBdOs7UJaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.169.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:0a:65:af:42:00:b7:62:20:41:4d:d2:32:b6:91:f4:31:8b:
0f:cf:0a:2b:53:8a:4a:70:84:9c:b0:d9:56:b1:c5:e4:26:02:
98:31:27:6d:14:0c:7c:15:7b:df:dd:e0:c7:00:2f:92:56:1d:
57:c1:cd:fc:8c:9f:33:13:38:27:33:72:93:83:2b:18:ed:6b:
5c:fd:bd:8c:ae:8c:cf:a3:a9:c8:d3:4c:4b:35:14:47:c3:2f:
8c:2a:91:46:f6:01:d5:4d:cc:09:9f:70:51:0e:5e:de:60:13:
d3:59:fa:29:79:68:5b:4f:9e:2d:e7:49:1b:9f:6a:fe:98:aa:
cc:4d:e2:58:db:51:53:a1:8d:91:9b:64:65:94:bd:e4:d0:ab:
c0:83:f4:09:2f:f4:1b:3a:85:5a:e5:ab:ac:09:7b:42:4d:86:
12:69:4d:d8:20:e1:f6:15:27:cf:b4:5f:31:2b:6d:b3:9c:61:
7d:87:12:1d:d1:2b:97:9e:b7:bd:b4:7a:af:ec:54:1f:68:da:
76:de:93:01:4b:24:10:01:71:44:3d:18:b4:bf:09:23:69:64:
8e:a2:bd:77:83:67:63:c3:ce:27:e5:70:aa:35:2a:04:f6:25:
7c:b7:c8:f3:4a:52:b5:73:8b:04:1e:cf:f7:ca:c1:17:19:f7:
69:26:76:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:10:58 2026 by rpki-client