Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/8VJEwov-PX2GsDkVn1C1_LarptQ.roa
File: 8VJEwov-PX2GsDkVn1C1_LarptQ.roa (raw, json)
Hash identifier: lLKH6y39qTF+Q8nvlF4faNTp4ZJU0mq2atYlWdVVEdw=
Subject key identifier: F1:52:44:C2:8B:FE:3D:7D:86:B0:39:15:9F:50:B5:FC:B6:AB:A6:D4
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039823951C4C64C852E55624E76680203
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/8VJEwov-PX2GsDkVn1C1_LarptQ.roa
Signing time: Tue 25 Aug 2026 15:20:30 +0000
ROA not before: Tue 25 Aug 2026 15:20:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47377
IP address blocks: 83.171.247.0/24 maxlen: 24
188.119.70.0/24 maxlen: 24
193.32.186.0/24 maxlen: 24
193.32.187.0/24 maxlen: 24
193.32.206.0/24 maxlen: 24
193.187.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:39:51:c4:c6:4c:85:2e:55:62:4e:76:68:02:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f15244c28bfe3d7d86b039159f50b5fcb6aba6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:20:13:8a:d9:01:35:20:3e:ea:0f:15:3a:
2e:21:8b:6d:f6:21:72:31:b3:84:bc:08:ef:bd:bb:
41:08:f4:53:e8:e6:94:dc:3c:70:9c:d2:2d:2e:0f:
41:57:15:7c:5f:ba:33:c1:de:a8:60:91:6d:bc:2d:
1e:80:5a:b0:a8:a6:28:54:6b:45:59:19:28:90:31:
4f:71:d3:dc:c6:b0:21:26:c1:ff:90:d0:43:9c:24:
00:60:fd:a7:8f:93:4b:ae:aa:42:18:4c:d1:bf:57:
1f:59:91:3b:a3:9f:82:03:fd:a2:6f:05:0a:87:94:
a2:3d:03:da:a7:ee:e3:12:e7:54:16:aa:e9:d0:eb:
98:c0:cd:9e:55:3c:79:5c:a8:60:9c:e8:34:4b:37:
32:37:64:ba:c2:a2:9b:9c:b8:01:f8:89:f1:34:cb:
94:a7:b6:f1:85:eb:49:9a:6d:87:16:68:32:b2:ff:
e3:21:86:f8:e0:93:fa:1b:8c:e1:ce:1c:40:15:b9:
cb:2a:bc:37:33:9b:2a:a3:66:f8:6d:75:56:cf:4c:
ef:8d:c5:40:b7:ac:5f:06:a0:cc:98:c3:c0:f3:14:
69:e6:0f:5a:e6:3c:59:f4:24:2f:6f:ca:44:53:89:
1f:e9:f3:49:4b:ef:5d:b5:00:d6:fd:5a:e9:9e:17:
0d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:52:44:C2:8B:FE:3D:7D:86:B0:39:15:9F:50:B5:FC:B6:AB:A6:D4
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/8VJEwov-PX2GsDkVn1C1_LarptQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.247.0/24
188.119.70.0/24
193.32.186.0/23
193.32.206.0/24
193.187.135.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:9f:89:3d:fd:5a:f8:93:26:54:c0:ce:8e:1c:72:46:af:7f:
9d:62:1d:9b:d9:43:c5:eb:b2:d2:5d:38:81:e4:db:5a:bb:98:
59:bc:99:5e:a7:a0:48:94:f3:0a:a0:fd:90:c6:91:fb:79:7a:
60:45:7b:a7:db:06:10:90:df:72:29:06:ac:f5:39:2a:95:09:
75:53:7f:92:fb:c5:ae:eb:51:66:19:51:4f:82:f8:3e:f8:72:
96:7e:42:37:30:c4:08:89:69:76:31:7d:a5:1b:ea:65:21:e2:
a2:27:05:26:42:b6:f7:2c:b1:eb:5a:82:4f:18:16:1e:5b:49:
31:4e:1b:ad:b4:6b:83:bc:d0:82:9e:b0:6e:f6:04:6e:2b:e9:
e1:48:4c:63:d9:df:49:8c:1e:e2:4d:7f:c7:f0:12:6a:84:5d:
ef:cc:2a:f0:c7:fb:4b:7d:3b:f7:84:59:50:66:97:eb:4b:85:
c5:0f:e2:bc:f2:90:2c:1c:05:8c:fd:05:26:f4:f0:b6:fc:29:
f2:bc:87:53:cb:93:ea:72:46:b6:e3:11:48:df:9a:2c:8d:1e:
18:46:07:1b:57:d1:63:03:b9:33:d0:6d:c8:9a:11:89:cd:ba:
88:6c:e4:cd:8f:28:bd:90:3a:e0:19:bd:2e:54:af:16:44:b9:
44:28:0e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:46 2026 by rpki-client