Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/8szMMDYnAFWCiTyQXkN6OHe-tg4.roa
File: 8szMMDYnAFWCiTyQXkN6OHe-tg4.roa (raw, json)
Hash identifier: HaIVl9UB3W70Y8jhagTWRywiUdc251aqmzObCzDwEsI=
Subject key identifier: F2:CC:CC:30:36:27:00:55:82:89:3C:90:5E:43:7A:38:77:BE:B6:0E
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398251D79DBA4206CCE5C043B6E5AC50
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/8szMMDYnAFWCiTyQXkN6OHe-tg4.roa
Signing time: Tue 25 Aug 2026 15:20:36 +0000
ROA not before: Tue 25 Aug 2026 15:20:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211567
IP address blocks: 31.40.198.0/24 maxlen: 24
141.98.48.0/24 maxlen: 24
176.96.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:51:d7:9d:ba:42:06:cc:e5:c0:43:b6:e5:ac:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2cccc303627005582893c905e437a3877beb60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:dd:06:10:5e:e6:1d:64:ea:ce:41:7a:3a:
54:32:cc:96:17:2f:47:94:0e:37:66:58:b6:21:1c:
7c:84:db:ac:1a:4f:59:4f:65:62:4e:f4:aa:62:3b:
61:fa:81:9d:58:f5:24:05:83:46:38:77:a9:3a:a1:
3a:39:f0:31:54:1a:41:67:2f:57:b2:a7:25:51:c3:
dc:f4:33:00:03:12:45:fe:cc:7d:28:42:f7:fa:b8:
cb:4d:52:e0:fd:57:41:75:6f:d4:d7:e6:e4:f2:17:
18:c8:a8:f2:fe:2c:7e:32:d7:17:a9:f2:2d:4d:7a:
42:fc:99:89:e3:6d:ab:07:04:da:54:ee:e4:e6:f5:
07:77:77:3f:fc:f6:ac:61:37:5a:52:56:0c:5a:5b:
9e:39:7d:81:e5:18:a4:a1:81:08:fd:8c:ed:87:d5:
c7:03:63:92:3d:4b:2e:2f:1d:49:8e:8e:81:b1:da:
a3:4f:7d:aa:ea:ee:fb:b8:f2:3d:53:91:05:45:66:
af:9c:a1:a4:44:13:12:b9:24:2c:94:29:db:a3:ba:
e9:b6:17:97:11:77:0f:76:8b:c7:de:2b:ff:dd:28:
10:2f:db:3b:10:34:0a:c8:5f:bc:27:cb:0d:e1:98:
b2:9f:84:40:3f:6a:aa:cf:b8:47:11:be:8d:46:d7:
35:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CC:CC:30:36:27:00:55:82:89:3C:90:5E:43:7A:38:77:BE:B6:0E
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/8szMMDYnAFWCiTyQXkN6OHe-tg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.198.0/24
141.98.48.0/24
176.96.129.0/24
Signature Algorithm: sha256WithRSAEncryption
47:b5:a7:65:1c:86:5a:49:e1:21:b6:d9:fb:49:ca:44:22:c2:
1f:fd:8d:aa:21:89:bc:f8:eb:4a:09:75:f7:a7:eb:bb:4a:90:
26:07:58:9d:91:19:2e:05:3b:4c:11:66:98:3f:33:45:53:5d:
e9:ae:4e:7c:1a:3c:f1:64:6e:9d:f0:29:68:4e:fb:0a:0b:f8:
5d:eb:cb:cd:df:9c:69:02:91:ef:0d:be:40:c0:bc:95:36:69:
56:42:b7:a7:9a:12:51:ad:e7:4f:80:02:e0:06:16:d6:6d:5f:
1b:6c:27:2f:cf:75:2d:f1:07:08:9c:c3:9f:e0:e6:14:d6:5a:
a5:02:ef:30:75:45:2b:35:be:6b:80:9b:7f:8f:5f:11:5b:de:
f5:02:96:07:1d:2c:20:1b:6b:19:b3:f1:02:75:ed:03:5f:38:
3c:f6:1e:2e:7a:9a:78:1f:a5:57:40:eb:84:8e:99:c3:44:6e:
65:f1:96:a6:d3:40:81:4d:69:ad:2c:78:9c:26:43:f0:a2:7c:
57:dc:66:20:5b:4e:ac:25:01:d0:77:d6:5e:a9:30:72:25:ae:
3b:1d:51:11:46:0a:37:d8:5f:35:65:5c:b1:0a:91:0a:c8:bd:
c4:c1:83:f3:67:92:29:ca:7f:66:d1:26:4a:07:63:b4:e4:ad:
f9:7e:70:5a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaA5glHXnbpCBszlwEO25axQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI1MTUyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmNjY2MzMDM2MjcwMDU1ODI4OTNjOTA1ZTQzN2EzODc3YmViNjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudndBhBe5h1k6s5BejpUMsyWFy9H
lA43Zli2IRx8hNusGk9ZT2ViTvSqYjth+oGdWPUkBYNGOHepOqE6OfAxVBpBZy9X
sqclUcPc9DMAAxJF/sx9KEL3+rjLTVLg/VdBdW/U1+bk8hcYyKjy/ix+MtcXqfIt
TXpC/JmJ422rBwTaVO7k5vUHd3c//PasYTdaUlYMWlueOX2B5RikoYEI/Yzth9XH
A2OSPUsuLx1Jjo6BsdqjT32q6u77uPI9U5EFRWavnKGkRBMSuSQslCnbo7rptheX
EXcPdovH3iv/3SgQL9s7EDQKyF+8J8sN4Ziyn4RAP2qqz7hHEb6NRtc1mQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPLMzDA2JwBVgok8kF5Dejh3vrYOMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvOHN6TU1EWW5BRldDaVR5UVhrTjZPSGUtdGc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHyjGAwQA
jWIwAwQAsGCBMA0GCSqGSIb3DQEBCwUAA4IBAQBHtadlHIZaSeEhttn7ScpEIsIf
/Y2qIYm8+OtKCXX3p+u7SpAmB1idkRkuBTtMEWaYPzNFU13prk58GjzxZG6d8Clo
TvsKC/hd68vN35xpApHvDb5AwLyVNmlWQrenmhJRredPgALgBhbWbV8bbCcvz3Ut
8QcInMOf4OYU1lqlAu8wdUUrNb5rgJt/j18RW971ApYHHSwgG2sZs/ECde0DXzg8
9h4uepp4H6VXQOuEjpnDRG5l8Zam00CBTWmtLHicJkPwonxX3GYgW06sJQHQd9Ze
qTByJa47HVERRgo32F81ZVyxCpEKyL3EwYPzZ5Ipyn9m0SZKB2O05K35fnBa
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:13 2026 by rpki-client