Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/A8hOY6_kBMIzyf0Ghk_q8giGZf4.roa
File: A8hOY6_kBMIzyf0Ghk_q8giGZf4.roa (raw, json)
Hash identifier: hk2F+YW+S1TcETZjfj/EthnH9Ln90OJutbJj/gImao8=
Subject key identifier: 03:C8:4E:63:AF:E4:04:C2:33:C9:FD:06:86:4F:EA:F2:08:86:65:FE
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039824D6960DFCB66F766016C841E1162
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/A8hOY6_kBMIzyf0Ghk_q8giGZf4.roa
Signing time: Tue 25 Aug 2026 15:20:35 +0000
ROA not before: Tue 25 Aug 2026 15:20:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206839
IP address blocks: 176.53.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:4d:69:60:df:cb:66:f7:66:01:6c:84:1e:11:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03c84e63afe404c233c9fd06864feaf2088665fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:6c:b6:06:bb:66:53:ba:03:3b:32:8e:20:
1a:35:fa:cf:04:4c:5b:ab:ec:10:e8:e2:95:c2:e0:
17:97:ca:f4:81:b7:7b:80:ab:c6:23:58:13:49:df:
23:0d:33:ab:5f:c0:cb:12:84:61:b9:b4:3b:84:5b:
6b:ac:0d:6c:2c:cc:fd:e3:d6:7b:d8:ac:a6:00:62:
95:d4:6e:95:aa:69:34:c0:90:b9:9c:b8:70:02:c1:
38:61:37:58:5b:8b:9a:5c:ad:9f:a8:26:2a:24:cb:
09:f9:c4:36:65:f1:0a:22:dd:53:74:b5:aa:8a:14:
78:1a:f9:15:20:e4:00:8d:c9:bb:b9:cf:0c:eb:c8:
27:50:cd:54:7b:20:f5:4e:d2:1e:4f:5c:93:ba:07:
cd:86:0d:a4:5f:82:b0:23:52:ad:43:14:3d:25:1f:
18:12:22:ef:3e:0c:6e:1b:e0:5c:7d:89:4f:22:08:
9f:7c:3a:5a:a1:9b:ca:69:28:9f:1e:40:2f:5b:6c:
01:de:b0:d2:16:a2:8a:ba:6c:b7:90:9f:61:76:56:
7a:da:b7:14:82:19:4b:f9:38:8c:02:0e:4e:db:d4:
30:b5:e3:7d:51:40:95:8a:a8:7f:9f:4a:5d:51:7f:
e0:4b:86:0c:f5:f6:f8:30:19:f5:27:1d:e0:a4:ec:
7f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C8:4E:63:AF:E4:04:C2:33:C9:FD:06:86:4F:EA:F2:08:86:65:FE
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/A8hOY6_kBMIzyf0Ghk_q8giGZf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.170.0/24
Signature Algorithm: sha256WithRSAEncryption
97:0d:c2:8d:92:06:10:e3:19:13:f7:d0:29:89:62:3a:bd:fe:
66:94:9c:2d:3d:05:a6:4e:83:69:55:1e:29:32:34:ed:84:ea:
d7:6a:28:c1:c4:84:fb:75:75:6c:90:4b:a3:5d:2e:ed:97:d5:
0f:09:42:ec:a3:1b:18:93:ab:16:94:d9:9e:87:1c:5a:6c:1e:
6a:73:3e:49:2f:f6:12:a9:e4:6f:13:f3:77:22:e4:ce:d7:8b:
bf:5e:c9:01:ef:8b:54:38:4e:06:01:96:21:2d:fd:aa:f3:d6:
6c:c7:93:50:d7:44:b9:19:50:12:77:c0:23:c7:9d:e9:0f:51:
eb:39:65:31:3b:b7:78:8d:80:e0:a2:ae:a4:ff:91:f8:6c:e8:
6a:fa:1f:4a:70:c9:45:dc:6a:55:51:a6:64:18:3a:d1:99:18:
33:f2:b0:8c:27:37:d5:ca:94:09:52:13:44:46:f9:9b:89:81:
62:cb:24:34:94:fa:8e:8c:1e:6c:8b:1c:b2:a5:a4:65:8d:90:
f7:70:66:a5:9e:57:3b:c1:3c:d2:c2:ea:e1:aa:cf:b5:96:db:
a3:8d:fa:74:8c:f3:8c:51:a7:55:49:fe:08:a9:06:e8:6d:7d:
66:4f:18:b6:27:7b:30:de:e2:96:fc:a9:99:4f:3e:56:90:a0:
82:d4:06:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:52 2026 by rpki-client