Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Axuv6Z2abzLFoW7ZRMh3qnRoBdY.roa
File: Axuv6Z2abzLFoW7ZRMh3qnRoBdY.roa (raw, json)
Hash identifier: R6p2dijxgEiefBfDullKKWGb6hIVTONp9IbKWsCcKYE=
Subject key identifier: 03:1B:AF:E9:9D:9A:6F:32:C5:A1:6E:D9:44:C8:77:AA:74:68:05:D6
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398249C20F12A8CE0E9B3B3F1D08E4B3
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Axuv6Z2abzLFoW7ZRMh3qnRoBdY.roa
Signing time: Tue 25 Aug 2026 15:20:34 +0000
ROA not before: Tue 25 Aug 2026 15:20:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203545
IP address blocks: 141.98.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:49:c2:0f:12:a8:ce:0e:9b:3b:3f:1d:08:e4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=031bafe99d9a6f32c5a16ed944c877aa746805d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:b2:01:50:a4:28:cb:29:36:48:88:ea:00:
6e:2e:6e:e6:86:c5:f7:df:cb:d0:78:e9:cd:e2:44:
50:6c:00:52:c1:dd:1b:22:01:95:5a:42:b7:ff:d6:
eb:94:4d:85:20:3d:14:81:0e:9a:f4:6e:f3:19:38:
53:db:96:fd:fa:08:08:bf:ee:ed:12:7c:fd:88:5e:
12:2c:6e:2b:2a:81:6f:a2:81:ed:c8:a5:6d:3c:e5:
3a:76:a2:d4:0b:1a:63:e3:91:0c:50:d6:08:36:a5:
c4:90:f9:0e:5d:db:67:9a:35:40:d3:3a:c7:c4:36:
cc:89:c4:a5:16:e0:a8:5a:67:51:73:00:e4:83:fd:
ce:0d:32:13:c4:82:00:7a:9f:bc:71:29:3d:3b:0b:
f0:ae:67:38:df:2b:b0:d6:7e:af:4b:2e:a4:49:ec:
33:ae:d4:c9:a2:53:b3:75:77:74:43:26:01:3e:7c:
8c:22:82:a7:6a:18:51:b8:cd:a1:f4:d8:58:5d:02:
de:8d:3a:b4:9a:ab:16:c3:da:2e:cc:a7:da:03:16:
50:03:37:76:e0:92:e0:1f:57:05:3c:a2:a3:24:78:
ae:d8:05:b0:ec:a8:95:44:d6:3e:50:e5:94:63:cd:
a8:b0:ee:74:9e:8d:16:4f:06:38:fc:b7:53:10:c2:
27:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1B:AF:E9:9D:9A:6F:32:C5:A1:6E:D9:44:C8:77:AA:74:68:05:D6
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Axuv6Z2abzLFoW7ZRMh3qnRoBdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.50.0/24
Signature Algorithm: sha256WithRSAEncryption
37:02:5b:18:f5:f8:38:ae:d2:bc:c7:25:46:1b:47:d6:e8:7d:
c8:7e:c4:cc:07:93:47:d7:8a:d6:af:6e:27:56:7d:a0:ab:4b:
97:f2:dc:1d:6c:8e:ba:07:93:63:ac:5c:15:30:46:46:74:7f:
4f:73:6e:da:50:51:8d:85:c7:12:0a:e3:11:36:5a:cf:3b:d0:
6c:5e:97:ac:ff:62:62:74:ed:df:1e:18:60:6b:5e:d6:a5:a0:
19:e8:68:9f:83:96:61:90:e9:a6:ac:3d:ac:c1:a8:f9:60:f4:
d1:21:f6:50:d0:72:c6:b2:1a:59:b4:c2:24:32:b1:97:02:ee:
c4:0e:15:75:34:29:59:3a:0c:f7:91:99:2a:b1:a7:60:e8:81:
d1:50:8c:81:dd:c8:66:de:73:c9:05:55:19:e5:38:3e:75:56:
cc:5d:c6:8e:e3:7b:4b:65:3c:50:74:b7:57:25:9a:28:cb:d1:
85:f1:5e:eb:d1:ef:35:3a:e8:d7:cc:3d:53:e2:43:7e:5a:1d:
33:dc:f8:c0:a8:46:3d:e4:bb:b4:96:e4:fb:70:00:48:5d:db:
fe:f4:af:fb:ba:a8:63:16:36:1c:d1:98:72:08:47:9b:83:60:
76:1e:c3:8f:f4:d4:3b:f7:2c:c8:d5:f1:47:4b:d1:a0:f5:94:
93:d0:2d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:12 2026 by rpki-client