Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C3sMDLBZZBSWW0Gy-yPtfuZX_rY.roa
File: C3sMDLBZZBSWW0Gy-yPtfuZX_rY.roa (raw, json)
Hash identifier: 0xcGHKaCBHKLygAOEuRpW00EIzyZRLdS9b+NeqIdVvE=
Subject key identifier: 0B:7B:0C:0C:B0:59:64:14:96:5B:41:B2:FB:23:ED:7E:E6:57:FE:B6
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039825601A68100B6BC5875AA7CF54D53
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C3sMDLBZZBSWW0Gy-yPtfuZX_rY.roa
Signing time: Tue 25 Aug 2026 15:20:38 +0000
ROA not before: Tue 25 Aug 2026 15:20:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214026
IP address blocks: 84.54.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:56:01:a6:81:00:b6:bc:58:75:aa:7c:f5:4d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b7b0c0cb0596414965b41b2fb23ed7ee657feb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:77:ab:0e:3d:66:67:86:e3:2e:3c:26:d2:63:
c0:42:67:36:99:f6:25:1f:f7:49:b3:f5:ce:11:da:
50:21:22:d3:c9:71:2c:ca:14:09:db:05:85:60:22:
3c:22:7e:d5:2f:41:65:64:61:6a:89:44:66:b5:9c:
40:62:05:e8:2f:f7:fd:61:97:22:31:58:4b:f3:58:
a3:65:35:c4:50:4a:f9:90:ec:86:05:bf:00:e3:2f:
53:59:41:d1:25:b9:c3:22:b0:3c:6d:9f:42:9d:98:
9e:fe:b8:31:ba:9c:41:5e:a0:e2:5c:9f:9d:65:be:
fe:b2:31:d9:f9:a3:fc:a0:69:df:8e:28:ac:aa:16:
28:27:18:a7:0a:23:b9:7a:79:3e:3b:4e:d7:26:6a:
2c:87:8f:d6:3d:dd:e9:af:fa:1a:c1:91:aa:0e:61:
fd:15:3a:c2:11:06:24:55:08:53:85:b2:6f:c5:9a:
e5:01:9d:dd:ca:dd:6d:29:c0:1b:bf:50:e5:ba:0b:
52:5f:86:29:a1:ac:b8:ee:1d:3e:2f:0e:d4:ed:cb:
4e:af:a7:61:bd:a4:b4:4e:11:59:45:11:f1:b9:d2:
79:31:52:ad:95:e4:ce:f7:7f:2b:dc:3e:7f:30:2c:
74:c9:3d:0b:ba:aa:93:d7:d5:d2:bb:c6:86:31:85:
6f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7B:0C:0C:B0:59:64:14:96:5B:41:B2:FB:23:ED:7E:E6:57:FE:B6
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C3sMDLBZZBSWW0Gy-yPtfuZX_rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.0.0/23
Signature Algorithm: sha256WithRSAEncryption
36:af:53:cd:ff:f8:01:fa:e0:5b:66:1c:8d:39:7d:2b:f5:91:
90:a9:67:69:9a:52:9c:41:d5:6b:33:d4:dc:a9:a4:c6:03:32:
1f:bc:47:c0:15:4b:cd:84:ab:02:fb:c4:7d:b8:fb:27:d0:6c:
92:b2:1f:63:7d:e3:07:44:db:0d:72:88:44:7d:79:4f:b2:e9:
6b:29:3c:b4:87:a9:d5:da:4f:84:69:91:71:e2:da:29:f9:7a:
3b:1a:14:ba:00:99:0d:e7:ea:64:86:54:29:c9:2b:78:88:67:
bc:78:2d:02:d0:ba:a1:ff:0d:57:b6:d2:ca:6e:de:9d:4d:5f:
b5:a5:2e:5a:9f:5d:9a:2d:91:01:d6:25:79:de:9e:3c:5a:cf:
f9:c3:eb:01:ea:56:a7:9b:41:5d:81:0d:0e:4b:52:22:f7:ce:
99:d1:85:b8:59:8e:b8:d2:44:3c:17:6c:2a:73:97:e3:2c:d6:
7f:17:8a:ff:a7:7b:d3:fa:9d:84:be:4c:e9:79:ae:55:fe:df:
dc:bc:39:b0:0d:78:3c:b8:01:20:c8:d3:c2:4c:ce:67:2b:ce:
aa:8e:8b:d8:34:dc:43:06:04:0c:6f:a9:a1:50:ba:f4:93:3c:
b1:7c:3d:40:23:0f:c6:5e:b8:db:f5:83:66:7c:cc:53:5b:4b:
91:28:dc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:27 2026 by rpki-client