Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/I4xjvdwtCPGoU4EUmVzGapVekEU.roa
File: I4xjvdwtCPGoU4EUmVzGapVekEU.roa (raw, json)
Hash identifier: dptcb2HQF5HtHy9ctip8uY5o8uQqn0GZfV7Ecq07b50=
Subject key identifier: 23:8C:63:BD:DC:2D:08:F1:A8:53:81:14:99:5C:C6:6A:95:5E:90:45
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A03982584F55DA88CFC591FBAC79CB9071
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/I4xjvdwtCPGoU4EUmVzGapVekEU.roa
Signing time: Tue 25 Aug 2026 15:20:38 +0000
ROA not before: Tue 25 Aug 2026 15:20:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215540
IP address blocks: 139.28.240.0/24 maxlen: 24
139.28.241.0/24 maxlen: 24
194.93.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:58:4f:55:da:88:cf:c5:91:fb:ac:79:cb:90:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=238c63bddc2d08f1a8538114995cc66a955e9045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ac:ed:17:9d:09:91:a5:14:41:e8:5d:8e:bb:
3f:00:bc:cd:ba:a3:2a:ed:e8:8a:dd:fa:87:0e:5b:
3d:2d:7b:9b:af:77:33:45:3a:fa:5b:83:00:77:80:
df:18:ec:3f:45:02:36:b0:9f:c7:02:8f:68:75:c5:
a5:d1:c6:d4:de:11:cf:8a:1b:6e:d5:f7:6a:ec:81:
12:21:54:69:c0:e5:02:f3:bb:bd:c2:71:54:bf:d2:
a6:ea:96:18:77:0d:eb:f0:18:14:fa:19:0c:95:bf:
ff:f0:12:01:a1:56:cc:f6:bd:44:c4:9d:86:52:60:
7b:b6:0b:65:33:82:56:29:89:d2:ac:ed:79:7a:2d:
82:04:c0:76:67:dd:88:b3:d6:7f:56:85:36:11:73:
c5:6f:02:c7:76:2c:56:00:d0:4d:21:52:76:aa:17:
c1:85:e3:63:d6:df:54:6f:54:40:6c:83:c4:3b:e4:
49:04:89:e0:cc:65:08:a2:26:cf:a8:f2:f3:1a:58:
80:56:51:a7:95:89:2b:de:0d:38:d3:38:f1:6e:98:
92:5e:25:6d:03:74:e2:fe:17:49:a1:25:b8:69:78:
d1:d3:6d:7b:42:62:b3:b3:37:42:a2:87:2e:70:12:
b2:9b:ae:84:b3:7c:32:48:13:56:04:45:fa:56:12:
88:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8C:63:BD:DC:2D:08:F1:A8:53:81:14:99:5C:C6:6A:95:5E:90:45
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/I4xjvdwtCPGoU4EUmVzGapVekEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.240.0/23
194.93.51.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:40:9c:28:20:22:ed:65:11:d1:2f:3a:24:d9:2b:6a:3e:36:
71:eb:6a:93:e0:32:17:aa:f8:2d:84:a2:5c:d0:36:c4:16:50:
6a:b9:59:64:3d:1e:87:b3:3f:1a:df:d6:45:a5:cb:7c:94:d7:
e5:b5:3c:bd:f0:c5:17:be:d9:3b:23:0a:6a:a9:5f:a0:0c:cf:
80:d8:36:c1:a8:5f:1b:53:84:99:80:99:e9:e7:e4:88:2e:71:
56:7b:2d:b7:64:36:61:20:ec:8d:56:c6:7e:29:7a:ba:b1:7c:
fa:9e:e9:25:48:1f:fe:a4:02:8a:6f:3a:25:79:93:0a:b1:a4:
71:a5:72:61:d1:e3:e2:2d:6a:9f:01:24:24:ad:b6:32:81:47:
60:f7:d6:e6:40:5a:4f:a9:9f:09:62:4c:dc:ee:b4:88:7e:2c:
37:1f:90:fb:77:ba:26:db:1d:30:3c:dd:a5:2a:4a:f9:12:50:
0e:d8:22:94:e4:b9:e3:7d:b9:ff:d2:37:2d:34:6e:75:6e:e1:
68:0e:4b:bf:06:29:d8:c5:06:44:89:36:1d:03:f7:38:9a:9e:
e1:63:68:ff:4e:e3:6e:dd:e6:58:dd:58:8c:6b:79:7f:c9:4c:
96:b2:e7:6d:ce:70:25:7f:c5:6a:54:e3:48:95:4c:e0:30:28:
eb:6c:ef:cf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaA5glhPVdqIz8WR+6x5y5BxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI1MTUyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzhjNjNiZGRjMmQwOGYxYTg1MzgxMTQ5OTVjYzY2YTk1NWU5MDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKztF50JkaUUQehdjrs/ALzNuqMq
7eiK3fqHDls9LXubr3czRTr6W4MAd4DfGOw/RQI2sJ/HAo9odcWl0cbU3hHPihtu
1fdq7IESIVRpwOUC87u9wnFUv9Km6pYYdw3r8BgU+hkMlb//8BIBoVbM9r1ExJ2G
UmB7tgtlM4JWKYnSrO15ei2CBMB2Z92Is9Z/VoU2EXPFbwLHdixWANBNIVJ2qhfB
heNj1t9Ub1RAbIPEO+RJBIngzGUIoibPqPLzGliAVlGnlYkr3g040zjxbpiSXiVt
A3Ti/hdJoSW4aXjR0217QmKzszdCoocucBKym66Es3wySBNWBEX6VhKIfQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCOMY73cLQjxqFOBFJlcxmqVXpBFMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvSTR4anZkd3RDUEdvVTRFVW1WekdhcFZla0VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBixzwAwQA
wl0zMA0GCSqGSIb3DQEBCwUAA4IBAQCPQJwoICLtZRHRLzok2StqPjZx62qT4DIX
qvgthKJc0DbEFlBquVlkPR6Hsz8a39ZFpct8lNfltTy98MUXvtk7IwpqqV+gDM+A
2DbBqF8bU4SZgJnp5+SILnFWey23ZDZhIOyNVsZ+KXq6sXz6nuklSB/+pAKKbzol
eZMKsaRxpXJh0ePiLWqfASQkrbYygUdg99bmQFpPqZ8JYkzc7rSIfiw3H5D7d7om
2x0wPN2lKkr5ElAO2CKU5Lnjfbn/0jctNG51buFoDku/BinYxQZEiTYdA/c4mp7h
Y2j/TuNu3eZY3ViMa3l/yUyWsudtznAlf8VqVONIlUzgMCjrbO/P
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:29 2026 by rpki-client