Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/L12xgz0ew6ReTzuy-lj-6uC_usc.roa
File: L12xgz0ew6ReTzuy-lj-6uC_usc.roa (raw, json)
Hash identifier: JSxBMgK76xy0KA8XHM4iMNLNYUfBuU1w30baX2obYx8=
Subject key identifier: 2F:5D:B1:83:3D:1E:C3:A4:5E:4F:3B:B2:FA:58:FE:EA:E0:BF:BA:C7
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398255682DE53714924E66349BC59380
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/L12xgz0ew6ReTzuy-lj-6uC_usc.roa
Signing time: Tue 25 Aug 2026 15:20:37 +0000
ROA not before: Tue 25 Aug 2026 15:20:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213945
IP address blocks: 176.96.130.0/24 maxlen: 24
185.231.227.0/24 maxlen: 24
217.18.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:55:68:2d:e5:37:14:92:4e:66:34:9b:c5:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f5db1833d1ec3a45e4f3bb2fa58feeae0bfbac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:7e:95:55:45:ad:d3:bd:22:e1:c6:69:a3:
d7:c5:a5:40:79:4d:18:9c:79:11:7f:80:20:b8:18:
77:69:35:73:2d:8e:c3:44:fc:8e:ee:35:98:83:55:
2c:ab:49:d6:00:22:9b:c9:a8:a1:2e:c7:ce:fc:33:
23:0f:ef:22:87:e3:ee:c3:03:52:d0:53:2e:47:59:
f0:5d:f6:2c:32:60:fc:96:d3:36:90:df:9d:50:b1:
0f:2e:65:b7:41:97:91:e4:e2:f2:95:94:84:53:8a:
b3:fe:20:ee:ba:6e:b6:54:20:32:43:99:db:7e:24:
cc:39:3c:ff:c0:11:85:4d:65:14:06:48:94:15:47:
1f:28:8e:ac:60:ac:ce:72:6e:00:ff:06:71:54:90:
01:b0:84:b6:39:a2:bd:91:aa:83:5c:5c:38:04:28:
79:11:21:c2:b0:84:d0:17:86:25:d8:6d:9f:ff:ac:
93:c8:37:bf:82:13:45:88:9b:67:63:cb:41:34:cc:
36:e5:d0:9f:bc:a7:b9:cd:79:51:2d:57:93:9b:c8:
b3:09:c0:72:93:e5:2e:68:1d:e5:45:1c:e4:fa:f3:
76:77:b1:01:84:72:d1:54:ba:84:4f:b5:97:ef:fe:
37:bb:f2:17:e9:e1:b9:35:e7:b4:66:7a:d5:cb:42:
c2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5D:B1:83:3D:1E:C3:A4:5E:4F:3B:B2:FA:58:FE:EA:E0:BF:BA:C7
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/L12xgz0ew6ReTzuy-lj-6uC_usc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.130.0/24
185.231.227.0/24
217.18.209.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:92:63:3c:03:1a:da:f1:20:8a:22:f4:76:35:e1:51:d3:83:
ce:9b:58:db:b7:88:45:ba:35:6f:1f:b3:49:60:f3:da:d1:7a:
12:4e:02:f2:5b:cc:51:3d:da:2d:35:61:ca:d5:43:89:ee:69:
cf:85:af:60:66:08:7a:c0:66:28:45:bf:ce:66:e1:4d:ad:57:
21:e5:32:08:f6:03:1a:98:61:38:99:d0:ab:e9:c1:67:77:92:
3c:99:ed:72:24:1c:04:4a:18:f4:b9:c8:f6:a9:d9:e1:bf:78:
61:3d:70:1a:85:e8:72:05:c9:90:f2:8d:0f:fe:7c:19:73:32:
a7:e3:46:d7:8a:e0:6e:d5:c9:5d:b8:4c:64:8e:46:fe:9b:12:
16:3e:90:7c:51:88:8d:73:ab:eb:28:e7:6f:82:18:53:92:9a:
8c:30:92:f4:4c:64:97:ae:40:14:21:44:f2:f8:e3:2b:b9:7b:
fa:6f:02:8c:8e:4e:cf:0e:6e:89:61:5a:b0:11:7b:63:57:f6:
44:65:d9:65:b4:cc:c6:5b:6f:e9:c9:2a:46:bf:b0:d5:5d:d0:
b5:1b:ee:3a:6d:47:ee:c7:9f:aa:4c:31:f0:c3:a1:4d:4a:eb:
80:7f:b3:91:f1:e4:67:29:d0:a2:01:09:9e:57:3c:ee:ea:4d:
b8:fe:55:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:06 2026 by rpki-client