Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/LbN3f8Kk-GweilVOPDHp5y1bqCI.roa
File: LbN3f8Kk-GweilVOPDHp5y1bqCI.roa (raw, json)
Hash identifier: gN7CS709JMCgx+SAR7oVrGSTIyjjOXN9he+3Xk2gLys=
Subject key identifier: 2D:B3:77:7F:C2:A4:F8:6C:1E:8A:55:4E:3C:31:E9:E7:2D:5B:A8:22
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039824A6E638A20231E0B3C7EBC5C004E
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/LbN3f8Kk-GweilVOPDHp5y1bqCI.roa
Signing time: Tue 25 Aug 2026 15:20:35 +0000
ROA not before: Tue 25 Aug 2026 15:20:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203796
IP address blocks: 141.98.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:4a:6e:63:8a:20:23:1e:0b:3c:7e:bc:5c:00:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2db3777fc2a4f86c1e8a554e3c31e9e72d5ba822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:37:d2:bf:31:d4:1d:80:b3:46:2b:9a:c3:6e:
ee:31:2c:21:07:2f:0f:47:e1:27:f3:03:44:19:6e:
1b:11:05:17:af:3d:0e:87:28:6e:2e:4f:c1:e6:20:
d1:a0:9f:d9:69:90:d1:aa:ec:95:81:26:30:a3:7e:
ac:62:e0:51:7c:b6:8d:c1:4a:37:bd:ca:e6:83:ec:
3d:41:b6:9d:2d:ec:0d:72:e9:e6:21:eb:af:c4:d9:
92:cf:f6:06:76:f3:2c:65:5f:f8:7a:09:85:30:ac:
d7:b9:55:57:4c:fe:c8:a1:09:5b:4f:7e:4b:de:fa:
02:6c:b7:27:1c:a8:a4:2b:4b:e5:86:81:06:3a:6d:
f8:ac:e3:d3:e0:8b:91:a8:6d:e6:a8:16:57:d7:e0:
06:a1:6f:26:8f:00:7d:37:51:c0:85:37:17:d7:2d:
07:26:d7:3e:69:eb:8d:0e:03:ec:1e:c5:cf:34:70:
6a:7b:70:fd:ee:22:1e:d5:a9:43:f0:4d:e1:8c:1f:
ff:c2:01:c6:8d:64:70:ec:f6:0a:66:dd:98:37:21:
09:2d:ab:3e:59:eb:bc:ea:73:b1:be:6f:9a:a7:75:
50:8c:26:24:0d:d5:10:83:48:d6:ee:e1:4a:69:41:
41:16:ce:fb:78:53:62:42:cf:c3:3e:18:f2:1c:73:
a4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B3:77:7F:C2:A4:F8:6C:1E:8A:55:4E:3C:31:E9:E7:2D:5B:A8:22
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/LbN3f8Kk-GweilVOPDHp5y1bqCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.49.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a6:7b:3d:be:03:eb:75:54:13:e7:36:43:72:13:80:41:02:
74:f2:c4:65:82:da:d5:9d:9b:f8:fe:94:0c:6a:2f:b2:e7:43:
24:2c:f5:69:31:85:f1:91:47:77:b6:16:8f:f9:d3:e7:45:c5:
f0:2f:85:b5:6f:eb:99:b6:25:61:66:76:ff:bf:cc:4b:b4:10:
e2:12:7a:cf:96:4f:f5:59:77:a4:db:d2:e4:fc:8d:80:66:b1:
66:dc:2b:93:fd:4d:d6:3e:99:7f:6d:f3:49:41:78:4b:05:fb:
d2:c9:93:bb:cd:6f:6f:ba:4e:ad:f7:57:da:df:7d:02:d5:f6:
00:98:ec:68:57:36:9b:26:b1:d1:c2:f2:a3:2a:7e:16:9f:3a:
39:67:57:e6:c8:4f:d8:13:78:37:8e:3a:17:06:59:c2:cb:f0:
de:30:4c:69:0b:99:15:68:69:80:fd:9b:5e:45:9d:77:aa:5d:
d9:5b:49:f8:f8:83:5e:9c:24:8a:d2:91:f9:e8:91:dc:4a:bf:
ea:9e:d3:12:0b:57:e1:ae:5e:b7:55:d6:18:2e:f7:f2:c5:c2:
ce:c2:23:83:8f:5a:c9:1d:d6:d8:86:19:2a:9f:85:1c:3a:4d:
56:02:1e:77:ab:81:7c:56:ea:38:9e:dd:b7:05:f1:02:ae:5f:
fe:3a:4f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:38 2026 by rpki-client