Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/OBcHlJMWd1-CIeOzIMbZQQDefA0.roa
File: OBcHlJMWd1-CIeOzIMbZQQDefA0.roa (raw, json)
Hash identifier: 3QkLcvSJD3HmacH7o5VggejGhwtQoY3m2odzlYJqcpk=
Subject key identifier: 38:17:07:94:93:16:77:5F:82:21:E3:B3:20:C6:D9:41:00:DE:7C:0D
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398246DE54AAF1E279488B7BC6498A4A
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/OBcHlJMWd1-CIeOzIMbZQQDefA0.roa
Signing time: Tue 25 Aug 2026 15:20:34 +0000
ROA not before: Tue 25 Aug 2026 15:20:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200239
IP address blocks: 5.133.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:46:de:54:aa:f1:e2:79:48:8b:7b:c6:49:8a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=381707949316775f8221e3b320c6d94100de7c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8f:43:a1:f3:8d:81:ad:59:77:05:a9:2c:26:
f3:fb:d4:6e:07:43:39:d8:a9:3d:fc:f9:ec:ef:69:
4c:35:a9:93:02:bf:ab:eb:39:9a:e0:6a:fa:0c:68:
f6:c8:51:7c:e7:ff:05:98:83:5e:6a:f1:e6:4d:6a:
82:53:eb:84:d4:9a:5b:3b:29:88:4b:b7:4d:2d:45:
65:07:27:26:20:b1:4b:60:bd:9a:53:3e:58:3d:ce:
cb:7b:07:95:26:b6:2d:7a:d9:5e:ac:ba:51:8a:90:
1c:ef:a7:65:c5:94:83:81:72:47:3c:1d:1a:1f:71:
a6:59:8b:63:b8:a1:bd:aa:66:d9:c4:45:3a:be:bb:
81:1d:fe:f9:a4:9c:40:fa:5d:1f:89:8e:f8:b3:3e:
b6:13:39:33:7e:1f:71:da:03:ef:62:69:7a:b4:95:
4a:d7:29:9a:54:58:fa:e8:53:01:b7:2c:be:b5:16:
80:f9:e3:1e:f8:34:bc:bb:60:c5:b8:b7:62:9c:41:
83:af:70:8c:f2:9a:08:b2:43:44:ae:68:db:41:4c:
78:0b:f0:ae:a0:8d:cc:6a:fb:3b:a0:49:4f:6c:1f:
47:02:4b:e9:b2:da:ae:8d:f6:36:c4:2f:e3:09:e4:
71:5e:ef:a2:3a:52:bd:95:19:3a:44:43:94:61:73:
9d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:17:07:94:93:16:77:5F:82:21:E3:B3:20:C6:D9:41:00:DE:7C:0D
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/OBcHlJMWd1-CIeOzIMbZQQDefA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.101.0/24
Signature Algorithm: sha256WithRSAEncryption
86:84:00:97:64:ba:1b:a6:ce:84:c2:4f:e8:4a:ff:5b:e4:6f:
7e:8b:76:72:ef:66:6d:4c:13:cc:8c:0a:cf:bf:2b:28:5a:03:
09:0e:1d:e5:26:e3:b5:ba:85:13:df:00:ba:8d:0e:63:c1:55:
20:62:9d:70:ea:fe:e2:b4:2b:d6:71:1a:bf:71:55:4a:c6:cc:
88:f2:6d:92:61:61:76:62:de:bf:0c:b9:bc:13:9c:68:dd:e1:
ca:0d:4b:d6:cd:ba:94:9e:19:6a:27:23:e6:b3:63:86:45:65:
42:79:68:cd:22:a7:8c:85:c6:9b:11:23:4e:29:23:e6:07:51:
49:ce:52:1f:dc:2e:2f:ab:d7:b1:ef:de:43:33:99:0e:d3:9c:
1e:6a:cb:b6:03:cf:7b:be:0a:8e:9a:9c:73:e8:a7:aa:79:25:
e6:99:6f:56:68:28:0c:77:9f:b2:69:19:71:fd:ef:a1:98:3c:
c7:fa:5e:15:e5:1a:28:43:0b:57:c4:fd:68:48:b9:4e:b8:76:
4a:f0:97:28:c4:d8:88:56:85:d4:f3:22:6f:ce:32:c2:34:fd:
33:22:4d:2b:c6:30:df:90:11:81:96:d0:03:52:cc:63:84:09:
ba:ac:25:25:26:35:3b:de:3b:a1:2b:82:58:f0:d1:cb:8c:c8:
61:5c:4c:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA5gkbeVKrx4nlIi3vGSYpKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI1MTUyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODE3MDc5NDkzMTY3NzVmODIyMWUzYjMyMGM2ZDk0MTAwZGU3YzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8o9DofONga1ZdwWpLCbz+9RuB0M5
2Kk9/Pns72lMNamTAr+r6zma4Gr6DGj2yFF85/8FmINeavHmTWqCU+uE1JpbOymI
S7dNLUVlBycmILFLYL2aUz5YPc7LeweVJrYtetlerLpRipAc76dlxZSDgXJHPB0a
H3GmWYtjuKG9qmbZxEU6vruBHf75pJxA+l0fiY74sz62Ezkzfh9x2gPvYml6tJVK
1ymaVFj66FMBtyy+tRaA+eMe+DS8u2DFuLdinEGDr3CM8poIskNErmjbQUx4C/Cu
oI3Mavs7oElPbB9HAkvpstqujfY2xC/jCeRxXu+iOlK9lRk6REOUYXOdMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDgXB5STFndfgiHjsyDG2UEA3nwNMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvT0JjSGxKTVdkMS1DSWVPeklNYlpRUURlZkEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABYVlMA0G
CSqGSIb3DQEBCwUAA4IBAQCGhACXZLobps6Ewk/oSv9b5G9+i3Zy72ZtTBPMjArP
vysoWgMJDh3lJuO1uoUT3wC6jQ5jwVUgYp1w6v7itCvWcRq/cVVKxsyI8m2SYWF2
Yt6/DLm8E5xo3eHKDUvWzbqUnhlqJyPms2OGRWVCeWjNIqeMhcabESNOKSPmB1FJ
zlIf3C4vq9ex795DM5kO05weasu2A897vgqOmpxz6KeqeSXmmW9WaCgMd5+yaRlx
/e+hmDzH+l4V5RooQwtXxP1oSLlOuHZK8JcoxNiIVoXU8yJvzjLCNP0zIk0rxjDf
kBGBltADUsxjhAm6rCUlJjU73juhK4JY8NHLjMhhXExs
-----END CERTIFICATE-----
Generated at Thu Aug 27 03:52:43 2026 by rpki-client