Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/ODQcfdKCKibk44IvDNoFTrMTmq4.roa
File: ODQcfdKCKibk44IvDNoFTrMTmq4.roa (raw, json)
Hash identifier: 8QpwtFh/DviOiyDFuYahCXjAdp4WQy2aiXtWIFDjT3s=
Subject key identifier: 38:34:1C:7D:D2:82:2A:26:E4:E3:82:2F:0C:DA:05:4E:B3:13:9A:AE
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A03982497C2F61A8CA019AC47D1AB00E03
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/ODQcfdKCKibk44IvDNoFTrMTmq4.roa
Signing time: Tue 25 Aug 2026 15:20:34 +0000
ROA not before: Tue 25 Aug 2026 15:20:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203494
IP address blocks: 92.249.60.0/24 maxlen: 24
217.18.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:49:7c:2f:61:a8:ca:01:9a:c4:7d:1a:b0:0e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38341c7dd2822a26e4e3822f0cda054eb3139aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ed:ee:32:b6:7b:ac:e1:71:62:09:89:b3:3b:
b1:68:6a:ad:3a:cb:f7:ae:27:4f:e1:50:25:8a:0b:
0a:45:8f:40:b1:0a:cc:32:81:6b:e2:d4:b6:f0:e9:
d2:9f:2f:7b:38:66:c2:aa:b0:81:3e:d8:42:01:19:
6e:a2:bd:c4:a5:36:58:5d:ab:a7:3d:61:b9:2b:85:
d3:6b:e9:92:7b:96:74:cc:47:73:d5:13:c5:de:89:
8c:e4:e7:61:3c:e8:dd:b3:14:b6:af:47:66:dd:53:
1f:fc:55:db:71:31:87:2a:c2:47:e5:af:3e:c6:34:
e1:f7:d3:94:fc:11:f2:53:98:9d:1d:e7:61:8c:fb:
4e:ff:28:93:74:05:6c:a1:b8:aa:73:46:ba:24:bf:
e8:30:28:35:14:aa:81:96:33:7a:4e:93:28:76:4a:
ab:73:22:e3:a7:67:fa:cd:9b:05:72:4f:6a:8a:16:
c6:1e:76:6b:18:51:99:17:d4:19:98:5f:fb:04:dd:
23:8b:b1:0b:49:53:9d:f6:bd:2e:ae:29:fd:b3:b1:
6e:28:c9:da:cb:ff:1a:58:5f:84:e8:c4:9e:fc:45:
59:fa:9b:88:cc:32:3c:1e:39:8b:6d:6e:92:a7:da:
20:5c:95:d8:5c:56:2e:da:b2:ba:7b:4e:38:d0:d8:
50:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:34:1C:7D:D2:82:2A:26:E4:E3:82:2F:0C:DA:05:4E:B3:13:9A:AE
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/ODQcfdKCKibk44IvDNoFTrMTmq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.60.0/24
217.18.209.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:98:b1:59:8f:64:9c:6c:ff:26:17:21:ae:62:5a:21:39:e0:
62:cc:21:e8:d5:fb:a5:d7:ab:89:c3:c8:34:33:fb:7d:a5:0a:
c4:01:cb:1f:74:51:7d:df:d8:72:f5:4e:04:04:70:c2:59:59:
2e:dc:61:6f:af:08:c7:58:4a:13:7b:32:8e:10:cb:25:15:bc:
18:2b:b7:c7:10:0e:99:fd:5c:ab:57:aa:c9:28:49:f0:76:9c:
42:24:dd:f6:6a:9e:ba:29:78:31:5b:98:9d:fe:e7:c1:c3:7e:
ec:4d:59:e9:a0:bb:c9:b1:46:a4:53:5b:12:8c:00:c1:2f:11:
83:78:96:55:91:f6:e0:a5:96:06:3d:4e:44:ab:05:c2:9e:e0:
15:b1:e6:a0:91:53:89:38:ab:00:4d:98:ae:a2:94:72:e7:4e:
77:68:37:5e:b6:5a:e2:02:9f:f5:0b:36:f3:dd:f3:e7:64:07:
fa:a9:20:07:d9:b5:69:77:5a:30:6e:1f:6a:81:96:cd:83:d3:
f7:04:bd:fd:e8:0f:11:c7:d6:bf:14:b5:d5:d0:ac:e8:04:7e:
57:46:3d:3f:77:92:ef:ed:1a:f7:22:a6:82:f5:20:7f:e9:07:
22:4d:63:5d:bf:b2:6c:66:93:32:d0:db:d1:19:71:26:0c:51:
2f:65:29:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:16 2026 by rpki-client