Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/RRXzhH1xneP-Q4HKMXEvcVhTVk4.roa
File: RRXzhH1xneP-Q4HKMXEvcVhTVk4.roa (raw, json)
Hash identifier: /F9qphB7hOab6/CTtG4KVWaHHxrkRjso1Her01QqcsA=
Subject key identifier: 45:15:F3:84:7D:71:9D:E3:FE:43:81:CA:31:71:2F:71:58:53:56:4E
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039825B2719D7909EF8BE79207C7BAA51
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/RRXzhH1xneP-Q4HKMXEvcVhTVk4.roa
Signing time: Tue 25 Aug 2026 15:20:39 +0000
ROA not before: Tue 25 Aug 2026 15:20:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219317
IP address blocks: 212.87.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:5b:27:19:d7:90:9e:f8:be:79:20:7c:7b:aa:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4515f3847d719de3fe4381ca31712f715853564e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:07:0e:ea:e3:2b:29:d9:50:79:61:89:a4:60:
51:61:b2:5c:27:f1:74:97:e6:70:a1:73:8f:6c:4b:
ac:9e:9f:47:92:13:5c:32:de:d6:1e:47:08:b5:cf:
0c:91:d6:c9:c5:f9:e8:13:30:c8:b4:39:d6:e1:64:
3f:7a:f4:8c:81:80:cd:f0:43:39:02:21:d0:0e:17:
a5:8b:5b:0a:e5:38:eb:a9:1b:10:05:3c:a9:8a:64:
43:81:fc:de:c7:31:85:0d:44:57:cd:52:db:87:c5:
f8:27:78:d6:69:57:76:f4:88:dc:47:2c:f9:70:0b:
68:84:36:91:a8:7a:2e:f1:1d:69:3e:90:9a:af:c0:
33:6c:1c:ec:f7:42:9d:56:70:c6:19:88:53:65:07:
9f:6d:ff:15:47:d8:0d:39:a8:c6:de:ef:2b:f2:f3:
7d:31:a6:72:48:f6:d1:a7:71:85:17:db:e2:27:02:
12:4d:6c:de:88:11:bd:13:a7:35:3a:6b:8d:6b:20:
1f:ff:04:b2:2e:52:2b:a3:2b:eb:ec:da:14:db:8e:
27:6b:1a:57:ba:f7:37:2a:e4:24:1f:de:94:0c:3e:
a3:03:ac:80:61:57:8b:0e:8b:94:9a:85:01:51:af:
25:63:03:c8:14:5c:50:79:d6:d0:fb:c9:33:f5:42:
dd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:15:F3:84:7D:71:9D:E3:FE:43:81:CA:31:71:2F:71:58:53:56:4E
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/RRXzhH1xneP-Q4HKMXEvcVhTVk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.197.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:7b:55:b2:6f:a4:3c:d2:54:5e:c7:c0:d8:a1:da:ba:00:87:
b6:d2:48:4d:6e:95:7e:b6:d6:5f:69:60:5d:5d:d0:c7:8f:5c:
02:32:36:c9:10:01:57:2d:5c:b6:93:72:fd:9f:b6:5d:8b:06:
0f:06:7f:7b:2d:a2:8b:b6:c8:91:70:dc:fa:5e:5a:c5:84:4f:
a4:8d:86:6e:28:d4:12:df:d3:d3:20:d8:3b:6e:ff:ea:4a:42:
84:c4:b2:b4:80:05:71:5f:5c:21:5c:1b:d4:cf:34:c2:33:ba:
6a:9e:69:90:03:93:cb:bf:9e:af:b5:97:cd:6b:ac:14:d9:89:
f6:47:db:1d:be:71:37:41:ad:24:ba:70:f6:47:df:65:24:f4:
ee:d4:4e:59:a5:1a:a8:05:57:57:c1:6c:85:ea:d9:9c:ec:b4:
b9:e1:90:98:2c:07:f3:05:f9:da:52:fe:83:49:19:6c:b2:8b:
fb:a2:03:52:f5:9e:77:a5:ce:21:f2:3a:20:a5:27:30:49:d0:
d8:fa:d4:fb:da:1f:ff:29:0e:d1:e5:b1:bc:bb:87:8b:7a:1e:
6a:4e:46:0b:a6:b6:38:96:9c:65:98:d6:c6:6b:46:18:de:89:
89:92:f4:13:0f:3b:fe:5d:44:ea:87:3e:78:cf:83:5d:88:59:
c5:6c:7c:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA5glsnGdeQnvi+eSB8e6pRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI1MTUyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTE1ZjM4NDdkNzE5ZGUzZmU0MzgxY2EzMTcxMmY3MTU4NTM1NjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugcO6uMrKdlQeWGJpGBRYbJcJ/F0
l+ZwoXOPbEusnp9HkhNcMt7WHkcItc8MkdbJxfnoEzDItDnW4WQ/evSMgYDN8EM5
AiHQDheli1sK5TjrqRsQBTypimRDgfzexzGFDURXzVLbh8X4J3jWaVd29IjcRyz5
cAtohDaRqHou8R1pPpCar8AzbBzs90KdVnDGGYhTZQefbf8VR9gNOajG3u8r8vN9
MaZySPbRp3GFF9viJwISTWzeiBG9E6c1OmuNayAf/wSyLlIroyvr7NoU244naxpX
uvc3KuQkH96UDD6jA6yAYVeLDouUmoUBUa8lYwPIFFxQedbQ+8kz9ULdJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEUV84R9cZ3j/kOByjFxL3FYU1ZOMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvUlJYemhIMXhuZVAtUTRIS01YRXZjVmhUVms0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FfFMA0G
CSqGSIb3DQEBCwUAA4IBAQAqe1Wyb6Q80lRex8DYodq6AIe20khNbpV+ttZfaWBd
XdDHj1wCMjbJEAFXLVy2k3L9n7ZdiwYPBn97LaKLtsiRcNz6XlrFhE+kjYZuKNQS
39PTINg7bv/qSkKExLK0gAVxX1whXBvUzzTCM7pqnmmQA5PLv56vtZfNa6wU2Yn2
R9sdvnE3Qa0kunD2R99lJPTu1E5ZpRqoBVdXwWyF6tmc7LS54ZCYLAfzBfnaUv6D
SRlssov7ogNS9Z53pc4h8jogpScwSdDY+tT72h//KQ7R5bG8u4eLeh5qTkYLprY4
lpxlmNbGa0YY3omJkvQTDzv+XUTqhz54z4NdiFnFbHxX
-----END CERTIFICATE-----
Generated at Thu Aug 27 01:34:17 2026 by rpki-client