Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/RlL9ZXsYoIo01KqaUD6G4Q1n3sk.roa
File: RlL9ZXsYoIo01KqaUD6G4Q1n3sk.roa (raw, json)
Hash identifier: d9zduqPuKjlLQUq4o9sv3Q383vKoeiwslrVlelfM45o=
Subject key identifier: 46:52:FD:65:7B:18:A0:8A:34:D4:AA:9A:50:3E:86:E1:0D:67:DE:C9
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039823E4495F5D576DEE24DD3E24996D5
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/RlL9ZXsYoIo01KqaUD6G4Q1n3sk.roa
Signing time: Tue 25 Aug 2026 15:20:31 +0000
ROA not before: Tue 25 Aug 2026 15:20:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56582
IP address blocks: 212.87.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:3e:44:95:f5:d5:76:de:e2:4d:d3:e2:49:96:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4652fd657b18a08a34d4aa9a503e86e10d67dec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dc:74:36:1c:cc:06:10:93:80:f3:6e:31:a5:
84:09:0b:9c:9f:aa:90:7b:2c:52:6f:56:a7:3e:47:
b9:02:53:23:26:69:f7:0c:ea:db:f5:a4:fc:6e:99:
0f:c2:8d:f6:94:3e:64:45:4f:08:c3:aa:94:19:4a:
ac:64:de:16:54:6e:07:74:68:fa:e8:15:c7:06:3e:
36:a9:4e:e0:98:ca:3d:c8:09:bf:f6:9f:eb:5c:9e:
01:f8:d6:4b:c9:e4:f2:cd:7a:90:e2:6c:34:03:37:
df:de:60:c8:58:b3:05:c0:c6:c6:e7:2c:fb:72:63:
96:7b:03:b3:ac:00:68:4a:29:65:c7:43:ef:b4:70:
00:81:a2:72:d6:4e:d7:f6:dd:c4:61:1a:c6:3f:46:
e5:2c:d4:44:06:15:e0:ec:b8:7b:88:ec:b2:6b:f4:
47:53:da:87:43:a9:91:c8:54:b4:ce:49:01:81:70:
40:0d:2b:b1:bb:f2:f5:34:af:f1:4b:05:3d:a5:89:
d6:99:4d:f9:2d:42:66:48:b6:70:34:13:73:50:be:
77:2c:d5:18:46:1c:b9:38:30:70:5f:c8:2e:bf:dd:
bf:da:ec:b3:e0:8d:3a:d6:95:08:d3:9d:77:a5:1a:
0b:26:aa:12:74:9c:c2:43:2a:45:d2:8b:d9:e4:69:
71:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:52:FD:65:7B:18:A0:8A:34:D4:AA:9A:50:3E:86:E1:0D:67:DE:C9
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/RlL9ZXsYoIo01KqaUD6G4Q1n3sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.196.0/24
Signature Algorithm: sha256WithRSAEncryption
73:c5:39:e8:2c:dd:52:07:6b:c1:48:f5:c8:00:d3:4d:bb:47:
6a:37:a4:7f:c0:52:fb:f6:ac:1b:f1:42:62:c9:f0:32:f2:1e:
3d:c2:7e:d8:c2:c4:c4:08:90:0b:1b:ba:30:dc:16:c9:2e:b3:
9b:ad:df:b3:1f:28:6d:c0:14:8b:65:fc:9f:1b:da:e2:0d:8f:
82:6b:c8:40:b5:ba:65:84:04:83:73:b2:6d:c1:71:e3:47:13:
ef:5b:ff:1a:89:ae:80:83:54:98:97:05:dd:77:96:ae:ed:71:
c4:80:22:9e:fd:52:33:66:4a:e0:cc:05:de:b0:7c:f6:5a:b4:
ad:f8:05:8b:d5:90:42:70:36:39:2b:46:8d:73:51:a8:56:88:
76:be:58:f6:f7:72:6e:48:0a:cc:3b:b3:29:44:a6:41:da:85:
2a:18:e7:79:ba:73:29:79:49:eb:a4:59:27:33:e6:3f:01:f5:
ab:db:54:16:be:62:55:6e:81:f7:f2:da:ab:f5:f9:17:89:b4:
5f:b2:86:77:e1:0e:26:02:7f:8c:71:6c:10:51:5b:31:18:a8:
6d:6f:65:84:cf:3b:63:df:92:e4:b1:c5:3b:63:08:50:a2:25:
83:1f:c7:f1:e5:ea:24:7e:40:89:8e:50:3c:c1:fe:53:93:80:
d8:61:35:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:56 2026 by rpki-client