Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/_24vhUGPsIN_xYn0uC_6VHXRhCI.roa
File: _24vhUGPsIN_xYn0uC_6VHXRhCI.roa (raw, json)
Hash identifier: Q0Dd3A3uKdL8cqtSEZHg/4vR0S6GFUn06HvWtn91d1k=
Subject key identifier: FF:6E:2F:85:41:8F:B0:83:7F:C5:89:F4:B8:2F:FA:54:75:D1:84:22
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039825C3FC1D0DCF25B1F13B28FEE3B16
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/_24vhUGPsIN_xYn0uC_6VHXRhCI.roa
Signing time: Tue 25 Aug 2026 15:20:39 +0000
ROA not before: Tue 25 Aug 2026 15:20:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219407
IP address blocks: 83.171.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:5c:3f:c1:d0:dc:f2:5b:1f:13:b2:8f:ee:3b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff6e2f85418fb0837fc589f4b82ffa5475d18422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:ce:6f:b1:12:91:db:d8:43:c7:b7:25:e3:
ba:af:af:39:a5:40:f3:cb:c7:b6:b3:76:70:79:ab:
44:46:e5:97:f5:af:69:1c:9d:43:af:6e:b8:e8:87:
b6:7e:4e:36:59:f1:90:c8:52:77:d3:e3:51:6a:33:
2c:5d:65:60:69:08:0a:db:11:36:af:c2:c5:d0:17:
a6:30:7f:c2:48:8e:52:cf:7c:5b:c8:25:4f:56:93:
cf:21:ab:31:95:7c:9f:00:b0:05:eb:19:11:3c:4c:
ba:80:99:93:32:99:43:36:6d:4c:e8:50:07:37:35:
b7:f8:8c:b9:03:f0:0c:f3:5e:21:97:a2:a5:da:6a:
20:04:6e:2e:ac:59:2f:82:64:7e:30:d0:7e:7f:0f:
59:f1:e2:0f:b6:60:9a:36:72:b8:fe:eb:86:83:00:
9f:c1:24:ea:6c:45:3a:d2:f5:2e:5f:7b:10:13:97:
31:1a:c7:d8:aa:6b:a0:3a:45:90:e5:30:05:96:5e:
4f:ca:c6:21:92:48:55:0c:db:c0:fe:a1:47:fe:55:
6c:34:61:4d:ed:94:66:05:be:5f:22:8d:2f:35:cb:
cb:10:e5:42:1c:5b:5d:27:ae:77:71:c7:db:d9:42:
9d:88:65:2a:42:1a:1d:bd:51:94:7b:9d:fc:5d:d7:
65:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6E:2F:85:41:8F:B0:83:7F:C5:89:F4:B8:2F:FA:54:75:D1:84:22
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/_24vhUGPsIN_xYn0uC_6VHXRhCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.245.0/24
Signature Algorithm: sha256WithRSAEncryption
84:d7:dd:8c:c5:b1:fc:80:ed:ea:dc:b5:8c:55:cb:3a:fb:b1:
a4:f7:8f:5e:e0:46:d5:f8:95:6f:5e:e7:f1:85:f4:de:a8:ac:
24:d2:0b:a4:fb:27:e3:ce:cb:60:15:f9:31:67:28:27:6c:2f:
85:bd:9a:c1:3f:4a:9a:4d:10:d2:04:46:61:76:c8:f9:47:f5:
c9:d9:ea:9a:12:b9:b4:69:1b:2e:2f:85:fd:7b:e9:09:7c:dd:
4a:e9:d1:0b:a7:b4:de:26:e6:4d:0f:09:f1:6c:9c:83:3e:dd:
59:cc:71:03:1c:b7:23:c8:5c:8a:23:6d:56:40:43:b9:7b:ec:
a0:9b:9c:fc:88:c8:22:67:fb:5f:da:6d:ed:d9:87:66:43:76:
3a:1e:f2:d3:3a:53:b7:15:43:36:a2:09:89:60:5a:26:43:0a:
85:b3:83:7b:df:25:11:1a:89:c3:cb:23:41:65:8a:08:99:c4:
d6:8b:22:93:8b:7b:06:8a:63:27:5d:54:09:6a:4b:46:ab:09:
1c:01:3f:b5:d0:ca:36:43:3f:a6:56:e3:53:c1:ec:07:9a:7f:
e8:f8:a4:1b:c5:5e:49:b1:a6:0b:40:2b:68:24:fa:5c:5f:10:
df:ae:fe:4f:d1:58:5b:7b:75:5b:95:b3:1d:64:52:e9:c4:26:
8f:5e:57:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:36 2026 by rpki-client