Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/_lG0nnuOMNufDMSBgp5YIvVBCY8.roa
File: _lG0nnuOMNufDMSBgp5YIvVBCY8.roa (raw, json)
Hash identifier: KYrRhfXKxhjeUL+yXs5SpO9oxVSiyWEnqJy/owGXcbE=
Subject key identifier: FE:51:B4:9E:7B:8E:30:DB:9F:0C:C4:81:82:9E:58:22:F5:41:09:8F
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039822FF1FC31D687662F5499999BE117
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/_lG0nnuOMNufDMSBgp5YIvVBCY8.roa
Signing time: Tue 25 Aug 2026 15:20:28 +0000
ROA not before: Tue 25 Aug 2026 15:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 147.78.68.0/22 maxlen: 22
193.187.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:2f:f1:fc:31:d6:87:66:2f:54:99:99:9b:e1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe51b49e7b8e30db9f0cc481829e5822f541098f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:36:92:51:2b:10:bd:2e:37:74:cb:7b:0e:3a:
21:3e:e9:af:5f:5c:25:3b:44:bc:86:08:3f:76:51:
e2:83:9f:5c:10:3b:8f:37:67:6a:ef:b4:67:a1:07:
1c:d4:cd:6a:1a:bf:56:7f:fc:18:0b:28:35:8f:fc:
c0:c6:d4:1b:89:56:54:5e:8f:62:c7:11:97:1c:68:
cf:a3:e0:e3:fb:bb:95:87:e2:a1:8c:86:49:3b:7a:
57:b1:b9:76:68:00:74:a7:44:bf:b1:30:6f:05:25:
1b:9e:70:48:24:2d:45:20:35:53:15:d4:26:72:b7:
4a:83:cf:79:d9:6e:e1:36:8b:2c:4a:a6:7e:7f:f6:
1e:b5:eb:e6:50:95:5b:04:5b:a7:79:69:6d:d6:a6:
99:96:31:71:48:5d:67:33:97:3a:0b:f8:6a:05:fd:
cd:29:e7:67:54:92:c1:eb:1e:f8:12:09:a7:fb:54:
47:77:1e:e6:13:ee:a2:98:12:1d:14:81:9a:c6:b5:
cc:c0:cd:cb:21:fa:1b:f6:9d:f9:f6:e9:be:ca:4a:
74:73:89:3a:fa:04:f1:53:ab:f9:70:9f:b2:83:46:
28:01:56:b4:2b:18:7a:a5:0f:38:cc:8a:da:b2:1a:
3b:6f:b7:6e:9d:cf:0a:63:ce:36:8a:7a:a1:7c:ac:
d6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:51:B4:9E:7B:8E:30:DB:9F:0C:C4:81:82:9E:58:22:F5:41:09:8F
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/_lG0nnuOMNufDMSBgp5YIvVBCY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.68.0/22
193.187.140.0/22
Signature Algorithm: sha256WithRSAEncryption
44:b8:e7:c8:61:9c:7d:80:bd:64:49:49:3e:64:bd:61:80:8a:
e6:29:37:d4:08:a0:35:2f:6a:3a:97:8f:b1:9e:fd:96:74:2a:
b3:b4:1c:99:26:d8:e8:a7:8b:af:6e:da:94:a7:2d:60:f2:c8:
08:89:91:0b:bd:21:f5:4e:26:cf:9a:c4:7e:99:f1:76:c9:60:
00:b4:0a:6d:65:db:9d:bf:02:53:8f:01:7c:65:4b:2a:5f:39:
6f:32:b3:fe:06:cb:3f:a0:c1:72:0b:6f:09:c3:88:da:60:f3:
a8:13:12:2a:aa:02:fd:31:c1:2e:7e:d3:34:42:1f:53:6a:62:
e1:96:4a:ae:09:1f:88:45:6c:d0:07:43:b5:b4:4c:5e:dc:97:
78:d2:57:76:24:dd:1a:f4:be:bd:86:06:fc:c0:86:04:17:65:
a9:28:48:e2:78:ad:5b:ea:5e:7a:b7:4c:88:33:66:69:03:d4:
b7:63:d8:b1:17:3f:99:e1:19:23:c0:8c:a1:d8:ef:ee:24:b3:
ef:4c:a7:9c:49:de:b1:b9:ee:0c:d8:f2:58:17:e9:7b:e6:e4:
18:4c:dc:0f:7f:57:ca:77:2d:22:d8:f4:f8:2d:46:bf:47:74:
58:f6:99:f5:61:43:8e:05:a8:b6:43:f2:37:f8:be:05:d8:ee:
29:a9:78:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:56:15 2026 by rpki-client