Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/_spKIDAaNSEKhP8sNf3yZXN_LQ4.roa
File: _spKIDAaNSEKhP8sNf3yZXN_LQ4.roa (raw, json)
Hash identifier: N+RZ+TGf1aodP9GLn8kvOvtsr5FIsY+TyOXMohQkro0=
Subject key identifier: FE:CA:4A:20:30:1A:35:21:0A:84:FF:2C:35:FD:F2:65:73:7F:2D:0E
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039823ED00839A641027620CA7F08D9E3
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/_spKIDAaNSEKhP8sNf3yZXN_LQ4.roa
Signing time: Tue 25 Aug 2026 15:20:32 +0000
ROA not before: Tue 25 Aug 2026 15:20:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57397
IP address blocks: 37.221.78.0/24 maxlen: 24
185.231.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:3e:d0:08:39:a6:41:02:76:20:ca:7f:08:d9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=feca4a20301a35210a84ff2c35fdf265737f2d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c0:81:87:eb:03:0c:ce:ec:59:e9:89:aa:09:
78:66:cc:98:10:ce:e0:ab:89:57:ba:6e:55:b7:47:
e1:9e:9f:fa:18:5e:b5:ac:30:dc:16:74:8a:f0:63:
78:8f:39:02:a1:1f:44:87:ef:80:f6:4a:99:2a:11:
30:a1:70:ff:1d:79:69:2f:b4:62:02:e9:49:2a:a2:
2f:da:1a:49:bf:5e:e6:4e:78:5e:7e:79:bb:b7:46:
98:50:fa:4c:90:6e:96:6b:29:2e:09:48:e5:9e:e1:
18:8d:b7:3c:b6:1e:5a:0d:42:07:c6:d3:6e:58:63:
a2:6a:76:db:fa:3a:7f:bc:6c:d4:3e:eb:8e:df:4a:
ee:fc:c1:29:59:35:a5:4f:25:20:6c:d6:6a:fd:4e:
a1:01:6a:17:50:24:50:87:47:d1:64:fb:e2:0a:57:
a5:b9:b9:bb:dd:31:c2:2e:fa:0c:5b:5f:3b:e2:bd:
3e:94:d8:50:77:78:15:b2:9b:7f:6c:0b:46:31:63:
b5:70:05:49:a0:90:7b:9c:57:c1:41:c7:cc:d1:fd:
93:05:6b:25:34:79:79:72:01:f4:2e:fb:f2:38:88:
39:e0:af:e9:08:cc:c3:8a:1c:0b:72:cf:75:07:4f:
e9:2a:81:bc:40:a0:13:c8:f5:38:c9:ac:f0:4d:d2:
f3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CA:4A:20:30:1A:35:21:0A:84:FF:2C:35:FD:F2:65:73:7F:2D:0E
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/_spKIDAaNSEKhP8sNf3yZXN_LQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.78.0/24
185.231.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:3a:28:66:4a:f3:e7:da:90:af:9e:16:62:12:05:21:d7:de:
ba:4c:ff:42:da:23:92:b4:7e:04:2b:45:4f:f3:0b:06:17:f3:
a1:98:24:a9:11:e4:9c:0e:90:b3:a7:c7:27:ef:18:30:33:5a:
80:99:eb:50:5c:e5:ff:2f:e2:bd:4d:56:22:26:1a:c2:6d:eb:
08:84:69:a0:1a:07:d2:84:fc:b4:a1:b2:89:27:c3:36:30:13:
ba:c8:14:d7:ad:c7:37:e5:a9:f5:0e:76:dc:6b:26:63:58:41:
31:f8:be:86:c5:21:e4:e0:7c:96:53:79:3e:60:22:39:7c:e2:
3f:13:06:2e:4a:32:97:fe:1b:8f:d3:4b:da:6d:6b:44:45:f8:
7d:58:d9:c1:d8:8c:e6:ca:4e:a2:a4:fb:43:80:2c:63:ff:e2:
34:ad:59:dc:15:4a:aa:03:18:5b:99:ac:7c:3b:66:41:71:17:
05:7e:f5:cb:a3:36:ef:c5:2a:a7:01:15:d3:4c:16:3d:fd:a4:
a1:ed:df:52:8e:c8:12:37:fa:8a:98:25:0f:ba:49:49:ff:cd:
c6:36:98:ae:de:30:e9:52:7b:54:7a:6e:51:0c:82:53:b7:7b:
c4:21:76:97:de:43:20:76:cf:15:d0:d2:89:b9:6a:13:3a:09:
1b:a2:bf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 01:33:36 2026 by rpki-client