Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/aPjr6ccsAshgRh0xzcDpaQC6coU.roa
File: aPjr6ccsAshgRh0xzcDpaQC6coU.roa (raw, json)
Hash identifier: PrNuZ4QgCYouNt4W/lZgquCvdAdUIDTt+CvV2ae9NqQ=
Subject key identifier: 68:F8:EB:E9:C7:2C:02:C8:60:46:1D:31:CD:C0:E9:69:00:BA:72:85
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A10EEFC3DF5752DB4E5EBE382F76B12A30
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/aPjr6ccsAshgRh0xzcDpaQC6coU.roa
Signing time: Tue 06 Oct 2026 01:59:16 +0000
ROA not before: Tue 06 Oct 2026 01:59:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.171.246.0/24 maxlen: 24
193.187.108.0/24 maxlen: 24
193.187.133.0/24 maxlen: 24
193.187.134.0/24 maxlen: 24
212.115.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:ef:c3:df:57:52:db:4e:5e:be:38:2f:76:b1:2a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Oct 6 01:59:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68f8ebe9c72c02c860461d31cdc0e96900ba7285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:05:af:55:55:d6:e9:7b:b7:20:c7:02:2e:9a:
42:8c:b1:6c:cf:46:65:20:56:ee:7e:f4:fd:d8:1c:
8f:b2:62:5c:7e:10:65:06:7e:88:65:87:20:aa:11:
b7:3a:12:a3:1a:6f:d1:d3:cb:a5:b8:e0:de:c1:5f:
30:97:df:c0:17:d3:12:ee:cf:33:ce:c0:fc:bb:9c:
bb:16:ab:1f:b0:bf:a9:50:d9:f8:df:11:5f:f9:bd:
00:3f:39:07:7e:ee:a6:9f:96:01:ea:0b:58:65:af:
28:e9:32:da:fc:66:d6:c5:88:57:ea:31:83:43:76:
4a:a2:c9:ea:04:df:0f:c9:40:cc:28:cc:04:ab:62:
7f:5a:18:ab:dd:96:26:f1:77:22:13:bf:5c:0e:b8:
cb:77:38:26:dc:9b:12:63:2c:e0:30:c8:cf:68:e0:
37:a4:4b:d1:8c:52:17:71:50:28:37:e7:11:0d:ac:
cd:c5:e3:8c:88:60:4d:e1:63:1e:a3:2e:9f:cb:06:
17:ae:e3:22:a1:18:c0:bd:3f:13:91:5b:61:9a:48:
eb:6a:24:fd:6f:41:72:e8:d6:dd:e5:8a:b2:1b:02:
8e:16:68:7d:b2:14:d7:64:cd:bc:e7:c7:2b:cb:8f:
64:1f:bc:94:64:d7:68:50:c2:ed:4e:87:32:08:d5:
55:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F8:EB:E9:C7:2C:02:C8:60:46:1D:31:CD:C0:E9:69:00:BA:72:85
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/aPjr6ccsAshgRh0xzcDpaQC6coU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.246.0/24
193.187.108.0/24
193.187.133.0-193.187.134.255
212.115.102.0/24
Signature Algorithm: sha256WithRSAEncryption
90:19:50:e4:6f:82:2f:de:40:44:b6:e1:d2:a5:36:7c:20:cc:
29:b1:4d:dc:79:f9:f7:3a:a0:76:3a:fa:9f:92:a5:c7:a9:18:
81:fb:93:37:f9:86:72:94:73:7e:8a:3f:30:8f:8c:2f:af:17:
e8:83:b6:00:a2:74:52:de:c6:ce:ee:ff:2e:f2:1d:8d:6e:f7:
d7:d7:98:3c:0d:d6:3a:0b:48:89:39:f3:36:74:04:e5:6c:f9:
9b:b2:eb:56:f0:11:16:b7:bc:a4:9f:19:79:31:2d:ac:03:8b:
dc:84:26:47:c1:e4:0b:c8:01:a7:bb:46:e9:8e:cb:be:2b:b7:
ff:04:18:03:04:b5:71:0a:16:65:96:4b:a8:eb:1d:3e:77:93:
27:d2:0d:cc:28:26:f7:a7:90:da:e7:55:c1:63:6d:ad:a3:f9:
c2:c1:b3:a0:e8:fa:65:75:27:49:18:0b:c2:11:87:f7:3c:c6:
b6:e0:f9:8b:b9:8f:27:16:af:e7:a1:db:9a:e4:16:3f:60:46:
3e:f5:4e:b4:69:ec:5c:60:30:03:59:7e:9c:e6:8a:b0:3c:29:
e1:75:25:f7:fe:c7:41:d2:56:19:70:14:0b:2a:d4:c7:2e:cf:
dd:ca:c2:a5:c7:3b:0b:b8:16:a9:1b:9b:66:fd:0e:35:60:be:
ef:12:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:53:03 2026 by rpki-client