Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/ax9HqIz3O3kLoAijWvjxL1XVAxE.roa
File: ax9HqIz3O3kLoAijWvjxL1XVAxE.roa (raw, json)
Hash identifier: 7/C1HpcoFiI8GMfyZYQ9EsZuhtq0JMixYSdmLqgxKL4=
Subject key identifier: 6B:1F:47:A8:8C:F7:3B:79:0B:A0:08:A3:5A:F8:F1:2F:55:D5:03:11
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A03982402A8BFB2097F22B8CB659975985
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/ax9HqIz3O3kLoAijWvjxL1XVAxE.roa
Signing time: Tue 25 Aug 2026 15:20:32 +0000
ROA not before: Tue 25 Aug 2026 15:20:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137517
IP address blocks: 188.119.68.0/24 maxlen: 24
213.139.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:40:2a:8b:fb:20:97:f2:2b:8c:b6:59:97:59:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b1f47a88cf73b790ba008a35af8f12f55d50311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:09:38:4e:38:1f:e1:b7:29:a6:8f:84:67:21:
d6:6a:37:80:5e:df:c1:a7:c0:7d:0d:49:00:72:a7:
ed:1e:77:41:0c:d2:53:1e:49:0a:d7:d4:20:2c:5a:
c3:1c:31:58:5a:4b:51:d9:43:58:e4:a2:08:98:b9:
37:ce:7b:96:52:06:76:a6:23:58:05:07:f0:87:9c:
b2:51:74:b0:ae:ef:ae:f0:39:37:12:30:b6:6a:0f:
d3:12:fc:5f:9b:7f:7d:31:b1:b8:b8:83:fc:35:a5:
76:28:ba:b2:85:46:bb:6b:d6:8f:db:81:c2:a2:57:
57:16:62:f4:bd:22:4f:d9:0e:d0:d9:9b:da:7b:64:
44:b5:9a:16:98:dd:36:39:6d:41:53:40:a8:35:1c:
98:9b:63:70:03:bf:f0:34:f5:29:72:0a:37:77:4f:
d9:be:83:e0:be:a7:9c:77:59:37:bf:57:28:44:a3:
d5:bf:5a:a7:37:2a:ca:52:8a:a1:38:53:0d:af:34:
3f:8f:0a:8a:7a:84:01:e9:39:e6:5c:a6:12:8d:b6:
2b:aa:84:0d:35:b5:8c:a9:14:84:31:ca:7e:18:c6:
89:72:3e:da:15:79:20:81:87:11:39:ad:55:93:9b:
a3:91:12:87:2c:21:59:e1:72:6f:b3:c5:b8:fe:47:
9b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1F:47:A8:8C:F7:3B:79:0B:A0:08:A3:5A:F8:F1:2F:55:D5:03:11
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/ax9HqIz3O3kLoAijWvjxL1XVAxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.68.0/24
213.139.224.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:23:83:cb:45:3d:3f:5c:20:68:90:87:4e:52:81:91:56:8c:
1b:6c:c3:33:42:7a:a9:e5:e5:94:bd:40:a3:d4:8a:08:66:3c:
23:7c:e9:11:d1:54:8e:a5:16:54:ed:cf:8d:af:07:6c:d7:f2:
2c:03:a1:38:4c:1e:03:b4:1e:d0:27:dc:66:11:c0:4d:12:80:
dc:23:b5:d7:f1:cf:cd:67:b1:7b:c7:53:58:9d:24:d1:5a:31:
3d:eb:1f:43:c6:56:b3:bf:18:83:c4:ae:49:3a:4c:e4:e7:e9:
2e:ff:43:df:c8:da:42:cc:04:90:20:4d:43:f4:cd:b9:7b:c9:
09:2c:04:10:1a:89:10:33:bc:90:0a:2a:eb:7f:05:29:1f:fc:
70:2c:74:d9:6a:6f:d4:4f:74:6b:89:98:38:06:5b:53:cc:c1:
52:6d:75:29:fb:b2:a3:b2:41:6d:3b:02:db:9e:29:d1:3c:2f:
69:be:e6:6d:76:d8:c4:dc:2b:46:9b:53:60:3a:66:5c:63:e5:
09:24:ff:3c:1a:f4:24:78:6e:f0:22:ae:71:56:74:f7:6f:cc:
e7:4f:a1:29:a1:cc:eb:ba:a7:98:98:64:95:34:93:80:ce:42:
a0:78:62:98:2c:85:54:9d:eb:25:33:a8:51:b2:9d:39:5b:e2:
78:69:49:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:06 2026 by rpki-client