Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/bLuqbmdRXb5mc6AdgVzwGvlrPp4.roa
File: bLuqbmdRXb5mc6AdgVzwGvlrPp4.roa (raw, json)
Hash identifier: gAMHCCh5idTNPvm8WdVwl5d04NQ+pidERDo9wB+gcVY=
Subject key identifier: 6C:BB:AA:6E:67:51:5D:BE:66:73:A0:1D:81:5C:F0:1A:F9:6B:3E:9E
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039823FECCD316C256728CA635E60EA08
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/bLuqbmdRXb5mc6AdgVzwGvlrPp4.roa
Signing time: Tue 25 Aug 2026 15:20:32 +0000
ROA not before: Tue 25 Aug 2026 15:20:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137235
IP address blocks: 176.53.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:3f:ec:cd:31:6c:25:67:28:ca:63:5e:60:ea:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6cbbaa6e67515dbe6673a01d815cf01af96b3e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:81:2f:76:48:bf:7e:dc:bc:eb:b1:78:40:
5e:2d:dd:4d:6d:f0:ef:0d:19:af:14:99:35:7e:e7:
58:b1:a0:d4:f6:a2:89:f8:d2:7c:44:26:96:4c:6f:
70:41:71:a2:4a:c0:28:04:17:b4:07:f9:a9:44:14:
bb:52:80:d3:6d:13:87:c1:b0:d5:84:3e:7e:64:a6:
d7:55:e1:e3:83:e1:f1:81:e5:ce:c9:ec:a1:10:d3:
97:d9:7c:d8:3d:35:f5:31:e6:6e:af:12:20:5d:d0:
ed:31:34:7a:20:3e:92:7d:50:74:70:30:4d:70:67:
41:cf:d7:fb:fd:57:9a:f1:97:8f:e3:b1:eb:38:79:
d3:f2:78:8f:db:fd:df:be:cb:22:ae:32:91:79:8a:
ed:f5:47:52:83:57:07:65:71:34:b8:36:27:c7:3a:
0c:6a:10:bd:80:a1:6c:3e:04:53:7f:fb:1a:b6:85:
b2:fe:63:95:64:73:c0:e9:1d:a1:b5:98:dd:e8:e0:
b4:f8:28:3f:86:0b:93:ba:41:e7:97:25:48:13:da:
ef:85:ee:00:c8:ab:47:79:67:b2:bd:7d:12:b7:61:
2a:dd:16:63:15:1a:f4:a1:1d:5e:e3:7a:bf:ed:2e:
7a:78:52:79:6b:4a:28:81:13:09:16:a0:63:53:80:
c9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BB:AA:6E:67:51:5D:BE:66:73:A0:1D:81:5C:F0:1A:F9:6B:3E:9E
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/bLuqbmdRXb5mc6AdgVzwGvlrPp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.168.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:1a:3e:f9:55:b3:d2:ae:b6:fa:44:1b:33:2f:39:69:ba:09:
45:d1:67:bd:39:fc:49:01:93:a3:ca:59:b9:84:43:ad:ea:91:
a4:44:3f:91:05:be:9b:3f:fb:2e:d7:07:c3:57:84:2f:50:35:
be:dc:07:a3:16:bb:31:22:99:ae:7b:0a:ef:ed:e1:ef:c0:87:
40:3b:0a:ae:2a:57:22:a9:1e:54:23:05:81:58:76:a0:62:67:
ab:dd:bf:72:d8:8f:4a:0f:99:6e:16:67:01:a2:10:09:93:b9:
ad:53:29:9b:3b:c7:b7:6b:79:e4:e0:c7:39:27:1e:e3:91:48:
1c:38:cb:90:a1:e1:04:b1:30:4b:16:61:cb:7a:33:cf:38:14:
a9:05:e1:d1:19:e9:e6:fd:b3:68:a4:23:88:06:5f:e8:07:87:
9c:9a:48:0f:89:32:1a:a0:28:ca:3c:67:20:2c:f0:a5:57:a3:
7e:49:1b:fe:2a:30:e7:e7:b7:56:a8:a6:97:d8:81:7d:bc:dc:
3c:d4:25:8c:f2:06:e7:b0:93:e2:90:a8:66:2d:62:11:62:a6:
c7:a3:ab:ce:6e:a0:ac:12:50:33:14:d9:35:5d:05:c6:87:3e:
41:6f:0b:59:08:f0:55:f0:0f:13:67:8b:51:2c:9d:bd:fd:e8:
6f:cc:3b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:21 2026 by rpki-client