Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/ccpZ0VtBMIYbPnlSA6whlrDR2dU.roa
File: ccpZ0VtBMIYbPnlSA6whlrDR2dU.roa (raw, json)
Hash identifier: FlTdM+AB7LfRw+6Y8eVD73o/cbq78dkbcCxH01rk5dA=
Subject key identifier: 71:CA:59:D1:5B:41:30:86:1B:3E:79:52:03:AC:21:96:B0:D1:D9:D5
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0D2AB9C1F2BC40F4FC645540A24A8377B
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/ccpZ0VtBMIYbPnlSA6whlrDR2dU.roa
Signing time: Thu 24 Sep 2026 09:07:37 +0000
ROA not before: Thu 24 Sep 2026 09:07:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210574
IP address blocks: 141.98.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:ab:9c:1f:2b:c4:0f:4f:c6:45:54:0a:24:a8:37:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Sep 24 09:07:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71ca59d15b4130861b3e795203ac2196b0d1d9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:af:79:88:6b:61:5f:95:f0:7f:ec:38:c7:
4a:50:d2:e8:de:25:b9:b6:2e:b2:f4:e4:6f:b1:22:
2a:c2:60:82:c7:2f:48:2f:b1:30:cd:d5:35:24:62:
70:a8:8a:74:30:67:9b:ea:46:85:31:99:b9:51:d5:
9d:a0:e3:95:08:d5:63:33:56:d7:2b:1f:82:24:1b:
f6:a6:b6:db:38:ed:d9:2c:49:d3:8d:16:f1:af:e1:
2b:88:2c:4a:6a:6a:76:e1:27:ac:3b:f3:89:0b:de:
bd:06:6e:d9:b2:a3:56:46:1b:04:91:0a:c6:fb:eb:
84:34:e3:33:d8:cd:4a:52:e5:62:c7:f5:b0:e7:89:
a1:63:80:a3:25:79:f4:29:20:70:cd:14:a6:81:da:
10:46:41:a9:d4:23:c5:da:72:76:c5:01:1f:09:4e:
47:9a:00:5c:3c:c5:cd:b0:ad:ec:d4:a7:a0:75:0b:
69:c7:b5:18:f1:20:6b:ca:1a:9f:f3:b1:8b:52:15:
08:96:ad:53:96:3f:97:36:99:f7:b7:b3:1a:9f:53:
d5:dc:37:03:d2:49:71:0b:91:20:ad:b8:16:e8:12:
c9:4d:0a:19:6d:e5:ec:4f:00:95:8f:8b:01:5d:b8:
e5:c8:6b:8c:06:5b:5d:98:1f:5b:f1:7c:38:11:27:
7f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CA:59:D1:5B:41:30:86:1B:3E:79:52:03:AC:21:96:B0:D1:D9:D5
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/ccpZ0VtBMIYbPnlSA6whlrDR2dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.115.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:13:7f:91:38:9d:ef:a5:43:3e:1d:20:ba:1c:2d:5e:96:25:
ee:5b:9a:f5:3c:ff:9c:20:d9:bc:4b:7b:73:f7:fe:9a:a5:cd:
87:8b:e4:3b:5e:92:d3:e1:dc:a1:07:00:2b:e6:b9:92:ca:cf:
dc:1b:8f:35:d1:f9:23:84:0b:74:06:59:ae:98:0c:85:a9:dd:
a5:60:ca:a5:1c:e9:e2:a3:2e:27:35:0f:24:c2:cd:86:88:94:
5e:52:dd:74:f8:03:9e:6a:ad:b6:1d:a3:c5:38:6d:a1:6a:42:
84:0e:0e:fa:d2:48:b7:55:e7:fe:d2:4c:74:f9:e2:95:e0:fc:
bf:40:eb:b1:75:fd:8e:c5:fc:41:11:1c:d9:22:ca:e9:19:e1:
b2:74:fb:fa:d2:80:a9:82:24:70:c4:a3:cb:3a:14:67:8b:46:
bf:d3:5e:82:34:e1:61:9a:6d:80:d4:0d:5a:51:a5:07:d2:a4:
05:e8:a6:11:81:fe:d3:53:c7:d6:dc:78:09:57:e1:9a:6f:bf:
88:43:53:7e:0c:ee:f3:cf:1e:53:51:af:b3:46:97:65:56:de:
f5:d0:04:e0:2d:aa:88:87:d5:3c:37:76:d1:f8:90:53:fe:67:
e7:39:d4:02:39:e1:15:2d:de:4d:f7:95:e0:4e:11:32:f9:06:
8f:03:1f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:00:51 2026 by rpki-client