Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/coD348xHSEi5F5BeS1NQvGd64ho.roa
File: coD348xHSEi5F5BeS1NQvGd64ho.roa (raw, json)
Hash identifier: zutJYvVEnWlA1ZaYUmL1Yvlm96OjSN0q1O1mafxi2o8=
Subject key identifier: 72:80:F7:E3:CC:47:48:48:B9:17:90:5E:4B:53:50:BC:67:7A:E2:1A
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039825D8530A1C218C6F1C60C08C53520
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/coD348xHSEi5F5BeS1NQvGd64ho.roa
Signing time: Tue 25 Aug 2026 15:20:39 +0000
ROA not before: Tue 25 Aug 2026 15:20:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274173
IP address blocks: 194.93.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:5d:85:30:a1:c2:18:c6:f1:c6:0c:08:c5:35:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7280f7e3cc474848b917905e4b5350bc677ae21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:37:de:2d:3b:88:d5:56:84:7b:b3:40:84:
ad:7e:3a:60:79:8d:15:b8:95:b3:b3:c8:d6:3f:68:
6d:cb:9f:8a:bb:81:c1:87:0f:7a:45:b8:2f:6a:b2:
98:93:7a:97:d3:3e:c6:4c:ba:b8:ad:57:bc:a0:7d:
21:7f:2d:10:c6:ba:74:d6:f6:14:b1:80:32:ec:30:
6a:28:ea:32:a6:bc:19:6e:b4:13:2f:94:26:f2:2a:
c1:5a:a3:41:d0:34:e2:18:51:69:6d:a3:79:6a:1f:
d9:64:c0:4b:6e:35:bb:52:a2:da:71:78:3f:fc:50:
27:68:70:8a:40:29:b6:70:24:bd:12:34:04:6f:76:
de:46:60:bd:1c:1e:6f:80:8b:8b:d9:94:62:1f:da:
a6:12:24:a7:5b:88:fb:2d:af:d9:5b:5e:02:ab:93:
79:e4:c9:ef:7e:37:a4:1d:c3:ba:62:d0:b5:59:25:
87:5e:99:6f:1c:a9:50:ff:51:3d:e9:1a:da:d7:ac:
99:96:4a:3a:c3:63:78:d7:fd:51:37:f6:93:96:6e:
d0:b3:59:b8:40:00:c7:d9:41:c6:34:0b:b4:4d:a1:
7c:f4:e1:37:36:9f:0f:ed:7e:82:91:a9:e2:14:57:
6e:7e:32:78:a0:65:38:47:56:02:72:94:b3:ab:55:
af:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:80:F7:E3:CC:47:48:48:B9:17:90:5E:4B:53:50:BC:67:7A:E2:1A
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/coD348xHSEi5F5BeS1NQvGd64ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.60.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:b4:6c:a1:1e:cc:79:ac:7c:d7:5b:2a:ab:9c:f4:86:cd:1c:
33:f5:ef:64:96:59:ac:18:3a:45:04:d3:77:4f:f8:d1:d9:62:
2c:e4:30:a8:30:11:d1:32:83:ea:96:70:0a:d8:42:5f:a4:e9:
c5:19:ac:74:7e:fd:bb:75:e5:a8:80:8a:cd:eb:33:7b:24:1f:
75:7c:49:dc:6d:f8:d9:2e:58:5b:a8:8a:fe:ee:44:c7:fb:e5:
72:5d:9a:42:85:ed:aa:0d:e4:d9:35:1e:89:22:fa:7d:2d:69:
6f:be:a8:e9:30:41:2e:af:1d:2f:f9:95:9c:cd:53:aa:d4:6a:
52:c7:b3:1f:84:22:0f:e5:c2:01:e5:b9:ba:d7:52:72:c3:ab:
1b:24:a7:92:86:05:bd:1b:72:db:44:9b:bd:f6:05:a6:65:55:
3b:96:54:7a:be:d0:fd:8d:be:1b:92:a7:41:ae:b9:84:89:47:
0d:fb:e7:09:25:f3:7e:35:0f:bb:6e:12:5e:1d:38:44:47:c6:
81:75:e7:8d:44:69:bc:3d:12:ac:d8:75:0a:01:e5:96:63:24:
60:c1:8f:70:44:9a:9b:51:0b:77:2f:cd:a2:ca:96:67:b3:f7:
ae:10:78:cd:98:54:9e:30:30:c2:33:d7:80:3a:ee:9f:09:1a:
aa:37:dd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:27 2026 by rpki-client