Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/dyneJ2UB4VOcoNlcdcGV5V-jrv0.roa
File: dyneJ2UB4VOcoNlcdcGV5V-jrv0.roa (raw, json)
Hash identifier: T5ASX6YL2LJg5q4+Abq6R7wSMklUnQBkIO5nUo0diCg=
Subject key identifier: 77:29:DE:27:65:01:E1:53:9C:A0:D9:5C:75:C1:95:E5:5F:A3:AE:FD
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398253D496D962862CD26F8D443EC64B
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/dyneJ2UB4VOcoNlcdcGV5V-jrv0.roa
Signing time: Tue 25 Aug 2026 15:20:37 +0000
ROA not before: Tue 25 Aug 2026 15:20:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212249
IP address blocks: 141.98.113.0/24 maxlen: 24
141.98.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:53:d4:96:d9:62:86:2c:d2:6f:8d:44:3e:c6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7729de276501e1539ca0d95c75c195e55fa3aefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6c:67:1d:f5:4f:10:69:31:49:ba:e9:3a:2f:
5e:cf:a5:fe:b4:e9:8c:5a:7d:09:4f:9e:cc:06:32:
ec:fa:49:f3:4b:83:85:a4:6c:a6:a7:a5:31:17:39:
6a:6f:38:c2:bb:54:a1:a5:2d:70:ed:7a:f8:de:f0:
ad:6f:0a:76:a8:8b:1e:94:ad:28:04:83:a0:36:54:
d8:22:58:72:92:f1:cd:98:4d:c8:63:9c:a7:29:8e:
0e:41:e9:92:33:28:f6:a5:4a:df:46:fd:e0:93:78:
35:d1:6d:89:e2:0b:73:f5:1c:2f:56:af:01:38:1e:
8b:bb:56:cd:c0:75:a1:7c:3f:8d:f8:63:29:86:ce:
ec:86:58:da:54:81:80:97:f9:0b:e8:29:b2:0e:d2:
6b:3c:30:4e:f9:0b:35:54:dd:f8:2f:93:f2:97:4e:
7e:a0:d0:64:3b:21:33:1b:3c:ca:2b:1c:1c:ea:2e:
3a:a6:a1:5c:17:10:d7:23:66:36:de:21:71:c2:46:
f7:f1:b2:74:bc:0f:f0:90:6b:46:ef:8b:48:58:c6:
17:00:0c:d6:8c:bd:13:66:20:af:67:7b:80:ee:65:
ac:71:b9:0b:d1:b7:ff:6a:c3:46:f5:d3:92:48:28:
46:ab:9a:81:27:68:52:29:b6:03:0d:29:39:bf:0c:
4d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:29:DE:27:65:01:E1:53:9C:A0:D9:5C:75:C1:95:E5:5F:A3:AE:FD
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/dyneJ2UB4VOcoNlcdcGV5V-jrv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.113.0-141.98.114.255
Signature Algorithm: sha256WithRSAEncryption
60:93:a9:c2:c1:92:59:a7:28:eb:ea:be:2b:9e:7f:19:9f:41:
74:4d:01:0e:b2:1d:9e:4c:75:9e:58:1c:cf:8c:74:e3:f6:31:
38:ac:8e:c8:86:a3:b5:ce:83:6b:b8:aa:90:33:a1:76:21:f0:
84:05:25:f7:aa:9d:d4:60:06:46:33:3a:b8:93:33:7f:03:1b:
2c:f2:88:ee:bc:11:f1:1a:1b:23:b1:3c:98:f9:ea:99:90:f3:
97:6d:b7:4c:ab:84:b5:f4:55:ac:13:72:50:58:c3:1d:da:dd:
2b:69:f6:91:aa:19:74:cf:ed:f1:50:b9:fa:66:ef:0b:fb:5c:
99:fa:5b:bd:3e:f6:8a:94:27:1d:c5:16:ed:89:ee:97:bf:f1:
63:67:4d:be:ab:42:51:b0:ce:0c:3a:c9:36:9f:32:bf:7a:3b:
b8:77:05:0f:f8:bf:23:b8:f3:e9:b9:06:30:2c:40:7b:24:b7:
9c:12:dc:65:35:41:c8:a4:d5:49:f7:eb:b0:76:f1:4b:71:85:
f2:f1:22:0d:b7:41:26:91:7a:c5:d0:ca:ec:cd:66:8d:35:08:
ff:00:40:00:a6:e7:f9:e4:df:a3:d5:d3:36:09:ff:61:4e:6f:
ff:29:7e:85:b5:fb:af:f2:46:ad:0f:25:e1:05:17:87:5a:15:
63:1d:c3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:12 2026 by rpki-client