Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/iDD4Nln9qRKJweuOV_-EPnh3jog.roa
File: iDD4Nln9qRKJweuOV_-EPnh3jog.roa (raw, json)
Hash identifier: cRe3/aNWa/fyFGFP0PkfH4uXkYdPLhrsQjBk/FWL9wQ=
Subject key identifier: 88:30:F8:36:59:FD:A9:12:89:C1:EB:8E:57:FF:84:3E:78:77:8E:88
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398243FBBFEC8D7A7A8D4EA71C7D2EE5
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/iDD4Nln9qRKJweuOV_-EPnh3jog.roa
Signing time: Tue 25 Aug 2026 15:20:33 +0000
ROA not before: Tue 25 Aug 2026 15:20:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198486
IP address blocks: 176.53.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:43:fb:bf:ec:8d:7a:7a:8d:4e:a7:1c:7d:2e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8830f83659fda91289c1eb8e57ff843e78778e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e2:55:61:c4:8a:24:06:7c:af:ae:40:38:78:
03:38:3e:26:1a:fd:d5:f4:77:f1:ed:a1:08:bc:15:
b5:0b:5c:a8:28:75:ce:53:9c:c9:0d:23:8f:0c:97:
65:4e:bd:a5:53:df:0a:a5:58:4d:e3:de:d8:29:21:
f1:b4:b4:0d:06:ec:94:a6:05:5b:2a:1a:32:51:ad:
f1:cc:58:90:4d:64:49:43:4d:7a:89:28:96:dd:59:
cf:46:f7:76:f6:37:11:f2:8e:05:40:af:6a:6b:d2:
f3:9e:4f:2e:4c:4c:42:4d:60:51:c4:fe:d2:f4:26:
d8:4d:dc:4d:d3:0b:6e:f2:07:8d:cb:3d:79:39:2e:
a9:f3:fc:27:9b:e4:92:16:b8:43:31:d2:88:eb:75:
a4:a7:62:89:16:72:5d:65:c2:7e:b4:89:6e:30:48:
87:7b:85:5a:60:e6:5d:4b:a6:7a:ab:53:13:23:89:
23:ba:2c:4f:9c:03:8b:08:c9:c5:c5:c6:aa:d2:ac:
66:ca:af:b9:b7:a0:17:89:02:43:c1:bb:d9:b3:b5:
24:92:e5:94:4f:e0:47:2b:0b:10:ac:04:4e:5d:59:
86:3c:af:e4:49:bb:85:4b:69:e5:d1:c3:cb:ac:f3:
6f:3b:66:e8:b5:b5:a6:f8:11:0e:de:cc:a6:78:64:
b1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:30:F8:36:59:FD:A9:12:89:C1:EB:8E:57:FF:84:3E:78:77:8E:88
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/iDD4Nln9qRKJweuOV_-EPnh3jog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.158.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ea:08:6d:de:55:29:e4:df:41:4b:0f:df:d1:11:50:b6:49:
39:c0:52:6f:61:a7:91:3f:84:30:80:0f:b6:fa:ff:09:b0:a6:
47:db:ae:13:de:93:b2:ce:70:44:93:ee:d6:2e:8e:26:3c:5e:
93:db:78:95:18:0d:e9:b8:03:cd:05:8d:d5:a2:0c:e2:48:25:
d6:e0:4d:03:4d:69:04:1c:9d:41:80:46:ca:c2:97:7a:4b:49:
f1:ae:49:0e:0e:e9:56:b2:cd:f9:5a:29:e1:07:1a:29:6b:3d:
17:6e:8c:3a:16:ea:4f:9c:51:bd:23:d3:2f:a4:1b:8a:c4:aa:
84:23:08:1c:43:1f:68:30:c3:ed:52:49:60:41:67:af:b1:61:
d0:cb:88:a6:b6:a7:d1:1d:e6:30:b3:ee:e7:90:23:9d:e7:e4:
ee:c0:7e:e9:16:f5:91:9c:2b:c0:64:39:09:6f:3d:fb:e1:df:
33:d2:74:01:00:e2:84:4d:14:7c:b6:be:f1:32:6e:c8:45:e4:
13:8d:b1:a0:1c:c7:12:1f:1f:6c:61:a3:49:9d:0d:57:24:ec:
b9:21:54:f4:b5:07:3d:98:a1:51:da:a6:a8:16:18:c9:1c:3c:
2e:dc:50:5a:88:37:67:ca:d4:68:66:2c:d0:bc:39:55:ac:1c:
4f:3d:be:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:03 2026 by rpki-client