Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/k1-ih1D0GQLuTTs0iuCqmx03OOU.roa
File: k1-ih1D0GQLuTTs0iuCqmx03OOU.roa (raw, json)
Hash identifier: msP1H2pVU2rZkyaFN/po4u5uhSzxHks/Ui5KhccvcZw=
Subject key identifier: 93:5F:A2:87:50:F4:19:02:EE:4D:3B:34:8A:E0:AA:9B:1D:37:38:E5
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039822FC33A13AAF9B56B53CC3FD714BE
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/k1-ih1D0GQLuTTs0iuCqmx03OOU.roa
Signing time: Tue 25 Aug 2026 15:20:28 +0000
ROA not before: Tue 25 Aug 2026 15:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.171.246.0/24 maxlen: 24
188.119.69.0/24 maxlen: 24
193.32.207.0/24 maxlen: 24
193.187.108.0/23 maxlen: 24
193.187.133.0/24 maxlen: 24
193.187.134.0/24 maxlen: 24
212.115.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:2f:c3:3a:13:aa:f9:b5:6b:53:cc:3f:d7:14:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=935fa28750f41902ee4d3b348ae0aa9b1d3738e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7e:cc:17:85:84:89:01:48:16:06:07:00:da:
c3:34:5f:93:06:0b:9b:90:d1:5f:04:eb:e2:45:3e:
04:74:96:5e:de:27:45:bd:01:a3:4d:fa:83:12:d0:
57:3f:25:00:ec:b2:0f:e4:6b:0f:78:5e:ee:5a:1a:
ef:b8:e4:08:49:76:cb:fd:c6:c7:71:83:c0:41:5c:
80:e8:07:2b:81:27:51:e7:a1:47:58:7a:32:bd:01:
b7:2b:d0:96:43:7d:8b:7a:9c:02:52:1d:85:27:09:
9f:58:54:77:d6:25:91:34:2a:83:52:0d:70:e3:9c:
34:ac:cf:81:4b:55:fe:f8:04:4a:1d:01:15:e4:91:
81:9b:6d:ec:23:8c:be:c2:82:b9:50:ff:38:fa:5c:
75:06:34:d9:08:88:17:ad:be:6b:c6:ea:42:27:ed:
43:64:54:b4:12:fc:c0:a1:22:24:c5:d4:44:6e:f5:
76:54:05:14:0e:20:25:17:b1:62:4f:49:9e:3d:90:
5f:39:af:f0:b5:60:03:92:67:9d:ba:e6:6e:65:f7:
c5:53:3e:f4:d7:77:c8:55:fb:36:3a:2c:5d:a5:1c:
52:50:78:88:99:15:25:9a:a6:14:77:03:3e:8f:00:
ce:c8:2d:2c:07:c0:4b:e9:0a:82:01:28:cf:96:29:
da:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5F:A2:87:50:F4:19:02:EE:4D:3B:34:8A:E0:AA:9B:1D:37:38:E5
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/k1-ih1D0GQLuTTs0iuCqmx03OOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.246.0/24
188.119.69.0/24
193.32.207.0/24
193.187.108.0/23
193.187.133.0-193.187.134.255
212.115.102.0/24
Signature Algorithm: sha256WithRSAEncryption
95:1a:4e:d9:24:4d:35:3e:8f:d5:c4:03:5c:b0:2e:2b:06:d9:
e0:3a:09:2e:5e:9b:b6:d9:00:c1:3a:dd:fe:ef:78:ba:48:e0:
18:07:23:83:ce:ed:88:95:b6:1a:82:a7:f9:39:d1:63:2b:b7:
d4:3e:f4:ee:5e:04:6d:d8:7c:47:91:ea:b5:34:7a:72:1e:d2:
97:9b:49:1f:13:33:da:83:ab:b5:97:ac:31:8b:f4:94:a1:ed:
c0:3b:f1:be:2b:61:d0:92:04:34:ad:45:61:86:22:6f:3a:fe:
00:8a:77:4c:fc:db:61:c6:bc:68:c5:21:cd:a5:6d:e9:50:77:
15:06:87:af:76:da:9b:b2:83:9a:fa:4b:06:2b:55:e8:3c:50:
2e:74:61:00:9f:4b:65:76:e6:5c:03:b3:ad:40:19:fe:20:f6:
7f:67:fc:c3:b0:79:0b:53:9d:a0:b7:8c:08:85:d9:fb:61:de:
7e:95:3a:57:04:ac:a1:65:8e:87:3c:91:6c:d5:ba:0e:04:77:
2c:4e:2f:15:7a:77:78:00:f3:bf:e8:67:52:6e:86:ca:31:56:
bd:cf:95:21:a8:f5:a4:41:b1:00:c3:18:7d:19:80:4e:8e:ce:
56:7e:55:48:7b:f2:03:b6:a2:4f:fe:91:c7:1f:e6:dc:66:58:
47:be:80:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:01 2026 by rpki-client