Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/m3boLKrTGCdCqg9QJZDcx0JOJY8.roa
File: m3boLKrTGCdCqg9QJZDcx0JOJY8.roa (raw, json)
Hash identifier: mOI+p4wZvAcqKzsPf44yeZYzAPTHK1I+xqnu4zVBt6M=
Subject key identifier: 9B:76:E8:2C:AA:D3:18:27:42:AA:0F:50:25:90:DC:C7:42:4E:25:8F
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A03982318F2153C2FA4489C36104BE6015
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/m3boLKrTGCdCqg9QJZDcx0JOJY8.roa
Signing time: Tue 25 Aug 2026 15:20:28 +0000
ROA not before: Tue 25 Aug 2026 15:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9121
IP address blocks: 212.87.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:31:8f:21:53:c2:fa:44:89:c3:61:04:be:60:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b76e82caad3182742aa0f502590dcc7424e258f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:19:c2:ce:7b:e1:29:d5:d0:9b:0f:ab:ea:
56:be:f6:f2:f1:ae:82:0a:48:12:d4:b0:09:68:95:
1c:35:ed:1d:df:b1:7b:bb:fc:47:b9:b7:88:b9:95:
9d:75:d9:90:07:e7:3d:b4:3c:e5:69:02:7a:df:c0:
1c:d1:3e:66:65:9c:89:ca:f3:05:fa:cd:0c:0e:c7:
be:32:66:80:ff:4e:90:4a:98:4d:b2:27:78:56:9a:
77:6e:d1:f3:74:ea:40:56:ca:8c:9d:49:ef:02:fb:
46:59:77:79:a2:a2:3c:9a:50:36:2d:54:34:1e:e6:
b9:04:5f:c1:5a:67:fb:ed:60:88:f8:4c:41:0c:73:
58:f3:e7:f4:ca:e1:89:3f:ab:9f:c6:05:92:c1:cc:
97:13:27:5a:b8:60:57:cd:a7:e6:40:4a:fe:62:d9:
3d:86:0c:de:89:0e:28:20:49:92:98:c8:1c:b5:99:
4f:f3:dd:d1:7b:1c:f4:75:91:82:a7:e3:6d:d3:21:
34:4d:e3:0b:45:05:89:b0:42:9a:63:63:59:25:f8:
c5:87:17:be:6a:5c:51:70:b9:39:13:68:82:8a:37:
a2:3a:00:58:8b:27:96:de:62:f5:9f:9f:d4:7e:f7:
f5:9d:ae:0c:ed:e9:00:02:e5:6a:8b:df:c7:f8:f2:
a3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:76:E8:2C:AA:D3:18:27:42:AA:0F:50:25:90:DC:C7:42:4E:25:8F
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/m3boLKrTGCdCqg9QJZDcx0JOJY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.196.0/24
Signature Algorithm: sha256WithRSAEncryption
65:68:00:da:fc:a2:ee:34:0e:ae:9a:d3:b9:33:70:53:db:7d:
88:11:41:5b:64:c6:1a:d8:c5:fe:dc:78:2c:87:aa:9b:8f:f7:
b0:bf:83:f4:34:9e:3f:99:91:95:27:f1:18:bd:34:19:7a:dc:
cd:35:10:a3:3f:39:2f:d2:cd:94:55:e2:73:e9:d8:b6:15:28:
26:7d:ea:7b:1a:5f:01:9b:85:d8:41:35:5c:20:bb:78:87:6e:
77:b2:61:ae:6b:f7:a1:c4:f1:c5:97:c3:f6:88:39:7b:f1:28:
a6:ac:e7:47:dd:8d:83:08:9f:62:c2:4f:08:3f:cc:4f:8f:12:
70:af:da:96:4d:c3:54:93:f0:6d:78:09:44:d4:41:45:49:50:
82:b8:a3:2d:ec:04:37:9b:cf:63:d2:c2:6c:b0:75:7b:f1:f9:
6d:57:c3:03:15:43:1b:c2:cc:d5:63:61:d1:a7:ce:d9:d6:6e:
e2:b6:23:29:fc:c7:9d:31:95:5d:5a:f9:55:0a:d3:35:4a:df:
ae:7f:1e:ac:d2:ab:2a:22:04:55:56:be:54:d8:01:2b:17:da:
c5:b7:48:a4:76:1f:45:10:25:47:94:9f:85:01:20:3e:62:23:
15:02:ab:fd:fc:f9:4a:86:a9:97:33:9f:d5:48:da:35:65:52:
21:1a:69:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA5gjGPIVPC+kSJw2EEvmAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI1MTUyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Yjc2ZTgyY2FhZDMxODI3NDJhYTBmNTAyNTkwZGNjNzQyNGUyNThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl8Zws574SnV0JsPq+pWvvby8a6C
CkgS1LAJaJUcNe0d37F7u/xHubeIuZWdddmQB+c9tDzlaQJ638Ac0T5mZZyJyvMF
+s0MDse+MmaA/06QSphNsid4Vpp3btHzdOpAVsqMnUnvAvtGWXd5oqI8mlA2LVQ0
Hua5BF/BWmf77WCI+ExBDHNY8+f0yuGJP6ufxgWSwcyXEydauGBXzafmQEr+Ytk9
hgzeiQ4oIEmSmMgctZlP893Rexz0dZGCp+Nt0yE0TeMLRQWJsEKaY2NZJfjFhxe+
alxRcLk5E2iCijeiOgBYiyeW3mL1n5/Ufvf1na4M7ekAAuVqi9/H+PKj0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJt26Cyq0xgnQqoPUCWQ3MdCTiWPMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvbTNib0xLclRHQ2RDcWc5UUpaRGN4MEpPSlk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FfEMA0G
CSqGSIb3DQEBCwUAA4IBAQBlaADa/KLuNA6umtO5M3BT232IEUFbZMYa2MX+3Hgs
h6qbj/ewv4P0NJ4/mZGVJ/EYvTQZetzNNRCjPzkv0s2UVeJz6di2FSgmfep7Gl8B
m4XYQTVcILt4h253smGua/ehxPHFl8P2iDl78SimrOdH3Y2DCJ9iwk8IP8xPjxJw
r9qWTcNUk/BteAlE1EFFSVCCuKMt7AQ3m89j0sJssHV78fltV8MDFUMbwszVY2HR
p87Z1m7itiMp/MedMZVdWvlVCtM1St+ufx6s0qsqIgRVVr5U2AErF9rFt0ikdh9F
ECVHlJ+FASA+YiMVAqv9/PlKhqmXM5/VSNo1ZVIhGmkU
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:56 2026 by rpki-client