Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/n7GtJkSuSV_6iahmK8dre5IUoro.roa
File: n7GtJkSuSV_6iahmK8dre5IUoro.roa (raw, json)
Hash identifier: 0JsDy9JHIrlC2KvwhSQ0+e098DNmv7kdDqzdhiLqw14=
Subject key identifier: 9F:B1:AD:26:44:AE:49:5F:FA:89:A8:66:2B:C7:6B:7B:92:14:A2:BA
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039823A8CB825675CADAF5D3808074F4A
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/n7GtJkSuSV_6iahmK8dre5IUoro.roa
Signing time: Tue 25 Aug 2026 15:20:30 +0000
ROA not before: Tue 25 Aug 2026 15:20:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47952
IP address blocks: 212.103.36.0/22 maxlen: 24
212.103.36.0/24 maxlen: 24
212.103.37.0/24 maxlen: 24
212.103.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:3a:8c:b8:25:67:5c:ad:af:5d:38:08:07:4f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fb1ad2644ae495ffa89a8662bc76b7b9214a2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:04:d4:79:b9:ca:6c:3a:3a:41:cc:a3:6c:
a0:fb:44:8d:17:92:7e:51:3f:26:25:62:62:1d:33:
07:9e:2b:8a:05:55:02:20:80:02:8e:d3:c2:0b:8b:
6a:68:11:a8:0a:16:05:b8:f0:04:a7:d8:d6:85:06:
24:9e:a0:af:9f:59:af:ec:c6:d8:c5:cd:e6:32:61:
72:6b:93:bb:ca:50:e5:cc:26:ba:ae:1f:57:4d:d7:
f1:48:a7:e1:29:3c:0b:b1:cd:b5:91:eb:38:95:6b:
13:67:02:ef:f2:ef:2e:bc:b9:09:9d:7b:c3:8e:a9:
7a:a5:0d:43:c4:35:aa:99:9c:5e:ac:2b:be:fe:77:
21:28:09:79:c4:74:0b:ee:ac:a4:23:74:7d:90:23:
88:3b:45:a6:29:70:52:95:b3:8b:2b:55:f3:d3:9c:
c0:c8:5c:0f:6c:10:2b:cd:35:76:0f:fb:1a:bd:f9:
bb:2b:d8:d5:99:db:61:86:f4:f7:ac:33:a1:9d:f6:
92:53:2f:f9:3e:ee:87:85:9a:f7:03:2f:d2:21:d7:
6f:37:74:4e:06:04:76:b9:f7:26:4c:49:52:1e:92:
c9:58:70:be:a0:08:c7:dc:f9:4a:eb:bb:d1:ab:1f:
35:8d:4e:1d:fc:77:38:7b:ea:4c:09:ff:58:c1:cf:
16:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B1:AD:26:44:AE:49:5F:FA:89:A8:66:2B:C7:6B:7B:92:14:A2:BA
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/n7GtJkSuSV_6iahmK8dre5IUoro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.36.0/22
Signature Algorithm: sha256WithRSAEncryption
17:5a:ac:2b:e4:94:c0:a5:c5:ad:33:db:8f:54:0d:74:f6:e0:
84:c0:fe:8a:f4:10:ef:4b:3d:f2:e9:f0:74:89:7a:8c:d9:c3:
a1:34:be:eb:8b:2a:e8:55:bf:04:37:1c:69:fe:25:47:24:7a:
84:b5:ed:74:1e:2f:10:44:ac:79:81:9b:40:03:9d:85:13:5a:
58:6a:84:db:5e:c8:61:15:d3:64:37:10:7e:7a:98:01:ff:a7:
b6:af:76:fd:8e:58:5c:79:00:bc:cb:aa:1d:4d:55:d9:fb:8c:
5a:78:1d:fc:a9:7e:37:80:8a:b5:e3:8b:28:46:44:f9:aa:eb:
81:0b:d7:22:b0:0c:0e:45:77:ab:fc:c0:60:9c:bb:e0:67:b3:
bc:90:0f:ec:a6:7e:00:65:ea:22:cd:e9:1d:da:bb:07:28:95:
5c:61:bd:dd:b7:ab:69:32:66:61:81:2b:2a:a0:b4:d1:89:81:
1c:52:71:8a:29:38:e0:c9:48:ba:47:8e:f2:57:f2:0f:d5:53:
6d:1b:44:85:80:ed:1b:8b:3a:e1:7b:b1:bd:b0:26:a1:f4:49:
bf:9c:83:fa:ea:27:18:c8:9a:73:18:b0:2c:c2:d5:47:fe:5f:
a5:b5:21:91:5e:29:33:ef:38:0b:19:b2:77:ed:f2:fb:db:f6:
c9:d5:29:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA5gjqMuCVnXK2vXTgIB09KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI1MTUyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmIxYWQyNjQ0YWU0OTVmZmE4OWE4NjYyYmM3NmI3YjkyMTRhMmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVkE1Hm5ymw6OkHMo2yg+0SNF5J+
UT8mJWJiHTMHniuKBVUCIIACjtPCC4tqaBGoChYFuPAEp9jWhQYknqCvn1mv7MbY
xc3mMmFya5O7ylDlzCa6rh9XTdfxSKfhKTwLsc21kes4lWsTZwLv8u8uvLkJnXvD
jql6pQ1DxDWqmZxerCu+/nchKAl5xHQL7qykI3R9kCOIO0WmKXBSlbOLK1Xz05zA
yFwPbBArzTV2D/savfm7K9jVmdthhvT3rDOhnfaSUy/5Pu6HhZr3Ay/SIddvN3RO
BgR2ufcmTElSHpLJWHC+oAjH3PlK67vRqx81jU4d/Hc4e+pMCf9Ywc8WCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ+xrSZErklf+omoZivHa3uSFKK6MB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvbjdHdEprU3VTVl82aWFobUs4ZHJlNUlVb3JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1GckMA0G
CSqGSIb3DQEBCwUAA4IBAQAXWqwr5JTApcWtM9uPVA109uCEwP6K9BDvSz3y6fB0
iXqM2cOhNL7riyroVb8ENxxp/iVHJHqEte10Hi8QRKx5gZtAA52FE1pYaoTbXshh
FdNkNxB+epgB/6e2r3b9jlhceQC8y6odTVXZ+4xaeB38qX43gIq144soRkT5quuB
C9cisAwORXer/MBgnLvgZ7O8kA/spn4AZeoizekd2rsHKJVcYb3dt6tpMmZhgSsq
oLTRiYEcUnGKKTjgyUi6R47yV/IP1VNtG0SFgO0bizrhe7G9sCah9Em/nIP66icY
yJpzGLAswtVH/l+ltSGRXikz7zgLGbJ37fL72/bJ1Snm
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:59 2026 by rpki-client