Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/nAvrIT0cqM7Rs-xkJ8YnmH48goI.roa
File: nAvrIT0cqM7Rs-xkJ8YnmH48goI.roa (raw, json)
Hash identifier: TYAEu4sN61/+Z4X+KHWwKteWC/ojcEgVsKiM410shOQ=
Subject key identifier: 9C:0B:EB:21:3D:1C:A8:CE:D1:B3:EC:64:27:C6:27:98:7E:3C:82:82
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039825F25DDB5C7ACF15BDCB175225710
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/nAvrIT0cqM7Rs-xkJ8YnmH48goI.roa
Signing time: Tue 25 Aug 2026 15:20:40 +0000
ROA not before: Tue 25 Aug 2026 15:20:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 139.28.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:5f:25:dd:b5:c7:ac:f1:5b:dc:b1:75:22:57:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c0beb213d1ca8ced1b3ec6427c627987e3c8282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:8a:86:47:78:4c:4a:22:8b:5a:3f:95:a3:
e6:d6:cc:1d:57:e6:7f:e4:26:b7:3e:58:77:60:23:
7c:4c:1f:e5:f4:2d:97:5a:68:b7:c5:11:1e:b6:04:
7e:77:73:d7:16:31:0f:eb:60:5d:01:f5:03:a9:80:
e6:0d:e9:4d:05:d3:37:7e:b3:d7:8c:aa:fb:04:3e:
a3:7f:1c:77:20:d4:0a:ac:ea:84:63:84:bb:0a:9b:
fb:5c:d6:84:97:fb:2a:42:06:9e:9a:05:a8:df:3e:
4e:35:fb:98:82:69:22:af:fc:88:70:77:a9:b4:10:
24:39:ef:94:14:3e:a3:3d:00:bf:5a:3b:8d:09:9c:
8f:17:24:c4:16:15:d8:2d:be:3f:a2:b1:69:00:76:
6c:1f:d7:ff:a8:9c:4e:af:77:2b:4e:2a:ec:5d:5e:
d0:6f:db:20:36:0e:0e:24:68:0c:74:89:3e:bd:a5:
0f:aa:e2:61:23:20:01:de:e7:12:b8:21:90:02:06:
5a:01:29:0f:34:29:14:4e:cf:96:54:57:b5:07:2e:
db:76:dd:57:c2:38:33:5c:43:3a:09:77:f1:34:e3:
a9:90:80:20:78:8f:3a:01:9a:6d:ea:33:1e:34:5b:
c9:d7:2c:97:6a:25:a8:41:59:3d:23:ca:19:6f:b2:
53:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0B:EB:21:3D:1C:A8:CE:D1:B3:EC:64:27:C6:27:98:7E:3C:82:82
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/nAvrIT0cqM7Rs-xkJ8YnmH48goI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.50.0/24
Signature Algorithm: sha256WithRSAEncryption
98:86:aa:76:d7:a6:1c:17:53:9c:0e:35:de:b5:77:a7:f3:80:
20:f2:c0:1a:c4:50:53:95:c2:ee:3e:a0:76:d5:ab:01:67:38:
58:81:56:57:18:2d:dd:15:f4:bd:2f:30:17:9f:ef:a6:12:25:
39:65:98:e5:53:4d:bb:be:96:ed:e9:ca:03:f5:ce:8e:13:a8:
fd:bb:ff:c9:d1:42:e6:ed:a2:18:05:88:8c:e5:bc:1a:ed:17:
bc:e0:60:ae:a7:df:cd:13:7a:25:5e:e2:e8:ed:a8:b3:b1:23:
74:de:86:ef:f8:29:57:bd:0a:43:86:9e:32:7d:3d:e9:b0:77:
98:b7:af:f7:cf:c9:5b:da:f7:5f:6a:d2:be:d9:be:48:48:7f:
e1:96:a9:24:25:2c:fd:ff:71:a0:d2:76:4a:9d:92:1e:63:87:
1e:95:bf:2f:0b:15:e2:84:8a:74:c1:ab:aa:07:a0:fa:58:50:
b5:9c:82:93:ad:10:a1:48:7c:15:4e:23:52:75:23:c6:d6:78:
79:0a:0c:50:57:c9:b7:94:03:ba:a8:6d:52:c4:d9:ae:9e:2d:
d0:3c:9c:cb:e7:1f:dd:b1:d3:2e:64:1b:15:c5:18:ae:ef:0f:
ff:c2:17:d9:a2:e5:8e:5e:55:b0:3c:e6:76:02:22:2f:df:c2:
92:e2:d2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:07 2026 by rpki-client