Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/nBadWVy5NJ6XQH_wPzuMKNlltfU.roa
File: nBadWVy5NJ6XQH_wPzuMKNlltfU.roa (raw, json)
Hash identifier: ELidkWX1TT4gqLez0DqXaDUBpBM5IHi4FX6iJ1RurW8=
Subject key identifier: 9C:16:9D:59:5C:B9:34:9E:97:40:7F:F0:3F:3B:8C:28:D9:65:B5:F5
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A03982529AB1C40C8C9C8F48916CC96FB7
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/nBadWVy5NJ6XQH_wPzuMKNlltfU.roa
Signing time: Tue 25 Aug 2026 15:20:37 +0000
ROA not before: Tue 25 Aug 2026 15:20:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211851
IP address blocks: 37.221.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:52:9a:b1:c4:0c:8c:9c:8f:48:91:6c:c9:6f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c169d595cb9349e97407ff03f3b8c28d965b5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:4b:b1:e7:cd:73:65:95:0b:7f:c0:df:d4:
3e:14:8e:c3:77:8f:10:59:44:7a:fb:59:1c:c6:5b:
c3:d2:1c:45:8e:66:23:cf:28:10:e0:cc:81:be:81:
1c:4f:fd:89:c5:9b:d7:e7:ad:c6:d8:59:77:aa:95:
b2:40:9a:84:58:3a:82:5c:22:a6:74:b1:8d:ff:5e:
af:5b:22:db:e6:2f:e8:6e:5e:34:b4:90:76:0f:4d:
50:94:0f:c9:c7:cd:ac:f6:b3:db:35:b5:21:f0:f6:
06:d6:ac:b7:10:95:d4:70:72:a9:f6:95:52:a2:c8:
59:ac:6a:2d:55:40:08:8d:15:5f:60:6c:2c:53:47:
d6:60:c2:3d:c8:2b:74:59:ee:b3:30:a2:46:b4:b3:
c0:ce:05:c7:a8:8a:8b:2e:fb:e1:0b:f6:f4:84:86:
eb:f8:b4:df:50:84:ba:d4:d8:b3:1d:c7:4a:81:d7:
95:98:c7:d8:a4:d9:14:fc:aa:be:fb:d8:8c:d4:22:
8e:19:25:2a:29:f5:aa:4b:a8:35:a3:fb:01:1d:3c:
51:b2:3e:16:32:23:5c:74:98:e3:c8:b5:11:5b:12:
86:2a:fa:8e:c7:e4:f0:6c:b6:5a:29:63:b8:ca:67:
65:f3:1c:f0:a9:87:4b:fa:4f:3c:33:3e:db:14:de:
a4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:16:9D:59:5C:B9:34:9E:97:40:7F:F0:3F:3B:8C:28:D9:65:B5:F5
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/nBadWVy5NJ6XQH_wPzuMKNlltfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.76.0/24
Signature Algorithm: sha256WithRSAEncryption
19:c2:a9:7f:ad:c4:c2:03:f1:86:94:d2:77:af:1c:f3:23:86:
99:3a:c1:0c:04:82:c2:fb:f3:2d:3b:72:c4:e3:d4:86:18:e1:
2d:77:92:4d:a5:cf:b6:69:fc:96:73:24:1e:98:de:86:8f:d9:
89:77:37:a9:90:3a:e8:50:a8:2b:c9:e9:6c:7d:ef:9a:39:4c:
a8:07:f6:c7:0d:a8:1f:cd:da:9a:ed:45:ed:c2:b3:6e:a4:e2:
d9:2b:39:3f:27:6d:df:46:8c:7b:28:e0:86:b2:5c:cf:ec:0b:
69:e8:24:84:20:77:25:41:b0:d3:9a:c5:0d:9e:5f:13:ed:15:
cb:09:bb:1a:cf:93:46:91:45:4e:ad:5d:19:8b:18:cd:92:89:
f0:3f:2f:4c:09:c6:0f:f1:6b:33:a7:5f:06:00:dd:20:e2:90:
87:a7:0e:cf:4d:09:63:61:34:76:06:c2:f2:3b:e5:ef:78:f8:
bf:14:da:c2:70:70:3e:45:c8:1f:26:b9:3c:cf:9b:50:52:d0:
91:79:05:40:e3:79:7c:43:3b:8d:7b:39:55:50:dc:7d:6a:bd:
2a:f9:9c:34:f8:98:29:1c:a7:4d:fb:d4:7a:94:7d:13:73:38:
c5:a4:81:30:ff:ef:32:95:09:3c:40:e6:2f:47:8e:15:98:4f:
40:78:55:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA5glKascQMjJyPSJFsyW+3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI1MTUyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzE2OWQ1OTVjYjkzNDllOTc0MDdmZjAzZjNiOGMyOGQ5NjViNWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb9LsefNc2WVC3/A39Q+FI7Dd48Q
WUR6+1kcxlvD0hxFjmYjzygQ4MyBvoEcT/2JxZvX563G2Fl3qpWyQJqEWDqCXCKm
dLGN/16vWyLb5i/obl40tJB2D01QlA/Jx82s9rPbNbUh8PYG1qy3EJXUcHKp9pVS
oshZrGotVUAIjRVfYGwsU0fWYMI9yCt0We6zMKJGtLPAzgXHqIqLLvvhC/b0hIbr
+LTfUIS61NizHcdKgdeVmMfYpNkU/Kq++9iM1CKOGSUqKfWqS6g1o/sBHTxRsj4W
MiNcdJjjyLURWxKGKvqOx+TwbLZaKWO4ymdl8xzwqYdL+k88Mz7bFN6kCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJwWnVlcuTSel0B/8D87jCjZZbX1MB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvbkJhZFdWeTVOSjZYUUhfd1B6dU1LTmxsdGZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJd1MMA0G
CSqGSIb3DQEBCwUAA4IBAQAZwql/rcTCA/GGlNJ3rxzzI4aZOsEMBILC+/MtO3LE
49SGGOEtd5JNpc+2afyWcyQemN6Gj9mJdzepkDroUKgryelsfe+aOUyoB/bHDagf
zdqa7UXtwrNupOLZKzk/J23fRox7KOCGslzP7Atp6CSEIHclQbDTmsUNnl8T7RXL
Cbsaz5NGkUVOrV0ZixjNkonwPy9MCcYP8Wszp18GAN0g4pCHpw7PTQljYTR2BsLy
O+XvePi/FNrCcHA+RcgfJrk8z5tQUtCReQVA43l8QzuNezlVUNx9ar0q+Zw0+Jgp
HKdN+9R6lH0TczjFpIEw/+8ylQk8QOYvR44VmE9AeFXb
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:48 2026 by rpki-client