Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/o-2GkkcYs9j7q_YQWdEMbyT8oFg.roa
File: o-2GkkcYs9j7q_YQWdEMbyT8oFg.roa (raw, json)
Hash identifier: 52QuEfwovi8Go66eXmtjdZLCNR/QNqMQkUMKK8B0jIk=
Subject key identifier: A3:ED:86:92:47:18:B3:D8:FB:AB:F6:10:59:D1:0C:6F:24:FC:A0:58
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398240FD16EDF22A535681CBA2D1D49D
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/o-2GkkcYs9j7q_YQWdEMbyT8oFg.roa
Signing time: Tue 25 Aug 2026 15:20:32 +0000
ROA not before: Tue 25 Aug 2026 15:20:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153622
IP address blocks: 193.32.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:40:fd:16:ed:f2:2a:53:56:81:cb:a2:d1:d4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3ed86924718b3d8fbabf61059d10c6f24fca058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:62:51:0e:7c:ce:df:86:7e:a4:32:c8:16:
31:11:b2:1e:64:1e:af:03:04:b8:a4:75:e8:7d:6b:
c5:85:d1:5a:93:a8:ae:0c:70:e6:48:dc:e6:48:1e:
3d:7c:63:be:fe:eb:ca:db:79:d3:f8:59:3a:e7:cb:
bb:0d:2e:f8:54:c0:0a:fd:d9:51:48:98:a4:97:54:
de:8c:22:19:a0:09:58:0c:07:a1:ec:fe:de:2c:c9:
29:eb:ba:98:33:fb:27:bd:21:88:9f:de:d8:68:8c:
60:f0:ad:c7:6c:5f:a1:78:82:ae:4c:79:32:4b:cb:
ee:71:82:51:60:93:2d:82:96:b0:6d:3f:f3:6e:26:
be:83:2f:bc:2d:4a:a5:78:02:8b:52:63:ac:84:2b:
87:bb:c4:48:e2:5f:2f:c6:4d:33:5b:b2:8c:82:8f:
0c:2e:77:74:e6:b0:1c:0d:58:71:a2:27:71:97:3b:
12:91:8e:06:e8:4e:fa:34:93:97:aa:c5:a7:be:59:
e0:b0:23:59:f1:98:e6:24:95:ca:71:28:23:87:05:
39:22:2a:59:75:77:5a:47:a5:b5:bf:ce:c6:81:6b:
87:a3:32:2b:de:72:1c:ae:bb:93:6c:da:c1:c7:aa:
b1:13:a2:e4:4e:e2:22:a2:be:97:ed:43:58:1d:e6:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:ED:86:92:47:18:B3:D8:FB:AB:F6:10:59:D1:0C:6F:24:FC:A0:58
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/o-2GkkcYs9j7q_YQWdEMbyT8oFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.204.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:31:f0:e3:ef:70:ea:72:bc:5a:53:f2:76:57:7e:a0:c8:43:
96:ff:30:91:bd:0c:63:30:eb:cb:df:b9:3b:ac:55:41:da:91:
9d:5c:fc:15:20:d2:c5:a1:8d:a5:03:6c:da:ba:4f:f0:a6:6d:
99:df:7f:9c:f2:21:0e:04:1f:84:f5:cd:b4:6a:37:26:ff:45:
3c:78:1e:79:45:a5:03:46:cf:00:4f:34:17:4a:04:33:d1:c5:
ef:07:45:b3:6a:ab:f6:b7:46:26:7b:f6:9d:02:93:b5:8a:2c:
80:bf:1a:36:d9:aa:1c:65:43:5a:ae:d5:c7:de:04:22:aa:cf:
6d:4c:ee:d6:3b:a2:ac:a6:07:13:58:1a:3f:b5:45:8e:e3:27:
26:97:4f:98:ee:3e:91:51:46:e2:b0:1e:ce:5d:f6:2a:a2:41:
b2:92:b2:76:9c:37:d4:96:de:f1:df:86:fc:44:c1:78:29:f6:
4b:9f:fe:3a:d2:a7:31:d8:d6:16:b7:92:51:f2:f8:5e:d0:3e:
2e:c3:15:e9:c5:b2:68:ab:5e:92:07:41:81:34:58:65:85:a2:
da:f8:c0:f5:a6:b4:80:c8:2a:b7:90:07:8f:0a:f2:2a:29:0f:
02:fc:5f:56:fb:3d:39:09:33:5a:f4:05:39:68:92:46:21:e9:
83:04:26:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:13 2026 by rpki-client