Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/pAVPqlXFTPa4mSJjAcozZ6GrPMg.roa
File: pAVPqlXFTPa4mSJjAcozZ6GrPMg.roa (raw, json)
Hash identifier: 7koDnMDoY0sB7Vt6itHNZCx8R3ahim35YfcZqeqRvVk=
Subject key identifier: A4:05:4F:AA:55:C5:4C:F6:B8:99:22:63:01:CA:33:67:A1:AB:3C:C8
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039824387C30D25D4D506419D11E87D9B
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/pAVPqlXFTPa4mSJjAcozZ6GrPMg.roa
Signing time: Tue 25 Aug 2026 15:20:33 +0000
ROA not before: Tue 25 Aug 2026 15:20:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198376
IP address blocks: 84.54.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:43:87:c3:0d:25:d4:d5:06:41:9d:11:e8:7d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4054faa55c54cf6b899226301ca3367a1ab3cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:77:8b:e7:69:72:cd:01:58:64:eb:e7:ef:
07:f2:dd:d8:40:ea:e8:8a:72:64:87:ba:3e:c7:7f:
3c:1a:d3:9d:6e:49:d6:41:79:7c:82:99:cc:2a:03:
23:d6:74:7c:59:3e:67:85:93:f6:1a:37:5a:e0:23:
ab:9f:c7:ae:17:fe:f0:cf:4f:31:c3:42:a5:f5:62:
b5:3a:53:29:ab:08:51:7d:06:85:1e:76:3a:41:10:
42:03:f6:ac:ac:82:07:03:0a:7c:68:d1:9b:a2:a8:
08:80:54:b9:6c:17:19:0c:9a:b2:54:80:ba:c8:08:
9a:82:42:6f:58:26:62:a6:01:65:4a:5d:fe:ed:37:
74:21:05:03:10:97:5c:18:37:c9:08:51:83:fb:13:
f0:26:43:2f:2e:c9:fb:dd:8a:99:40:7a:e6:a2:94:
8a:75:74:26:ff:17:6d:7f:97:71:1f:15:21:ef:30:
84:5a:aa:ee:0f:e2:2b:d9:aa:40:af:80:c7:3b:eb:
e3:c6:8b:8a:21:9e:b8:89:dd:20:91:65:a5:86:5b:
6a:c0:cb:86:fe:ed:33:52:a4:4b:58:be:92:86:e2:
c2:36:52:8b:44:47:af:50:d3:a7:15:5d:e3:41:54:
7b:1f:a1:b6:07:8c:29:67:f6:06:ce:fc:64:fa:23:
60:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:05:4F:AA:55:C5:4C:F6:B8:99:22:63:01:CA:33:67:A1:AB:3C:C8
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/pAVPqlXFTPa4mSJjAcozZ6GrPMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.0.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:a1:15:3c:53:46:52:cf:15:88:87:61:32:92:3e:9a:34:fe:
8f:8e:f2:a9:9b:ad:3e:ab:58:c5:24:80:9a:44:c7:0c:02:d1:
a3:04:51:2c:83:48:ba:20:f5:c6:01:be:b7:d2:69:24:07:6a:
9b:9d:e0:7b:ff:7e:51:ab:ea:78:ea:89:2e:b7:99:ea:11:f0:
7b:66:fd:7a:91:c1:7b:4d:21:35:51:dd:31:4d:49:bc:8e:81:
41:21:23:d9:6f:2d:57:32:d6:84:75:5d:63:44:6e:21:32:52:
2c:2d:18:6f:af:92:d1:d0:fb:0b:06:96:38:b2:af:55:d4:7a:
08:58:5b:76:8e:c6:46:9d:f9:66:5f:c9:2f:77:75:59:b3:2d:
8c:f5:11:bc:24:43:2d:31:a6:d6:62:55:af:f1:6b:89:1b:0c:
8c:30:87:3d:10:71:30:ba:77:db:28:8f:77:2f:59:a0:15:c4:
27:67:fb:c6:eb:a3:c3:8c:a9:4e:7c:46:a7:91:78:ad:24:52:
90:cd:69:89:fa:b5:26:81:c7:c1:66:d3:8e:ce:7b:e7:a3:4a:
31:45:d2:cd:74:86:91:63:78:35:0a:ee:a8:3b:6f:47:76:46:
3e:70:50:a9:d2:9d:07:a8:63:59:3a:1b:50:83:9d:3f:ca:04:
b3:b5:89:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:36 2026 by rpki-client