Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/qGtMgwfZoxZ9T7j096NnC0yY-cY.roa
File: qGtMgwfZoxZ9T7j096NnC0yY-cY.roa (raw, json)
Hash identifier: WTk8ScPAAnSaQu4ATpFgL2eiQwYMrcwIrxDQBGBCC48=
Subject key identifier: A8:6B:4C:83:07:D9:A3:16:7D:4F:B8:F4:F7:A3:67:0B:4C:98:F9:C6
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398245DCA7DFA0EF7B33ECA7ACB7C571
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/qGtMgwfZoxZ9T7j096NnC0yY-cY.roa
Signing time: Tue 25 Aug 2026 15:20:33 +0000
ROA not before: Tue 25 Aug 2026 15:20:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200193
IP address blocks: 5.133.100.0/24 maxlen: 24
193.111.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:45:dc:a7:df:a0:ef:7b:33:ec:a7:ac:b7:c5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a86b4c8307d9a3167d4fb8f4f7a3670b4c98f9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6b:82:96:a6:3b:ff:a6:63:00:50:11:81:49:
12:7a:ad:07:34:2f:24:a1:b6:fe:4a:b6:7b:38:f3:
44:c6:14:33:4d:20:83:e3:5e:39:68:07:b9:17:d9:
4a:4a:d4:ab:0f:2b:73:4e:9c:a3:86:43:a1:31:1d:
4f:4b:41:72:4f:a8:a5:4a:f9:c8:76:4e:f3:9c:e6:
19:bc:ea:b4:2f:31:f2:e6:11:61:fe:99:92:cd:13:
10:b5:45:83:95:4c:f0:3e:84:2e:f4:33:c0:f7:30:
31:0e:2d:1a:40:98:7a:e0:15:ec:c3:58:54:a5:24:
ba:c5:43:f0:74:b1:ad:91:d5:dd:46:c4:45:76:12:
37:d5:91:d0:68:4e:c3:91:a5:6d:8d:3b:50:df:8d:
49:ee:18:6c:5c:5c:da:45:2b:5c:fc:e9:fd:8c:5a:
53:4e:8d:ca:e9:bb:53:5c:96:94:b1:7c:52:2d:f6:
e3:6a:2d:85:be:f3:4a:47:72:7d:f9:5a:d1:4c:01:
45:6f:81:f6:7c:98:d6:e5:f9:b1:b4:59:ca:19:03:
20:e2:b0:03:f6:e9:c9:08:f1:db:48:ce:5b:41:41:
23:da:31:5c:0b:af:c4:ec:58:c0:21:86:25:61:66:
31:97:e4:57:19:f7:6e:c0:82:64:dd:98:cd:c4:ac:
c9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6B:4C:83:07:D9:A3:16:7D:4F:B8:F4:F7:A3:67:0B:4C:98:F9:C6
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/qGtMgwfZoxZ9T7j096NnC0yY-cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.100.0/24
193.111.76.0/24
Signature Algorithm: sha256WithRSAEncryption
09:dd:9c:80:ad:2b:6c:c6:37:8f:0b:c8:1c:37:b0:7c:29:62:
5a:f9:cb:e5:0e:db:2f:2c:d2:f4:3a:b9:95:a5:4f:46:dc:ab:
90:6b:47:d0:d2:ae:e7:40:19:3b:fa:17:fd:c9:6d:ab:a1:a0:
d8:c5:27:7e:e5:dc:70:de:81:fc:fc:05:dc:c5:a0:f1:cd:6c:
16:2a:3a:db:f4:17:c1:b4:29:a7:40:f6:d7:8c:45:74:67:52:
c6:c9:92:df:f2:47:ba:0b:46:d3:b2:74:de:f7:83:79:6f:e8:
d5:ae:98:29:df:e8:40:31:01:81:61:9a:bb:bb:1d:eb:f5:f4:
75:80:c1:76:5a:e3:bf:a7:9f:53:89:f0:93:18:5b:ee:30:67:
e8:d7:ee:9e:99:b6:fb:4b:98:a0:69:f1:04:ee:a1:30:d3:43:
2e:a2:37:35:57:91:0c:d7:06:64:78:2d:0b:b1:34:e1:41:8d:
1e:7e:16:ef:bb:f8:19:94:70:77:91:15:1d:07:9e:c1:74:c3:
40:a7:91:23:34:93:87:fa:da:fd:40:5c:f0:ab:5f:b5:96:60:
4f:69:b6:87:c6:ad:87:6c:bb:81:21:3f:50:f7:5b:bd:48:94:
52:a8:ed:bc:c2:03:ae:48:a5:57:61:86:8c:ac:06:97:33:6d:
79:0e:fa:3f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaA5gkXcp9+g73sz7Kest8VxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI1MTUyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODZiNGM4MzA3ZDlhMzE2N2Q0ZmI4ZjRmN2EzNjcwYjRjOThmOWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymuClqY7/6ZjAFARgUkSeq0HNC8k
obb+SrZ7OPNExhQzTSCD4145aAe5F9lKStSrDytzTpyjhkOhMR1PS0FyT6ilSvnI
dk7znOYZvOq0LzHy5hFh/pmSzRMQtUWDlUzwPoQu9DPA9zAxDi0aQJh64BXsw1hU
pSS6xUPwdLGtkdXdRsRFdhI31ZHQaE7DkaVtjTtQ341J7hhsXFzaRStc/On9jFpT
To3K6btTXJaUsXxSLfbjai2FvvNKR3J9+VrRTAFFb4H2fJjW5fmxtFnKGQMg4rAD
9unJCPHbSM5bQUEj2jFcC6/E7FjAIYYlYWYxl+RXGfduwIJk3ZjNxKzJwwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKhrTIMH2aMWfU+49PejZwtMmPnGMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvcUd0TWd3ZlpveFo5VDdqMDk2Tm5DMHlZLWNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABYVkAwQA
wW9MMA0GCSqGSIb3DQEBCwUAA4IBAQAJ3ZyArStsxjePC8gcN7B8KWJa+cvlDtsv
LNL0OrmVpU9G3KuQa0fQ0q7nQBk7+hf9yW2roaDYxSd+5dxw3oH8/AXcxaDxzWwW
Kjrb9BfBtCmnQPbXjEV0Z1LGyZLf8ke6C0bTsnTe94N5b+jVrpgp3+hAMQGBYZq7
ux3r9fR1gMF2WuO/p59TifCTGFvuMGfo1+6embb7S5igafEE7qEw00Muojc1V5EM
1wZkeC0LsTThQY0efhbvu/gZlHB3kRUdB57BdMNAp5EjNJOH+tr9QFzwq1+1lmBP
abaHxq2HbLuBIT9Q91u9SJRSqO28wgOuSKVXYYaMrAaXM215Dvo/
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:02 2026 by rpki-client