Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/tOxNGDUSMo8dtcSG8RonMB2fJwc.roa
File: tOxNGDUSMo8dtcSG8RonMB2fJwc.roa (raw, json)
Hash identifier: hwbyJbMutlNgG75df4HEEbBDgVTisfS0PXRab9ZTBco=
Subject key identifier: B4:EC:4D:18:35:12:32:8F:1D:B5:C4:86:F1:1A:27:30:1D:9F:27:07
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039825A8D41579B6C170F65514F348C75
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/tOxNGDUSMo8dtcSG8RonMB2fJwc.roa
Signing time: Tue 25 Aug 2026 15:20:39 +0000
ROA not before: Tue 25 Aug 2026 15:20:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218994
IP address blocks: 217.18.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:5a:8d:41:57:9b:6c:17:0f:65:51:4f:34:8c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4ec4d183512328f1db5c486f11a27301d9f2707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:e0:dd:cb:57:dc:15:cd:ea:5f:72:e5:f8:
d4:25:4b:f3:bb:24:83:83:7f:96:cd:aa:6a:61:17:
3a:ea:98:ec:8b:0b:3e:85:ac:11:1c:5a:1f:9b:09:
f0:7e:29:ee:1d:92:17:be:b6:80:de:90:e6:f9:13:
aa:b7:44:7c:ce:0a:cc:2f:b6:62:13:7f:00:e1:a3:
c5:56:81:f9:0c:a9:8c:89:14:97:f4:2a:28:41:44:
27:cc:a0:ec:db:e4:9f:0a:a0:78:36:cc:4a:3d:53:
0c:a5:cc:c1:2a:60:65:ce:4d:81:bb:f6:f3:2c:13:
d0:04:76:01:06:0f:37:4a:77:b2:e5:4f:2c:1b:6a:
0c:51:ec:99:67:a7:d7:81:a7:dc:17:ab:f9:c4:ae:
08:e5:2d:55:79:e4:d1:98:4f:93:84:fb:f5:66:e4:
a5:d4:d6:b1:d4:8a:61:5d:7d:0f:c5:c3:9f:c8:e7:
31:61:60:12:92:a3:8d:3e:ea:1e:86:eb:b2:ae:93:
19:73:d9:34:69:98:29:50:a0:e8:d7:73:ed:c9:16:
6d:8e:7b:5e:ef:ce:72:6a:21:b7:58:60:ca:8c:70:
be:ca:26:d4:c8:62:34:92:e9:e2:44:c2:22:f5:be:
04:9f:63:59:bf:e6:81:b7:f7:20:d1:c3:b8:5e:e6:
bb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EC:4D:18:35:12:32:8F:1D:B5:C4:86:F1:1A:27:30:1D:9F:27:07
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/tOxNGDUSMo8dtcSG8RonMB2fJwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.211.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:e8:5e:04:8b:cd:03:a3:5c:ff:04:98:f7:94:7c:eb:be:61:
e2:cc:c8:ea:fb:f4:57:99:39:64:4b:ac:a9:28:66:b4:2a:d8:
b0:a1:80:67:91:81:97:f4:f3:6b:7d:66:64:cc:a1:66:27:4c:
c3:22:d5:a7:f7:89:90:14:2a:51:e2:bb:d6:15:d3:64:86:df:
28:f7:a1:82:3f:5b:ec:f2:34:a2:03:af:9b:e4:7e:8d:78:ae:
b2:b0:bf:03:cf:77:f9:67:0c:99:17:99:36:3e:c1:ac:d4:b6:
77:19:f5:bd:df:15:68:2a:c0:19:14:79:2d:04:5d:ac:a8:75:
10:6e:c7:e0:b9:7a:d0:5d:06:d4:93:4f:2d:c4:1b:7f:e7:e2:
00:dc:53:fb:c4:38:e3:73:c2:5d:47:7c:37:52:bf:b7:11:bb:
90:ab:84:bd:b4:48:d5:24:9d:07:f7:39:7e:d3:2e:57:93:87:
ec:e7:d2:8a:ec:b2:77:ee:97:9d:e5:7d:2c:c7:3e:6a:92:c7:
d4:02:27:14:63:cf:e3:3e:f9:ee:87:ef:10:00:e9:f1:6c:da:
22:33:38:2f:ce:31:57:8c:e9:39:fe:62:ef:8b:b8:15:b6:32:
ae:c8:78:0f:e0:90:bb:48:0b:b7:1c:4d:56:61:c2:a9:d6:cf:
a5:8f:d2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:25 2026 by rpki-client