Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/vXPC-3qfKJgMezCY2bbFON1W9dw.roa
File: vXPC-3qfKJgMezCY2bbFON1W9dw.roa (raw, json)
Hash identifier: cO4hXOUTXY8e1+euQSDvYDfZzGoSTEQeGu6G263Akjw=
Subject key identifier: BD:73:C2:FB:7A:9F:28:98:0C:7B:30:98:D9:B6:C5:38:DD:56:F5:DC
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398244E74D695106C8A98C81D791D5C4
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/vXPC-3qfKJgMezCY2bbFON1W9dw.roa
Signing time: Tue 25 Aug 2026 15:20:33 +0000
ROA not before: Tue 25 Aug 2026 15:20:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199074
IP address blocks: 212.87.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:44:e7:4d:69:51:06:c8:a9:8c:81:d7:91:d5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd73c2fb7a9f28980c7b3098d9b6c538dd56f5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:16:cb:68:71:52:5f:ea:52:90:33:a3:8e:
82:2a:07:c0:b5:db:c2:a6:82:13:08:e0:4f:00:09:
31:87:d4:37:d7:83:aa:0f:28:37:c4:15:49:c2:05:
27:8c:24:fb:7f:2f:a9:7d:19:df:fe:64:86:fd:d8:
f2:62:3b:32:7d:ef:40:fe:87:39:a3:c2:a6:04:f2:
94:9d:e6:72:69:ea:07:87:a0:c5:a7:9d:ef:54:fd:
08:62:61:3a:ca:32:3c:df:59:d1:06:5a:8e:be:80:
44:54:f1:af:a7:2a:14:c8:5a:6e:84:f6:32:a6:54:
4b:60:d1:f1:2c:45:df:d3:ca:f7:99:e4:3f:4c:13:
c3:11:ff:cf:ed:c9:11:db:b2:54:32:9a:91:4c:3f:
4e:9a:3f:8e:cd:ba:1d:6e:b0:e4:03:e7:ec:4e:f6:
f9:97:b1:4c:88:c6:59:9c:a0:b6:df:a1:40:87:21:
7d:05:1a:8f:43:bd:9b:9b:68:43:0a:89:3c:9a:ba:
06:f2:84:55:40:95:8b:1b:2c:3b:e6:fd:07:8c:99:
8c:e6:c9:70:7e:47:f0:40:ac:45:ae:4b:54:6d:e8:
75:30:39:a2:4c:43:5e:04:9a:1d:e9:aa:6e:08:58:
5e:9e:85:a6:08:10:8e:bc:37:f0:42:f7:b3:58:47:
4f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:73:C2:FB:7A:9F:28:98:0C:7B:30:98:D9:B6:C5:38:DD:56:F5:DC
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/vXPC-3qfKJgMezCY2bbFON1W9dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.196.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:1a:b0:e7:98:3d:4a:ff:2c:d1:0d:1a:a2:63:cc:a4:6f:34:
8b:ac:78:13:76:39:20:4a:0c:f8:9a:0d:ec:a3:26:ac:14:ea:
4e:4a:93:a1:c3:55:1c:85:72:67:9f:9c:47:b7:3f:65:6d:23:
dd:95:36:1d:ab:f6:3b:e0:d8:81:dd:b1:07:2d:91:cb:9a:bb:
85:77:b9:8d:63:c9:51:cd:bd:46:14:4e:11:95:6b:c9:9b:a0:
92:ed:c8:a3:ea:7d:20:9f:1e:b6:64:61:7e:c9:19:2c:41:c8:
d7:a7:e7:ce:1b:d3:4a:d7:2e:84:6f:9b:4c:87:ea:ee:50:e7:
c2:04:86:61:94:05:7a:b7:f2:db:42:00:d9:08:b1:60:5e:d7:
03:44:c3:5b:ed:5a:e0:b9:bd:20:64:78:a4:0e:a1:06:e7:02:
9c:55:94:31:99:72:43:0e:3c:18:7c:de:6e:2f:e1:86:d7:1f:
49:39:4e:14:4e:c0:9b:17:fb:84:ab:a3:99:60:54:00:dd:5e:
6b:cb:40:ef:41:cd:94:84:8c:d8:90:81:08:be:b5:0a:0b:39:
8d:92:ce:ab:44:dd:ab:11:b1:62:78:ec:b9:88:7a:d2:c0:69:
9b:30:5b:f8:3b:9e:a7:74:59:33:b2:31:9b:31:c0:f1:98:ca:
36:89:3b:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA5gkTnTWlRBsipjIHXkdXEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI1MTUyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDczYzJmYjdhOWYyODk4MGM3YjMwOThkOWI2YzUzOGRkNTZmNWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaMWy2hxUl/qUpAzo46CKgfAtdvC
poITCOBPAAkxh9Q314OqDyg3xBVJwgUnjCT7fy+pfRnf/mSG/djyYjsyfe9A/oc5
o8KmBPKUneZyaeoHh6DFp53vVP0IYmE6yjI831nRBlqOvoBEVPGvpyoUyFpuhPYy
plRLYNHxLEXf08r3meQ/TBPDEf/P7ckR27JUMpqRTD9Omj+OzbodbrDkA+fsTvb5
l7FMiMZZnKC236FAhyF9BRqPQ72bm2hDCok8mroG8oRVQJWLGyw75v0HjJmM5slw
fkfwQKxFrktUbeh1MDmiTENeBJod6apuCFhenoWmCBCOvDfwQvezWEdPHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL1zwvt6nyiYDHswmNm2xTjdVvXcMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvdlhQQy0zcWZLSmdNZXpDWTJiYkZPTjFXOWR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FfEMA0G
CSqGSIb3DQEBCwUAA4IBAQAOGrDnmD1K/yzRDRqiY8ykbzSLrHgTdjkgSgz4mg3s
oyasFOpOSpOhw1UchXJnn5xHtz9lbSPdlTYdq/Y74NiB3bEHLZHLmruFd7mNY8lR
zb1GFE4RlWvJm6CS7cij6n0gnx62ZGF+yRksQcjXp+fOG9NK1y6Eb5tMh+ruUOfC
BIZhlAV6t/LbQgDZCLFgXtcDRMNb7Vrgub0gZHikDqEG5wKcVZQxmXJDDjwYfN5u
L+GG1x9JOU4UTsCbF/uEq6OZYFQA3V5ry0DvQc2UhIzYkIEIvrUKCzmNks6rRN2r
EbFieOy5iHrSwGmbMFv4O56ndFkzsjGbMcDxmMo2iTsF
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:16 2026 by rpki-client