Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/A8zbeGZ_vFlIfUY9owp1LFdY0Qg.roa
File: A8zbeGZ_vFlIfUY9owp1LFdY0Qg.roa (raw, json)
Hash identifier: sGkTFzp72t2CXwG6Zrb6GXvi4fJs4oeqeT4NK3rHJ/w=
Subject key identifier: 03:CC:DB:78:66:7F:BC:59:48:7D:46:3D:A3:0A:75:2C:57:58:D1:08
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 01A00B2806AE901813E6C15A246E9314466C
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/A8zbeGZ_vFlIfUY9owp1LFdY0Qg.roa
Signing time: Sun 16 Aug 2026 15:19:27 +0000
ROA not before: Sun 16 Aug 2026 15:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207057
IP address blocks: 141.0.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 15:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0b:28:06:ae:90:18:13:e6:c1:5a:24:6e:93:14:46:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: Aug 16 15:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03ccdb78667fbc59487d463da30a752c5758d108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:75:e2:eb:46:7e:3d:72:06:e4:45:f5:6b:20:
78:8c:25:93:df:6b:ec:60:47:44:74:91:c0:1d:75:
ea:32:c0:85:b5:0b:c3:6f:59:85:4c:bc:64:24:1a:
f3:ca:6e:6d:42:1f:58:5d:22:b8:7e:e1:2c:5a:f6:
51:d6:61:c6:96:8a:a7:54:2b:19:56:cb:b5:73:73:
d9:82:8c:11:8d:c5:05:d9:cc:62:7a:84:e1:0b:43:
5d:b2:b3:bc:da:4b:3f:b2:a5:c6:49:ad:da:6a:04:
cd:a6:7e:5a:ae:81:2f:e7:1c:1a:bf:3d:65:51:9f:
ad:1e:60:73:84:9f:c5:e6:d3:31:c0:a5:ba:d7:3b:
8e:ae:e9:a0:67:01:3d:95:a3:3f:47:30:81:f8:8d:
63:d0:e2:2e:0c:72:5e:95:1f:e7:f1:c3:90:8b:a4:
cc:4b:0d:60:be:a0:ab:25:35:ca:77:49:f9:41:36:
96:69:3b:1d:a0:12:04:c2:e9:f7:76:8d:55:59:57:
39:df:84:e2:3e:b0:6c:0b:76:9f:19:f4:0f:41:31:
65:73:4c:4a:a0:ec:ac:d4:bc:ab:62:74:7b:be:8a:
bb:ea:54:0c:c0:dd:df:1d:7e:7a:3b:07:b9:43:41:
e6:40:cb:a4:f6:4d:5d:6c:e4:a7:51:0f:8c:22:a3:
ed:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CC:DB:78:66:7F:BC:59:48:7D:46:3D:A3:0A:75:2C:57:58:D1:08
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/A8zbeGZ_vFlIfUY9owp1LFdY0Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.0.190.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:fc:3f:52:5f:a9:a4:87:52:96:65:6e:8f:67:db:14:74:a2:
fb:3c:8a:0b:e0:46:9c:58:22:35:57:ba:f6:52:4d:dc:95:e9:
1d:f1:5e:62:9c:a8:d8:74:c9:62:57:31:43:27:05:4e:4e:89:
a3:37:92:08:2f:05:96:8a:1f:2b:6b:f9:24:cb:d2:d7:42:21:
0b:5f:a3:7a:e9:06:7a:b0:49:65:9f:81:a1:98:3c:52:09:4b:
18:f7:87:4b:a8:66:d9:d5:2b:cb:96:4e:9a:3f:9e:8d:6a:86:
ea:97:fc:41:d5:f8:5a:20:d9:f6:0a:c6:11:91:c1:10:39:ca:
d0:48:d5:7d:05:a2:38:5c:4d:20:7c:61:72:8d:a0:e2:c6:1a:
03:93:8a:46:e5:34:71:2f:41:c6:ba:a3:17:f5:e8:0e:bb:ab:
f4:6f:22:81:c1:4c:da:e0:e6:f5:71:20:6c:7c:ce:7d:34:13:
d2:dc:54:e9:10:ff:74:ef:97:08:7e:82:c3:e9:ac:54:7f:6e:
30:01:3f:83:78:86:89:83:1f:50:4f:58:8e:00:6d:a1:ab:f7:
ec:54:9e:e5:e4:7c:0b:11:47:0f:d6:c1:b9:e8:db:4b:7c:05:
7c:3c:cb:35:b8:79:4f:ec:5f:bf:3a:0a:40:f6:5c:dc:c7:6e:
b4:22:7d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 01:31:06 2026 by rpki-client