Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/A8MjN0eidT6iDCjoo7S-r3ul_Tc.roa
File: A8MjN0eidT6iDCjoo7S-r3ul_Tc.roa (raw, json)
Hash identifier: i7YanX6zn3v0DG9D6Ag3WSlhyo5m86D2Igd9CoS0Fjw=
Subject key identifier: 03:C3:23:37:47:A2:75:3E:A2:0C:28:E8:A3:B4:BE:AF:7B:A5:FD:37
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 019FC2A70CE3430FF3D83C3BF9D5782631A9
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/A8MjN0eidT6iDCjoo7S-r3ul_Tc.roa
Signing time: Sun 02 Aug 2026 13:25:55 +0000
ROA not before: Sun 02 Aug 2026 13:25:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198855
IP address blocks: 176.98.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c2:a7:0c:e3:43:0f:f3:d8:3c:3b:f9:d5:78:26:31:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Aug 2 13:25:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03c3233747a2753ea20c28e8a3b4beaf7ba5fd37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7a:ef:8f:c3:2e:69:dd:83:96:41:3d:2f:7d:
f1:8e:f1:04:ee:9f:36:b4:ff:04:27:89:6e:58:1f:
8f:4e:80:92:13:f8:80:93:3d:53:59:bf:f2:3a:a1:
59:a7:de:ab:6b:5b:c8:9a:df:b3:d8:de:cc:cb:7d:
37:ce:96:dd:de:80:77:76:4f:cb:a6:18:03:6a:c2:
d4:80:70:fd:f1:33:26:a2:20:e6:a1:2b:05:28:68:
4d:a8:e1:57:5f:77:1f:b0:44:e4:91:06:01:ef:41:
37:0c:54:a8:ba:d0:5e:26:d5:51:49:6d:a3:dd:12:
b7:d6:73:fb:bd:de:18:c5:e3:cb:c0:32:7d:91:f1:
64:b2:88:c0:ad:f2:d0:75:4a:6b:57:06:c7:41:6d:
33:e0:20:b3:d7:bf:77:f5:20:c6:56:e3:a1:fa:2e:
32:17:45:06:96:ac:35:e7:77:d6:4f:45:ba:76:8f:
78:97:ee:ff:af:6a:70:c2:80:3e:d4:eb:4b:ef:69:
29:1f:5a:1c:73:17:af:a8:40:f5:8a:22:13:26:00:
5b:da:a1:61:a7:b1:51:ec:b3:f0:d0:1e:55:60:2a:
6b:58:8a:e3:25:a2:8d:65:37:6c:03:b4:b5:bb:c0:
bb:19:a2:83:39:01:44:f0:84:6a:4d:11:8a:67:2e:
87:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C3:23:37:47:A2:75:3E:A2:0C:28:E8:A3:B4:BE:AF:7B:A5:FD:37
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/A8MjN0eidT6iDCjoo7S-r3ul_Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.182.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:3c:aa:0d:cd:7f:ad:8a:ba:28:e9:f8:51:f5:f5:a5:65:f9:
fd:3a:0b:f8:f0:e5:89:be:eb:0c:85:d5:ff:3e:89:55:bf:70:
bc:18:d2:ff:27:2d:80:2f:74:0b:c5:ab:82:25:3a:14:29:67:
0b:f8:8f:95:7f:40:0e:b3:57:20:8a:e1:77:6c:9c:4d:d1:74:
30:8a:fd:92:21:f1:ee:6a:1c:02:df:44:9d:6a:29:9f:a0:9e:
9c:70:0c:9c:22:ba:1f:8e:4d:dc:49:f2:4c:b1:c1:82:16:0e:
54:e5:1d:c3:36:21:ea:7e:45:4e:a5:ed:2c:d1:47:af:52:07:
30:cd:6b:18:6b:cc:9c:72:c1:16:3c:0e:83:c0:15:9a:0a:0e:
41:a0:5e:de:28:1d:2b:75:d2:0d:16:b0:9c:3d:80:f6:74:69:
eb:3b:ef:8e:00:2f:68:d5:d8:2b:47:97:5a:b6:6e:e3:74:b2:
21:0a:f0:af:48:20:dc:3a:45:a9:9f:5b:8b:58:39:d4:fe:f8:
69:f6:da:ab:50:6f:d9:dd:ed:34:20:c1:ff:58:7c:67:2a:ed:
29:47:bd:b8:59:1f:13:e7:a5:83:91:ea:ad:04:ba:e3:d8:e3:
0b:7f:cb:8e:38:c8:80:bd:8e:3f:1b:6f:16:a4:b1:68:f6:c4:
08:bd:4b:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/CpwzjQw/z2Dw7+dV4JjGpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl
NmRlNWUwHhcNMjYwODAyMTMyNTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2MzMjMzNzQ3YTI3NTNlYTIwYzI4ZThhM2I0YmVhZjdiYTVmZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53rvj8Muad2DlkE9L33xjvEE7p82
tP8EJ4luWB+PToCSE/iAkz1TWb/yOqFZp96ra1vImt+z2N7My303zpbd3oB3dk/L
phgDasLUgHD98TMmoiDmoSsFKGhNqOFXX3cfsETkkQYB70E3DFSoutBeJtVRSW2j
3RK31nP7vd4YxePLwDJ9kfFksojArfLQdUprVwbHQW0z4CCz17939SDGVuOh+i4y
F0UGlqw153fWT0W6do94l+7/r2pwwoA+1OtL72kpH1occxevqED1iiITJgBb2qFh
p7FR7LPw0B5VYCprWIrjJaKNZTdsA7S1u8C7GaKDOQFE8IRqTRGKZy6HfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAPDIzdHonU+ogwo6KO0vq97pf03MB8GA1UdIwQY
MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt
OTJjODFmMjJlNzEyLzEvQThNak4wZWlkVDZpRENqb283Uy1yM3VsX1RjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy
LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGK2MA0G
CSqGSIb3DQEBCwUAA4IBAQAKPKoNzX+tiroo6fhR9fWlZfn9Ogv48OWJvusMhdX/
PolVv3C8GNL/Jy2AL3QLxauCJToUKWcL+I+Vf0AOs1cgiuF3bJxN0XQwiv2SIfHu
ahwC30SdaimfoJ6ccAycIrofjk3cSfJMscGCFg5U5R3DNiHqfkVOpe0s0UevUgcw
zWsYa8yccsEWPA6DwBWaCg5BoF7eKB0rddINFrCcPYD2dGnrO++OAC9o1dgrR5da
tm7jdLIhCvCvSCDcOkWpn1uLWDnU/vhp9tqrUG/Z3e00IMH/WHxnKu0pR724WR8T
56WDkeqtBLrj2OMLf8uOOMiAvY4/G28WpLFo9sQIvUuN
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:27:16 2026 by rpki-client