Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/jIq8fBg_UvQq7GHwf194V2CFjVk.roa
File: jIq8fBg_UvQq7GHwf194V2CFjVk.roa (raw, json)
Hash identifier: 4yuTp4dAvljMHulD7lLq9ormb36G2bWql36aX4FTBXw=
Subject key identifier: 8C:8A:BC:7C:18:3F:52:F4:2A:EC:61:F0:7F:5F:78:57:60:85:8D:59
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 019FF9739C4F61ADF23838400FDF274AB8A8
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/jIq8fBg_UvQq7GHwf194V2CFjVk.roa
Signing time: Thu 13 Aug 2026 04:48:51 +0000
ROA not before: Thu 13 Aug 2026 04:48:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 45.83.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:73:9c:4f:61:ad:f2:38:38:40:0f:df:27:4a:b8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Aug 13 04:48:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c8abc7c183f52f42aec61f07f5f785760858d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:c0:0b:d2:9c:53:ed:29:aa:71:c0:f2:6c:
19:60:98:eb:f2:b5:8e:34:c7:25:2c:2b:17:90:11:
fd:06:15:09:c1:8d:fe:46:b7:b3:e8:b7:47:03:a4:
26:16:29:5f:51:53:9b:6a:0b:cf:4f:ee:a2:49:8a:
c5:8a:b7:21:ea:81:21:ad:82:7e:10:9b:e4:40:f9:
4f:95:be:4b:43:cc:46:c2:6c:7d:b4:e3:b5:24:d3:
af:db:dc:99:c6:de:f2:97:cd:25:ea:8f:9a:79:df:
6e:e9:96:e6:ac:15:98:25:63:c6:78:94:17:9a:c0:
25:81:2f:f7:45:57:14:e9:23:7a:c3:44:b8:1d:2e:
12:8a:5e:c7:a0:32:df:d7:72:b8:ea:1f:44:a5:f5:
5c:cb:12:a5:a2:84:cf:0f:78:14:17:8f:9e:69:63:
20:a8:13:28:68:d1:1e:4c:16:f1:48:5d:c6:e5:42:
ce:73:ef:44:d3:09:1f:fa:b3:fc:c0:2e:ff:aa:ce:
72:6b:69:ca:1e:e0:64:1b:43:99:37:c7:8f:3f:9b:
ca:4d:3f:79:93:96:81:c5:16:9a:f5:d1:62:e2:a1:
3a:fb:15:05:da:1d:ee:59:0f:a3:ca:20:7d:d4:77:
18:0f:d4:5d:e2:67:0d:91:26:ee:e8:ce:a0:f6:7c:
f3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8A:BC:7C:18:3F:52:F4:2A:EC:61:F0:7F:5F:78:57:60:85:8D:59
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/jIq8fBg_UvQq7GHwf194V2CFjVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.238.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ea:01:78:75:c2:c1:31:54:a0:7e:d8:dc:b2:f1:f2:53:da:
2b:b2:ed:f7:06:41:c9:98:22:e0:bc:a8:75:6f:93:12:49:ee:
83:19:e2:cd:5e:57:89:0e:48:2f:d4:56:db:e9:01:13:56:85:
69:ea:66:3f:56:c6:fe:70:25:f5:9c:51:45:e1:82:41:05:ad:
ad:1d:2b:2f:4a:8f:78:78:3c:0d:67:72:19:99:ab:cd:e5:be:
b0:6e:3e:e2:3e:84:e0:bf:e2:2d:8a:d3:b5:ef:87:9c:1b:c8:
8d:84:f5:ba:85:ab:41:b7:1e:99:02:04:0e:4e:a2:ac:bc:58:
91:8a:0b:ea:66:f3:7e:36:d7:9d:6c:2f:4e:47:3d:b4:f2:c8:
60:55:11:5b:63:5f:05:23:f7:2c:08:5a:af:e9:7c:eb:0d:ae:
a4:b1:53:48:48:52:d8:9a:7d:21:f6:a9:42:53:c5:f3:8f:e4:
6b:2e:da:01:17:be:98:82:50:0e:43:04:e9:52:1a:7e:88:59:
01:9a:31:c4:52:92:00:f6:5c:8e:f7:45:e9:91:93:5b:25:95:
35:56:87:6c:71:5d:9a:d3:c5:89:48:16:f3:a9:6c:f1:cf:ba:
ac:83:d5:5b:5e:51:0a:19:83:cf:d8:0a:50:f4:b6:a3:aa:7b:
15:a2:de:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/5c5xPYa3yODhAD98nSrioMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm
YmM0YTkwHhcNMjYwODEzMDQ0ODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzhhYmM3YzE4M2Y1MmY0MmFlYzYxZjA3ZjVmNzg1NzYwODU4ZDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFzAC9KcU+0pqnHA8mwZYJjr8rWO
NMclLCsXkBH9BhUJwY3+Rrez6LdHA6QmFilfUVObagvPT+6iSYrFirch6oEhrYJ+
EJvkQPlPlb5LQ8xGwmx9tOO1JNOv29yZxt7yl80l6o+aed9u6ZbmrBWYJWPGeJQX
msAlgS/3RVcU6SN6w0S4HS4Sil7HoDLf13K46h9EpfVcyxKlooTPD3gUF4+eaWMg
qBMoaNEeTBbxSF3G5ULOc+9E0wkf+rP8wC7/qs5ya2nKHuBkG0OZN8ePP5vKTT95
k5aBxRaa9dFi4qE6+xUF2h3uWQ+jyiB91HcYD9Rd4mcNkSbu6M6g9nzzJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIyKvHwYP1L0Kuxh8H9feFdghY1ZMB8GA1UdIwQY
MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt
NmM3ZTU2ODU4OTBjLzEvaklxOGZCZ19VdlFxN0dId2YxOTRWMkNGalZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj
LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVPuMA0G
CSqGSIb3DQEBCwUAA4IBAQCS6gF4dcLBMVSgftjcsvHyU9orsu33BkHJmCLgvKh1
b5MSSe6DGeLNXleJDkgv1Fbb6QETVoVp6mY/Vsb+cCX1nFFF4YJBBa2tHSsvSo94
eDwNZ3IZmavN5b6wbj7iPoTgv+ItitO174ecG8iNhPW6hatBtx6ZAgQOTqKsvFiR
igvqZvN+NtedbC9ORz208shgVRFbY18FI/csCFqv6XzrDa6ksVNISFLYmn0h9qlC
U8Xzj+RrLtoBF76YglAOQwTpUhp+iFkBmjHEUpIA9lyO90XpkZNbJZU1VodscV2a
08WJSBbzqWzxz7qsg9VbXlEKGYPP2ApQ9LajqnsVot5z
-----END CERTIFICATE-----
Generated at Wed Aug 26 20:25:58 2026 by rpki-client