Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/G-8xsVfXLIpqXy0CqFnRoMu26hk.roa
File: G-8xsVfXLIpqXy0CqFnRoMu26hk.roa (raw, json)
Hash identifier: pyb6u2nXzNbAtKGP2sdS5ruOPcv1dXL571AwjQHTWrk=
Subject key identifier: 1B:EF:31:B1:57:D7:2C:8A:6A:5F:2D:02:A8:59:D1:A0:CB:B6:EA:19
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A07C01B0F6A0010476E63A684234D3B499
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/G-8xsVfXLIpqXy0CqFnRoMu26hk.roa
Signing time: Mon 07 Sep 2026 13:14:40 +0000
ROA not before: Mon 07 Sep 2026 13:14:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51847
IP address blocks: 84.54.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:01:b0:f6:a0:01:04:76:e6:3a:68:42:34:d3:b4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Sep 7 13:14:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bef31b157d72c8a6a5f2d02a859d1a0cbb6ea19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c7:5e:bd:51:e6:56:a1:aa:04:37:0b:15:ec:
c7:9e:33:79:12:5b:83:32:fd:3e:32:fe:fd:c1:32:
90:e1:b0:2b:9a:27:92:89:33:53:ed:2c:b5:5f:7b:
3a:a7:08:62:f0:c0:8a:b6:75:64:79:ec:f9:0c:f2:
67:e7:b7:01:ea:b6:a5:bf:83:70:26:69:45:14:de:
9a:5e:74:2c:ae:fc:df:86:8d:a7:87:08:a6:92:0b:
7c:73:94:d1:c0:dd:97:05:71:e6:ae:e6:ad:93:fd:
82:bf:6f:52:49:1c:e1:f4:28:84:7b:bb:cb:4b:fa:
9b:94:68:bc:1d:fd:c3:4c:63:ea:02:ec:d2:66:db:
d8:2c:62:86:a6:44:57:87:1e:88:ef:b3:7b:a3:2c:
69:cd:bb:b3:97:3f:eb:26:ba:65:19:5a:c7:f8:1a:
b4:38:91:51:e0:54:d1:2a:54:b6:26:20:5d:59:e1:
6b:8b:34:18:3e:c4:5f:97:8b:8f:89:b0:ad:a6:52:
98:d9:21:b1:4c:e6:66:5b:62:d2:2b:84:a2:a0:81:
39:f5:24:02:9d:c6:6e:da:14:42:7e:4d:13:99:fc:
89:08:70:77:74:e0:88:f5:79:5a:ee:5d:65:c1:c6:
8b:a1:ce:0e:a6:1d:c7:01:f2:6e:e2:62:33:00:56:
7a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EF:31:B1:57:D7:2C:8A:6A:5F:2D:02:A8:59:D1:A0:CB:B6:EA:19
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/G-8xsVfXLIpqXy0CqFnRoMu26hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.2.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:17:d1:4f:cb:a7:31:f4:48:0a:a6:c4:c9:eb:95:69:ab:1e:
40:1a:fd:a3:16:b1:30:7a:c4:bb:d1:5b:8c:03:c3:48:71:ad:
43:28:2a:2c:78:30:aa:55:23:72:25:39:0f:e6:fe:8c:ab:fe:
3f:c0:f3:6f:b0:fe:0c:f4:11:c1:a0:2d:26:ad:bb:91:bd:22:
ee:8f:93:1f:f0:ed:a6:e4:12:00:72:29:7f:c1:59:60:0e:e1:
94:c1:31:4d:33:01:09:24:fc:4a:9a:95:f6:1d:d1:6c:3f:56:
93:ba:a1:59:47:5d:40:ac:6f:a5:6c:72:a8:ce:41:9f:31:7e:
66:b6:a7:a5:c5:59:fb:88:e3:46:f6:ca:73:70:0f:5e:12:e3:
6e:13:b9:67:46:f6:7c:0e:82:1b:45:23:0b:72:d0:c3:49:7d:
1c:35:e0:35:c7:b5:f3:12:3a:a8:de:7a:d3:dc:cf:88:47:20:
ee:f8:2b:f6:96:ff:df:7f:b7:0e:3f:10:e0:83:29:1c:d4:f1:
fb:b9:72:ae:90:17:d9:fe:a2:9b:6f:ee:dc:ed:9c:c7:e9:12:
be:ab:ca:08:fb:d6:5c:81:ad:9d:d0:00:26:87:15:a2:e5:66:
00:38:01:f3:09:1c:09:21:9a:04:b9:b0:e2:d3:3c:19:e3:7e:
ad:fa:97:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:50:56 2026 by rpki-client