Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/OslAy48iUK5eNDd-L75c-wiOt74.roa
File: OslAy48iUK5eNDd-L75c-wiOt74.roa (raw, json)
Hash identifier: hZdnxKokdy1Y3KQ0EgLHgXQo+e3kDSEjo1LT0lM+qo8=
Subject key identifier: 3A:C9:40:CB:8F:22:50:AE:5E:34:37:7E:2F:BE:5C:FB:08:8E:B7:BE
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01A120F1BA71D087F7711E96B35C90EB08CD
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/OslAy48iUK5eNDd-L75c-wiOt74.roa
Signing time: Fri 09 Oct 2026 13:54:35 +0000
ROA not before: Fri 09 Oct 2026 13:54:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33659
IP address blocks: 185.147.49.0/24 maxlen: 24
195.211.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:f1:ba:71:d0:87:f7:71:1e:96:b3:5c:90:eb:08:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Oct 9 13:54:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ac940cb8f2250ae5e34377e2fbe5cfb088eb7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:d7:7f:80:6b:fd:e8:1e:7f:ff:02:29:f4:
27:26:55:1a:91:f1:78:47:24:57:79:da:21:b6:c1:
67:aa:b6:ce:0d:55:43:8c:63:7f:cc:97:e4:73:8a:
2f:ba:e6:95:6b:5e:aa:c3:03:af:88:0d:26:05:c3:
b1:9a:24:c2:72:8c:cf:dd:27:fc:06:c5:a3:80:88:
e8:bc:f2:52:cb:6f:a3:4b:e8:b5:bc:e3:5d:04:6c:
dc:c3:69:a9:24:98:d6:94:cc:20:13:bf:1b:44:65:
39:cc:40:97:66:f8:fa:bc:4d:20:e5:9b:e7:73:0f:
3f:56:31:3e:30:08:55:b9:e1:39:5f:68:ba:d8:3d:
39:e8:57:6a:19:6e:2e:05:90:69:e3:82:37:df:5b:
b0:95:7b:8a:6e:75:a9:04:50:db:99:8a:52:1b:0e:
ef:1e:24:bd:35:8d:a7:3e:8a:22:04:cf:5f:71:60:
59:b7:6e:ea:b8:83:65:48:fe:f6:da:d5:da:4a:14:
e1:cd:7e:54:f0:8e:ca:86:7e:ad:1b:27:80:78:fc:
d3:01:af:36:7d:62:5a:a1:18:8d:2b:cd:6a:5e:2c:
84:8e:37:54:c4:f9:dd:5c:d0:f6:d8:cf:ba:3d:c2:
94:3d:87:36:62:52:ad:a1:a5:21:af:51:fa:c8:9f:
04:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C9:40:CB:8F:22:50:AE:5E:34:37:7E:2F:BE:5C:FB:08:8E:B7:BE
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/OslAy48iUK5eNDd-L75c-wiOt74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.49.0/24
195.211.48.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c5:07:38:6c:87:d5:23:44:f6:93:c9:1d:20:59:19:45:48:
81:a4:b4:a9:8f:50:b5:67:4c:87:03:37:d4:78:06:0f:76:0a:
f7:5d:3d:a0:bc:c5:63:94:f9:bc:ba:73:22:64:5a:1b:65:54:
34:13:26:3c:c6:63:b3:31:a6:17:6c:77:a3:79:f8:88:7e:1a:
49:f9:10:21:ad:b1:14:67:fe:f1:bb:95:e5:0e:7c:ab:ee:e1:
fb:3d:f0:aa:75:cd:c0:d2:05:8b:fb:13:e7:ef:f2:e5:6d:ed:
0b:a1:86:eb:f5:70:23:86:79:2e:89:f5:32:8b:d3:1c:4b:92:
5b:d6:d5:0c:7c:a9:06:1b:d7:fd:1f:7b:3b:cc:bc:87:d0:9a:
71:60:35:3d:d3:54:ed:64:e5:50:c9:bf:89:89:e5:fa:6a:e2:
5a:cb:d4:f7:91:53:32:5c:1f:90:23:37:dd:a0:7b:3d:f5:db:
aa:0b:c7:a8:c1:b1:06:ed:8b:f8:72:3a:69:4e:18:45:a8:1b:
f3:61:67:f2:2f:d9:39:3c:43:0e:b3:53:8b:26:be:4f:32:b5:
a1:ee:e2:e1:a7:5b:74:8f:17:b0:c7:ac:19:e9:3b:2c:9a:db:
a7:54:08:c9:c5:88:03:9a:07:f1:f9:36:ea:57:43:bb:87:e2:
cf:97:4c:45
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaEg8bpx0If3cR6Ws1yQ6wjNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjYxMDA5MTM1NDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWM5NDBjYjhmMjI1MGFlNWUzNDM3N2UyZmJlNWNmYjA4OGViN2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKTXf4Br/egef/8CKfQnJlUakfF4
RyRXedohtsFnqrbODVVDjGN/zJfkc4ovuuaVa16qwwOviA0mBcOxmiTCcozP3Sf8
BsWjgIjovPJSy2+jS+i1vONdBGzcw2mpJJjWlMwgE78bRGU5zECXZvj6vE0g5Zvn
cw8/VjE+MAhVueE5X2i62D056FdqGW4uBZBp44I331uwlXuKbnWpBFDbmYpSGw7v
HiS9NY2nPooiBM9fcWBZt27quINlSP722tXaShThzX5U8I7Khn6tGyeAePzTAa82
fWJaoRiNK81qXiyEjjdUxPndXND22M+6PcKUPYc2YlKtoaUhr1H6yJ8EHwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDrJQMuPIlCuXjQ3fi++XPsIjre+MB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvT3NsQXk0OGlVSzVlTkRkLUw3NWMtd2lPdDc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuZMxAwQA
w9MwMA0GCSqGSIb3DQEBCwUAA4IBAQALxQc4bIfVI0T2k8kdIFkZRUiBpLSpj1C1
Z0yHAzfUeAYPdgr3XT2gvMVjlPm8unMiZFobZVQ0EyY8xmOzMaYXbHejefiIfhpJ
+RAhrbEUZ/7xu5XlDnyr7uH7PfCqdc3A0gWL+xPn7/Llbe0LoYbr9XAjhnkuifUy
i9McS5Jb1tUMfKkGG9f9H3s7zLyH0JpxYDU901TtZOVQyb+JieX6auJay9T3kVMy
XB+QIzfdoHs99duqC8eowbEG7Yv4cjppThhFqBvzYWfyL9k5PEMOs1OLJr5PMrWh
7uLhp1t0jxewx6wZ6TssmtunVAjJxYgDmgfx+TbqV0O7h+LPl0xF
-----END CERTIFICATE-----
Generated at Sat Oct 24 07:10:26 2026 by rpki-client