Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/o-gAAg_Q55v23psmPpv2J_KqKdQ.roa
File: o-gAAg_Q55v23psmPpv2J_KqKdQ.roa (raw, json)
Hash identifier: N0/eJ/ZWYkUbyr0/F6y9UREqPLYdETf9RxUCf1gtgX0=
Subject key identifier: A3:E8:00:02:0F:D0:E7:9B:F6:DE:9B:26:3E:9B:F6:27:F2:AA:29:D4
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01A0F8BCD41AF3F0E1803110A3538F715FBA
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/o-gAAg_Q55v23psmPpv2J_KqKdQ.roa
Signing time: Thu 01 Oct 2026 18:31:59 +0000
ROA not before: Thu 01 Oct 2026 18:31:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196851
IP address blocks: 185.214.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:bc:d4:1a:f3:f0:e1:80:31:10:a3:53:8f:71:5f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Oct 1 18:31:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3e800020fd0e79bf6de9b263e9bf627f2aa29d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:5a:db:64:7f:3d:18:53:87:a8:49:46:02:
d6:90:d1:d4:f6:3b:29:cd:72:e4:31:94:6e:21:32:
b6:2d:46:ba:e8:68:3d:75:74:b0:32:3c:46:19:63:
85:df:5b:95:72:c9:f2:ae:65:4b:56:f9:7e:06:31:
8d:de:90:43:a9:36:f5:88:08:e2:0d:44:71:42:ec:
36:8b:ae:8b:fa:98:12:ca:b4:0d:9b:6e:c3:80:c7:
ca:85:a9:15:38:f8:47:f3:3a:cd:92:ed:92:22:de:
bc:dc:75:5d:c5:26:e0:f1:68:8a:f0:90:a5:cd:a9:
49:83:07:b4:2b:69:84:d1:f1:59:ad:c2:2a:50:54:
45:95:25:31:37:2c:ca:56:de:ba:48:41:61:9b:ee:
8d:ac:b1:a3:91:fc:60:7c:ba:2e:df:ee:1c:9a:c8:
87:e5:33:5f:6b:3e:1e:7d:50:c6:aa:13:aa:48:ae:
24:41:5a:2f:9f:00:83:3c:63:5a:2d:d3:66:cf:08:
bb:84:ec:d4:20:fb:77:af:45:86:c6:a7:51:8c:9c:
57:07:9c:a8:ba:38:09:1e:79:8f:a8:e2:16:e6:07:
95:ac:e0:39:e3:95:cc:a1:57:68:f9:58:b1:9b:5e:
ca:c9:b3:11:cc:a0:2c:41:41:79:96:14:18:59:60:
0a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E8:00:02:0F:D0:E7:9B:F6:DE:9B:26:3E:9B:F6:27:F2:AA:29:D4
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/o-gAAg_Q55v23psmPpv2J_KqKdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.166.0/24
Signature Algorithm: sha256WithRSAEncryption
22:b0:54:af:5d:2a:f5:bf:c9:55:e1:b8:ea:e6:7d:eb:a0:43:
0e:21:c2:cf:24:c3:11:8e:56:56:c5:ba:5d:23:47:e7:5a:c1:
09:8c:4b:12:6c:4d:bf:ba:26:7d:a6:fd:59:bc:1a:df:49:b1:
06:f9:71:0a:5b:d0:4a:2a:40:b9:49:d3:72:eb:b6:34:53:7b:
10:3e:9b:5d:c0:4f:61:a0:a7:9f:c6:06:02:86:54:0d:98:3f:
f0:05:c2:dd:20:cb:94:49:84:ad:64:44:e5:87:92:b4:7d:3b:
17:82:52:35:f6:4c:9c:96:1a:62:d3:05:b5:67:59:50:b7:11:
b8:24:30:ce:b2:f8:c8:16:42:95:94:e2:35:ca:42:d1:c6:70:
a8:a2:e7:28:52:d2:8f:cb:42:f7:c2:c2:43:fc:cc:ad:76:fb:
65:b7:22:c7:40:06:15:de:68:cd:c1:d5:5d:c1:eb:ab:b7:3c:
86:7e:aa:26:fd:f4:6a:d2:51:f4:f6:c8:fb:cd:11:60:8f:f0:
39:4d:58:d3:37:fa:fd:d3:b0:74:86:da:bf:1a:1f:39:6e:58:
4c:cb:1e:bb:32:0e:ec:bf:d3:7d:05:d3:0f:92:64:cc:4c:fc:
c7:44:25:58:ca:bb:de:b7:8a:0e:13:48:ab:48:74:8b:64:4d:
77:77:3d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:01:20 2026 by rpki-client