Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/oAREAYwnEiar868cqZwF4n7hEjE.roa
File: oAREAYwnEiar868cqZwF4n7hEjE.roa (raw, json)
Hash identifier: TExAcqFUE4fhPV6CJ+QipcX3DkWsYg7w0Y8fuo3f4m0=
Subject key identifier: A0:04:44:01:8C:27:12:26:AB:F3:AF:1C:A9:9C:05:E2:7E:E1:12:31
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A0D3A7A53CDDC44F2F92DC28A8CA50EF68
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/oAREAYwnEiar868cqZwF4n7hEjE.roa
Signing time: Thu 24 Sep 2026 13:42:54 +0000
ROA not before: Thu 24 Sep 2026 13:42:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.235.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:a7:a5:3c:dd:c4:4f:2f:92:dc:28:a8:ca:50:ef:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Sep 24 13:42:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a00444018c271226abf3af1ca99c05e27ee11231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:0b:04:94:80:d8:99:4d:84:e4:d9:94:7f:
1f:b0:1f:00:1e:5b:3b:61:73:cc:59:3c:a0:e6:86:
c7:62:59:34:15:59:da:54:0c:e9:f9:39:78:7f:1c:
c2:9f:01:2d:89:08:61:f0:ca:71:28:2b:d1:16:0c:
64:4b:48:d5:8f:06:44:55:cb:5e:36:12:e0:20:c8:
3f:8d:92:df:5e:8d:55:b6:67:04:84:f2:32:20:6e:
07:a5:f0:8c:ef:9b:6c:83:9f:00:5b:10:af:c9:e8:
4c:f0:c5:fe:c2:4e:38:74:64:5c:38:c5:aa:12:32:
15:73:f5:bc:a1:f8:46:60:00:b6:85:79:1e:b4:b2:
41:42:a0:97:46:52:b2:a4:0b:c5:c3:e4:35:54:64:
ca:8e:32:05:9f:e3:af:52:03:8b:e4:12:a6:b5:8f:
9e:67:6a:97:30:7f:df:3d:23:78:9c:e3:62:2f:70:
12:cb:aa:72:a9:de:9b:d6:88:4a:79:ec:1f:e5:d6:
99:4a:6b:12:bb:eb:d5:d0:d0:e9:ba:9b:11:bd:22:
a3:95:46:2c:bf:23:34:3d:40:9c:9e:5d:66:c0:62:
5a:70:6b:d7:52:e3:98:81:e4:e3:63:f2:7d:f0:a7:
5e:66:54:16:3a:8f:9e:e4:0c:27:6b:93:31:a3:1e:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:04:44:01:8C:27:12:26:AB:F3:AF:1C:A9:9C:05:E2:7E:E1:12:31
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/oAREAYwnEiar868cqZwF4n7hEjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.121.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:cf:58:6f:f2:6f:1c:01:84:db:d8:1e:8a:a3:e1:78:3b:32:
c8:06:13:00:4e:66:75:33:c0:43:4e:a2:ce:0b:8f:c1:71:69:
b5:f6:98:1c:ca:c5:3e:0c:87:61:c9:06:d2:81:6f:19:db:c0:
97:cc:fa:af:39:c2:91:5a:87:82:0b:c3:b4:4a:04:d4:07:90:
46:fc:9f:a8:30:2b:44:43:00:f6:1f:55:4b:0a:18:8d:1f:1e:
ff:06:98:eb:ac:ed:a5:af:76:57:60:d9:85:ba:91:83:62:d5:
3e:f8:f9:9a:24:0f:d3:36:b6:a3:d5:f1:de:68:1c:2f:52:62:
c8:e4:b9:d2:40:c0:9a:f5:1c:8d:ce:c2:ab:85:93:21:f9:4c:
bb:b2:74:25:f7:64:6e:db:9f:fd:99:7b:db:1b:cb:27:fc:0b:
4d:eb:cd:1e:37:60:d0:1a:b0:99:96:fa:06:26:7c:cc:8c:70:
23:b5:da:1f:89:7e:e9:b1:22:5c:62:39:ef:13:a1:87:85:77:
d7:48:9f:a1:ba:4c:2a:29:d2:ef:f9:4a:06:52:99:38:24:d5:
91:6c:77:8e:d2:40:76:23:66:11:53:d4:0a:fb:cb:c5:21:3e:
ee:0e:91:2b:02:d1:dd:45:07:c5:7b:95:e8:8c:bf:47:b3:6f:
20:11:4a:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDTp6U83cRPL5LcKKjKUO9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz
ZTIwZWEwHhcNMjYwOTI0MTM0MjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDA0NDQwMThjMjcxMjI2YWJmM2FmMWNhOTljMDVlMjdlZTExMjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi0LBJSA2JlNhOTZlH8fsB8AHls7
YXPMWTyg5obHYlk0FVnaVAzp+Tl4fxzCnwEtiQhh8MpxKCvRFgxkS0jVjwZEVcte
NhLgIMg/jZLfXo1VtmcEhPIyIG4HpfCM75tsg58AWxCvyehM8MX+wk44dGRcOMWq
EjIVc/W8ofhGYAC2hXketLJBQqCXRlKypAvFw+Q1VGTKjjIFn+OvUgOL5BKmtY+e
Z2qXMH/fPSN4nONiL3ASy6pyqd6b1ohKeewf5daZSmsSu+vV0NDpupsRvSKjlUYs
vyM0PUCcnl1mwGJacGvXUuOYgeTjY/J98KdeZlQWOo+e5Awna5Mxox7AOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKAERAGMJxImq/OvHKmcBeJ+4RIxMB8GA1UdIwQY
MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt
NTU2MDhiNjk0NDU2LzEvb0FSRUFZd25FaWFyODY4Y3Fad0Y0bjdoRWpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2
LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuet5MA0G
CSqGSIb3DQEBCwUAA4IBAQCcz1hv8m8cAYTb2B6Ko+F4OzLIBhMATmZ1M8BDTqLO
C4/BcWm19pgcysU+DIdhyQbSgW8Z28CXzPqvOcKRWoeCC8O0SgTUB5BG/J+oMCtE
QwD2H1VLChiNHx7/BpjrrO2lr3ZXYNmFupGDYtU++PmaJA/TNraj1fHeaBwvUmLI
5LnSQMCa9RyNzsKrhZMh+Uy7snQl92Ru25/9mXvbG8sn/AtN680eN2DQGrCZlvoG
JnzMjHAjtdofiX7psSJcYjnvE6GHhXfXSJ+hukwqKdLv+UoGUpk4JNWRbHeO0kB2
I2YRU9QK+8vFIT7uDpErAtHdRQfFe5XojL9Hs28gEUpk
-----END CERTIFICATE-----
Generated at Mon Sep 28 00:33:24 2026 by rpki-client