Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/O4to3qZffdni6zpCseiBhQQY8vM.roa
File: O4to3qZffdni6zpCseiBhQQY8vM.roa (raw, json)
Hash identifier: VM3GxqV8TmNq72mwvuaoFYiUVwakYtZRct77gmtPTEY=
Subject key identifier: 3B:8B:68:DE:A6:5F:7D:D9:E2:EB:3A:42:B1:E8:81:85:04:18:F2:F3
Certificate issuer: /CN=1fafca53ac54e57e52c010138a212794c670e0cd
Certificate serial: 01A10D0075927FCA36BC9B62D87DB95ECBCA
Authority key identifier: 1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/O4to3qZffdni6zpCseiBhQQY8vM.roa
Signing time: Mon 05 Oct 2026 16:58:16 +0000
ROA not before: Mon 05 Oct 2026 16:58:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197450
IP address blocks: 185.50.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:00:75:92:7f:ca:36:bc:9b:62:d8:7d:b9:5e:cb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fafca53ac54e57e52c010138a212794c670e0cd
Validity
Not Before: Oct 5 16:58:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b8b68dea65f7dd9e2eb3a42b1e881850418f2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d2:62:a5:48:58:34:f3:f6:45:eb:09:36:bb:
cc:45:a4:87:e2:79:fb:3b:ae:2f:39:12:12:a5:41:
0a:60:01:8d:fe:e3:c8:69:fc:b5:ef:5f:cd:93:aa:
3a:19:d7:1d:a3:69:22:a2:22:51:be:70:e3:04:9c:
5a:7a:35:6a:0f:b0:f6:83:ea:af:04:66:2b:3d:e9:
7b:f5:63:cd:2a:7f:64:46:26:f4:bf:4f:4b:4b:9b:
89:47:73:c4:11:76:fc:02:4c:56:f8:23:9c:3b:c6:
33:88:7c:c1:80:fb:47:66:25:26:31:53:c1:cb:7c:
69:c7:a1:44:7b:93:73:38:7d:39:6e:a7:d1:ac:f9:
25:5b:68:f8:0a:ed:d1:ad:12:0c:e2:c4:b4:0c:92:
22:a9:bf:17:80:76:cb:d2:79:4f:f9:42:13:4c:ff:
ca:4d:75:37:b8:58:86:fc:db:66:9f:1f:fb:b2:a7:
78:8b:a0:41:bc:8b:a6:c6:42:21:3d:d5:9b:14:99:
7e:13:24:47:3b:56:74:2d:11:c6:1f:37:5f:71:b7:
45:7b:8f:04:5b:27:0f:a9:c9:2b:85:c7:6a:94:35:
17:90:c8:14:52:f3:f6:19:f0:a6:6f:81:a3:3b:7d:
74:5d:e5:30:1a:a3:c3:84:3e:23:c4:34:de:0a:5c:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8B:68:DE:A6:5F:7D:D9:E2:EB:3A:42:B1:E8:81:85:04:18:F2:F3
X509v3 Authority Key Identifier:
keyid:1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/O4to3qZffdni6zpCseiBhQQY8vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.237.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:95:b7:49:61:f0:d4:2c:2e:1e:12:3d:44:4f:a8:6a:33:9a:
f6:62:21:0f:99:af:db:5f:21:cd:c2:50:24:10:8e:91:41:f4:
48:5f:ef:d9:e6:13:c5:bb:3e:54:51:62:4a:b3:38:87:c2:ec:
24:7a:f5:7b:d7:00:e2:d7:20:40:35:84:54:56:08:a8:7b:55:
76:af:a7:67:5e:4c:9c:0b:d5:3e:f7:93:81:8e:7b:85:18:e6:
91:90:85:3a:84:f3:50:aa:23:11:c8:80:33:f7:d1:8f:7b:b2:
1b:94:c9:52:67:36:d5:7b:88:7e:d7:78:6d:7b:23:34:90:54:
10:61:13:7e:8e:2c:ab:ff:9c:4d:8d:1f:19:35:6d:02:8f:ce:
38:f3:4d:b1:bb:e9:40:96:55:2f:5d:8d:c7:a5:0c:ae:3f:29:
02:d9:53:a1:91:51:f5:bf:85:61:c2:dd:56:a1:7f:3d:08:20:
7e:14:d9:a7:9d:ba:b8:cd:45:a1:6b:66:1d:06:48:e6:51:6f:
ba:a6:2f:c9:d7:45:a8:e6:62:fe:7c:84:bb:55:48:fd:4e:d7:
55:7b:c7:c0:82:1b:a4:7f:31:9c:1b:ed:e4:e3:5f:08:f1:f3:
f0:ec:60:ec:89:01:fe:98:18:dc:b0:e4:cf:49:b7:d0:1b:84:
3c:71:41:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaENAHWSf8o2vJti2H25XsvKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYWZjYTUzYWM1NGU1N2U1MmMwMTAxMzhhMjEyNzk0YzY3
MGUwY2QwHhcNMjYxMDA1MTY1ODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjhiNjhkZWE2NWY3ZGQ5ZTJlYjNhNDJiMWU4ODE4NTA0MThmMmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29JipUhYNPP2ResJNrvMRaSH4nn7
O64vORISpUEKYAGN/uPIafy171/Nk6o6Gdcdo2kioiJRvnDjBJxaejVqD7D2g+qv
BGYrPel79WPNKn9kRib0v09LS5uJR3PEEXb8AkxW+COcO8YziHzBgPtHZiUmMVPB
y3xpx6FEe5NzOH05bqfRrPklW2j4Cu3RrRIM4sS0DJIiqb8XgHbL0nlP+UITTP/K
TXU3uFiG/Ntmnx/7sqd4i6BBvIumxkIhPdWbFJl+EyRHO1Z0LRHGHzdfcbdFe48E
WycPqckrhcdqlDUXkMgUUvP2GfCmb4GjO310XeUwGqPDhD4jxDTeClxuKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDuLaN6mX33Z4us6QrHogYUEGPLzMB8GA1UdIwQY
MBaAFB+vylOsVOV+UsAQE4ohJ5TGcODNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDZfS1U2eFU1WDVTd0JBVGlpRW5sTVp3NE0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83NjhlMjktMjRjNS00ZmE3LTliMzYt
Yzk5NWQyZWM5ZTk0LzEvTzR0bzNxWmZmZG5pNnpwQ3NlaUJoUVFZOHZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83NjhlMjktMjRjNS00ZmE3LTliMzYtYzk5NWQyZWM5ZTk0
LzEvSDZfS1U2eFU1WDVTd0JBVGlpRW5sTVp3NE0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTLtMA0G
CSqGSIb3DQEBCwUAA4IBAQCKlbdJYfDULC4eEj1ET6hqM5r2YiEPma/bXyHNwlAk
EI6RQfRIX+/Z5hPFuz5UUWJKsziHwuwkevV71wDi1yBANYRUVgioe1V2r6dnXkyc
C9U+95OBjnuFGOaRkIU6hPNQqiMRyIAz99GPe7IblMlSZzbVe4h+13hteyM0kFQQ
YRN+jiyr/5xNjR8ZNW0Cj844802xu+lAllUvXY3HpQyuPykC2VOhkVH1v4Vhwt1W
oX89CCB+FNmnnbq4zUWha2YdBkjmUW+6pi/J10Wo5mL+fIS7VUj9TtdVe8fAghuk
fzGcG+3k418I8fPw7GDsiQH+mBjcsOTPSbfQG4Q8cUE6
-----END CERTIFICATE-----
Generated at Thu Oct 22 20:24:51 2026 by rpki-client