Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/O8puby9lwoNg4eaHRvvHghnWf4w.roa
File: O8puby9lwoNg4eaHRvvHghnWf4w.roa (raw, json)
Hash identifier: wjwkUdLyEEKH5uNBOG8mhlStcWrJP2/bj12ae1jnCjk=
Subject key identifier: 3B:CA:6E:6F:2F:65:C2:83:60:E1:E6:87:46:FB:C7:82:19:D6:7F:8C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A1431675319C8953BBE4BFBEAE6BB74786
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/O8puby9lwoNg4eaHRvvHghnWf4w.roa
Signing time: Fri 16 Oct 2026 05:01:47 +0000
ROA not before: Fri 16 Oct 2026 05:01:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207359
IP address blocks: 185.238.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:16:75:31:9c:89:53:bb:e4:bf:be:ae:6b:b7:47:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 16 05:01:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3bca6e6f2f65c28360e1e68746fbc78219d67f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ce:da:d8:81:e4:de:5c:94:52:f4:fe:71:06:
68:82:e7:4d:4d:a7:75:ba:73:9c:22:12:75:9a:18:
22:cc:36:b7:2b:74:ec:32:eb:29:c4:56:3c:db:45:
19:28:b4:75:ce:f3:33:9e:e1:11:f0:82:cc:03:26:
2a:1f:cc:dd:ab:e2:51:0d:b0:12:f8:06:8d:b0:21:
1f:81:5b:1d:6a:96:27:97:94:60:e1:5a:a3:52:25:
5a:62:63:4d:e7:8a:c1:88:95:fe:64:69:5c:d6:97:
ee:ad:7b:a6:18:cb:a9:47:eb:83:e2:6a:52:17:aa:
8c:c4:8b:01:c8:a1:dd:f1:8f:90:03:43:13:ce:1d:
db:87:71:66:c6:32:db:d8:c0:cd:33:ae:32:21:9d:
ca:51:26:14:d7:5d:a4:9c:6b:79:fd:16:0c:ce:2f:
f5:fa:15:bc:ef:96:1d:ae:11:8e:e6:04:61:f4:20:
c0:1e:6e:d1:03:f7:d0:0b:71:f4:72:bd:8a:48:0f:
80:ff:24:32:7a:66:34:ef:e1:a2:c9:6d:f7:61:73:
9c:09:ff:a8:7a:8f:24:8a:e5:1f:10:48:1e:d4:6e:
94:8c:d9:8c:71:d4:79:2f:ae:87:39:44:8c:a4:80:
09:43:8c:72:89:c1:75:bb:07:f8:37:55:4b:92:88:
3b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CA:6E:6F:2F:65:C2:83:60:E1:E6:87:46:FB:C7:82:19:D6:7F:8C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/O8puby9lwoNg4eaHRvvHghnWf4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.191.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:51:85:5f:55:2f:b2:70:f3:0a:d0:61:80:79:96:73:30:19:
6c:6f:28:f8:d9:a7:90:15:4f:cb:cc:11:44:47:48:99:4f:09:
d8:c8:7e:9b:31:0f:6f:76:8e:c5:95:d9:b2:fb:b4:85:44:d2:
fe:08:5b:84:85:39:a0:ca:67:3c:4e:09:af:18:8a:ef:b8:26:
e1:fd:8c:da:1a:01:05:1c:89:37:18:89:36:44:89:b5:5a:5d:
9d:9c:97:fd:50:4e:3f:bb:bc:b0:d7:bd:d9:c5:10:e0:f8:a2:
4a:a8:7e:8f:9a:cc:d3:7c:0d:ec:ab:af:09:4b:83:95:3d:e0:
05:e7:6b:e9:28:d4:fc:08:0e:1c:f4:31:ac:e4:e8:3d:fc:f1:
8f:11:86:9a:e1:d9:d5:a9:2a:ff:13:79:7c:0b:6b:5f:0c:f9:
06:c5:7b:d8:fa:cb:bb:d8:9c:0a:92:9d:d9:df:7b:2a:55:6b:
8d:1a:62:15:71:ef:57:92:90:06:46:c6:83:98:4e:55:36:63:
fa:54:fc:16:33:7d:a0:ac:12:03:05:3a:5d:99:ec:a9:35:f3:
44:6f:08:31:ea:ac:f5:b0:d7:56:45:8f:4d:48:fd:a2:82:70:
de:3f:af:3c:68:eb:b2:44:9c:e0:0d:99:74:20:26:5b:08:41:
4d:43:7e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:58:25 2026 by rpki-client