Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/O7IPum5e9l1k2dQKeIpOQPR37lE.roa
File: O7IPum5e9l1k2dQKeIpOQPR37lE.roa (raw, json)
Hash identifier: asotNEGc+X53JvV0YxaoD8OlF1GHR5RnXzA2EUNIfd4=
Subject key identifier: 3B:B2:0F:BA:6E:5E:F6:5D:64:D9:D4:0A:78:8A:4E:40:F4:77:EE:51
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019FEBBC91BDED4EEBE6875BA9DE859CB3EF
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/O7IPum5e9l1k2dQKeIpOQPR37lE.roa
Signing time: Mon 10 Aug 2026 12:53:51 +0000
ROA not before: Mon 10 Aug 2026 12:53:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 77.47.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Sep 2026 18:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:bc:91:bd:ed:4e:eb:e6:87:5b:a9:de:85:9c:b3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Aug 10 12:53:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3bb20fba6e5ef65d64d9d40a788a4e40f477ee51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f4:3f:fc:8f:40:00:0e:51:77:cf:d5:2a:72:
98:38:58:90:18:37:6e:3f:e3:09:78:74:a0:ac:db:
37:29:f7:b1:14:c3:dc:76:b4:16:67:1f:43:b5:90:
30:03:55:69:ec:0a:f5:f5:18:ae:20:30:77:f6:e1:
bd:8a:6f:33:c8:1f:1f:a1:98:35:e8:04:77:22:82:
e3:de:ca:6a:a6:b0:53:ee:d6:46:07:50:16:5e:93:
bb:9c:3a:4d:c7:04:ec:bd:5e:b4:0c:1e:8a:f4:43:
ef:8c:a7:7e:96:2d:a0:6f:48:3b:f3:6d:d2:74:33:
4e:32:05:b2:4f:ab:f7:be:7c:6e:18:15:5a:da:1e:
a5:e1:35:32:7d:93:12:24:1d:30:4b:fa:31:12:d9:
3a:e4:ae:d6:49:51:57:95:81:96:74:97:fd:77:6b:
58:90:a7:6e:c1:a8:6d:7d:1d:50:dc:04:28:53:b0:
da:2f:b4:e3:9e:a2:15:63:a9:8a:95:25:c7:27:3f:
ce:bb:90:a8:a7:68:dd:41:98:33:49:c2:c2:cb:9e:
80:c7:7a:e6:9e:a5:3e:37:d9:14:7d:cd:2d:c2:0a:
a1:3c:5f:4f:5a:4a:32:67:43:eb:40:d6:ac:1b:8b:
4a:4a:50:2c:c1:93:c3:a1:3d:3c:39:a0:c5:85:e2:
56:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B2:0F:BA:6E:5E:F6:5D:64:D9:D4:0A:78:8A:4E:40:F4:77:EE:51
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/O7IPum5e9l1k2dQKeIpOQPR37lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.144.0/22
Signature Algorithm: sha256WithRSAEncryption
13:e4:73:ea:c9:ca:ef:ab:17:7f:8d:90:65:d6:61:a4:90:ff:
34:de:67:7c:28:9a:11:62:1f:1c:92:0b:09:9b:39:30:7f:b3:
75:d4:0e:54:fc:ae:3e:32:16:b1:43:31:01:fe:f3:8b:02:66:
5f:a3:46:70:53:27:f8:bc:16:6d:f5:f4:ff:ce:d3:45:fb:f0:
10:a9:2f:c2:7d:1b:60:6e:2e:3e:cc:b4:a7:d0:2d:ab:b0:cd:
25:da:bf:5b:a7:6b:7a:8f:76:ef:6c:16:43:a6:0d:29:55:28:
86:10:6a:bf:ad:f6:ee:d6:f4:cc:9d:ac:0d:fc:87:c0:50:83:
f9:83:9e:49:66:f7:17:06:6a:d9:3a:4d:32:f7:81:0d:9b:fc:
60:f3:36:a1:54:c6:56:09:18:ba:4f:5f:d1:30:66:77:7f:f3:
0e:75:44:bf:5c:69:3a:38:52:55:d2:3b:cf:e5:97:fc:c0:f6:
dc:b4:38:08:9d:4a:49:ba:fd:14:4b:b8:50:33:1a:fe:d1:65:
9c:8e:a5:03:a0:56:36:4f:30:ca:cd:90:c0:da:62:0e:8d:a2:
e9:97:78:a5:bf:cd:08:d1:51:01:04:eb:60:cc:cf:02:65:6d:
f8:a7:b0:28:b1:6b:6e:97:9c:ec:71:a4:55:7e:a1:6d:80:a1:
6b:ce:66:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 03:01:16 2026 by rpki-client