Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/EO3i38Ukljnvhxm1MgMgZ4cxiI8.roa
File: EO3i38Ukljnvhxm1MgMgZ4cxiI8.roa (raw, json)
Hash identifier: FSZEl27LICggUxqxahLvoWJD+2mlQi82MHqtyAr0uL4=
Subject key identifier: 10:ED:E2:DF:C5:24:96:39:EF:87:19:B5:32:03:20:67:87:31:88:8F
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 01A01E1B685F1DD75994F55570F38C8B6310
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/EO3i38Ukljnvhxm1MgMgZ4cxiI8.roa
Signing time: Thu 20 Aug 2026 07:38:27 +0000
ROA not before: Thu 20 Aug 2026 07:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213741
IP address blocks: 81.160.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:1b:68:5f:1d:d7:59:94:f5:55:70:f3:8c:8b:63:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Aug 20 07:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10ede2dfc5249639ef8719b5320320678731888f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:38:41:a1:1c:8a:20:9b:fa:e7:d8:d9:86:
80:af:97:b6:a6:be:b5:50:56:fc:27:7a:80:46:25:
14:c0:1b:28:8c:7c:23:34:7c:e3:fb:52:40:9a:a4:
aa:5e:fd:89:cc:1a:69:16:d0:c7:56:42:80:46:18:
9f:c0:fb:d5:11:05:60:f1:a8:50:60:8e:62:8c:05:
5c:92:26:8e:65:2b:64:eb:1e:e1:5c:9c:1a:e7:8e:
b2:5c:12:18:7b:0b:5b:bf:45:b4:60:45:2c:75:00:
51:c5:5c:fa:ee:d7:fd:7e:9a:0d:15:e2:6c:90:df:
f8:59:13:91:bc:e7:92:83:ca:72:03:f8:05:cc:6e:
dd:61:8d:05:b8:9c:c5:55:90:60:d2:03:83:97:0e:
98:b7:0b:c2:fa:74:18:31:26:73:25:0e:b9:45:68:
02:8f:95:52:06:89:7e:eb:98:5c:00:e5:50:4f:bf:
0b:cc:de:8f:75:5f:16:9e:26:80:81:4e:f3:e7:b8:
f9:18:4c:30:18:98:d5:96:e9:d3:d9:cb:80:83:2e:
25:9b:dc:e3:17:76:cd:ae:90:66:f2:ce:64:a1:e2:
4d:55:40:33:40:d7:d3:cd:dd:74:de:77:3e:74:b4:
24:2d:69:74:f6:69:56:41:fb:93:6a:4e:2d:12:4c:
80:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:ED:E2:DF:C5:24:96:39:EF:87:19:B5:32:03:20:67:87:31:88:8F
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/EO3i38Ukljnvhxm1MgMgZ4cxiI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.160.8.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:97:15:3e:e5:0e:df:fe:0a:1d:76:67:06:2a:7e:b5:c4:03:
4b:ee:44:ba:d6:6c:10:1a:14:15:89:34:2a:18:2c:c7:7e:46:
39:3c:3c:59:ff:7f:ae:80:09:c0:70:ca:96:05:a5:55:3c:eb:
fa:de:f2:1c:ca:50:07:e6:3d:0c:4d:e9:f5:ca:43:f5:28:51:
1a:07:17:9b:cb:ef:5a:3f:1a:93:a7:ff:80:9a:a8:cb:c3:71:
54:37:96:26:d8:d3:be:19:c4:7d:be:6d:9d:5e:66:41:79:fb:
51:d8:9d:94:7d:9a:d2:72:a4:f4:67:03:7d:d2:3a:0f:5b:d0:
b2:7b:aa:fb:58:78:d7:62:6b:af:9b:62:80:f7:21:cf:53:e0:
57:a0:8f:5a:72:69:f0:b1:71:a7:08:80:c1:8a:4b:67:24:3d:
93:75:8b:6b:3a:0e:bf:ff:61:60:1c:4b:3d:00:79:5d:82:3b:
36:af:f3:87:6a:95:90:de:16:d9:d9:af:e9:72:35:ee:f4:d0:
d7:a9:55:94:91:15:9e:3e:60:e6:6b:0d:be:c3:8f:b4:8b:37:
74:58:f0:83:69:36:68:80:bf:52:5e:8c:da:e5:f8:97:3e:f3:
bb:e0:6d:e2:e2:f2:fe:aa:f7:71:5b:47:48:7b:76:35:cc:80:
0b:42:52:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAeG2hfHddZlPVVcPOMi2MQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MTgyYWFiNWFkOWVmYTM4MGE2YzZmMDZjMDE2ZTE1OGJl
OTc3YmMwHhcNMjYwODIwMDczODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGVkZTJkZmM1MjQ5NjM5ZWY4NzE5YjUzMjAzMjA2Nzg3MzE4ODhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux44QaEciiCb+ufY2YaAr5e2pr61
UFb8J3qARiUUwBsojHwjNHzj+1JAmqSqXv2JzBppFtDHVkKARhifwPvVEQVg8ahQ
YI5ijAVckiaOZStk6x7hXJwa546yXBIYewtbv0W0YEUsdQBRxVz67tf9fpoNFeJs
kN/4WRORvOeSg8pyA/gFzG7dYY0FuJzFVZBg0gODlw6YtwvC+nQYMSZzJQ65RWgC
j5VSBol+65hcAOVQT78LzN6PdV8WniaAgU7z57j5GEwwGJjVlunT2cuAgy4lm9zj
F3bNrpBm8s5koeJNVUAzQNfTzd103nc+dLQkLWl09mlWQfuTak4tEkyAdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBDt4t/FJJY574cZtTIDIGeHMYiPMB8GA1UdIwQY
MBaAFFcYKqta2e+jgKbG8GwBbhWL6Xe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYt
YTk2YzYyNjZhYmRiLzEvRU8zaTM4VWtsam52aHhtMU1nTWdaNGN4aUk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYtYTk2YzYyNjZhYmRi
LzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUaAIMA0G
CSqGSIb3DQEBCwUAA4IBAQDJlxU+5Q7f/goddmcGKn61xANL7kS61mwQGhQViTQq
GCzHfkY5PDxZ/3+ugAnAcMqWBaVVPOv63vIcylAH5j0MTen1ykP1KFEaBxeby+9a
PxqTp/+AmqjLw3FUN5Ym2NO+GcR9vm2dXmZBeftR2J2UfZrScqT0ZwN90joPW9Cy
e6r7WHjXYmuvm2KA9yHPU+BXoI9acmnwsXGnCIDBiktnJD2TdYtrOg6//2FgHEs9
AHldgjs2r/OHapWQ3hbZ2a/pcjXu9NDXqVWUkRWePmDmaw2+w4+0izd0WPCDaTZo
gL9SXoza5fiXPvO74G3i4vL+qvdxW0dIe3Y1zIALQlIk
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:27:20 2026 by rpki-client