Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/cOybd2AKkwT3-8-wBxPvKcqbuEo.roa
File: cOybd2AKkwT3-8-wBxPvKcqbuEo.roa (raw, json)
Hash identifier: WxJoeyLzW80RnnqmGYRRjnEjsLQc2Y/pgGV7DTaKY84=
Subject key identifier: 70:EC:9B:77:60:0A:93:04:F7:FB:CF:B0:07:13:EF:29:CA:9B:B8:4A
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 01A049B9DDF830FFCF96378EF28EF11E09C7
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/cOybd2AKkwT3-8-wBxPvKcqbuEo.roa
Signing time: Fri 28 Aug 2026 18:55:12 +0000
ROA not before: Fri 28 Aug 2026 18:55:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62068
IP address blocks: 80.86.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 11:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:b9:dd:f8:30:ff:cf:96:37:8e:f2:8e:f1:1e:09:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Aug 28 18:55:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70ec9b77600a9304f7fbcfb00713ef29ca9bb84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:c9:81:cf:da:c9:ed:fc:b6:b6:d2:32:15:
c8:1e:c4:e0:e9:c5:3c:78:a1:91:00:61:93:1a:b1:
0d:f4:d0:69:9b:53:ab:f7:6e:f0:4f:12:27:59:94:
7c:50:09:af:7a:d2:67:62:b4:8a:69:5a:69:09:a3:
75:f5:58:d0:a1:e2:3d:a1:fb:5c:17:6b:ae:67:a2:
97:03:23:94:5b:08:b6:09:fd:d4:f1:64:d9:3a:95:
dc:f2:6c:f2:6e:3d:ed:dd:3a:a9:b7:96:a3:c4:95:
1f:24:57:b7:f7:17:62:da:63:df:46:66:f4:0e:2a:
3e:9a:7c:31:8a:72:a3:fe:77:cb:33:b7:9d:2f:c6:
7a:04:09:ee:71:b8:e7:e4:d0:6e:a9:2e:2e:be:c8:
9a:cc:21:f8:28:3c:2c:4c:97:90:9e:31:a4:d6:49:
5c:51:93:70:24:24:cc:f2:75:59:a5:02:ef:6e:8c:
97:fd:e8:27:7c:ef:76:fb:08:21:b5:87:96:76:e2:
1c:fb:3c:c9:b0:c8:fd:c8:4c:4c:5e:ec:74:f8:28:
03:c8:a8:dc:a7:64:58:f0:74:e2:7b:74:dd:93:c2:
c2:5b:f4:18:d6:20:9e:02:35:bc:b6:e9:78:16:e9:
4e:37:a5:96:76:21:7c:73:7e:42:e7:ff:5f:c9:45:
89:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EC:9B:77:60:0A:93:04:F7:FB:CF:B0:07:13:EF:29:CA:9B:B8:4A
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/cOybd2AKkwT3-8-wBxPvKcqbuEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.220.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:5c:d5:63:0a:8a:71:5e:2e:76:09:f9:fc:29:3b:68:da:e5:
44:3d:2a:72:4c:7f:ed:d7:86:b4:7b:cc:97:b9:df:82:d1:55:
58:ff:6d:58:b6:d9:fb:3b:85:d6:0b:e3:da:7f:b4:08:b1:f0:
50:81:0f:51:53:35:e8:bb:bb:91:08:f1:d3:da:82:6c:4f:d4:
67:0e:de:c0:70:f6:33:a2:14:3d:ff:03:a8:77:fc:f0:d6:b0:
f8:e3:e9:ff:0d:e8:84:86:05:b4:86:fb:f9:2c:14:3b:50:74:
91:01:36:67:4b:10:dd:ee:e0:0f:cd:3e:c5:1c:54:15:ae:5c:
85:ed:62:cb:3a:45:8c:e1:47:00:ec:b2:6b:31:6c:38:43:db:
f5:8d:60:c3:81:ad:d2:b0:5e:99:b2:37:60:c6:4a:52:ce:ec:
f7:f9:6e:53:0c:33:8e:31:63:58:52:1c:07:04:f6:81:e7:4d:
3f:d2:a0:af:6c:80:bc:27:9b:94:26:6e:75:b0:08:9d:75:5a:
2f:f3:72:44:30:15:8e:d0:11:91:23:d0:3e:47:8a:bc:c0:31:
a0:25:1b:2f:78:df:f7:b6:4e:ca:7f:ea:a8:c3:5d:32:32:c6:
c5:d7:84:3e:99:da:6c:a1:a1:7c:63:22:8c:69:14:66:c3:94:
30:5a:9a:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBJud34MP/PljeO8o7xHgnHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMjI2ZjY3MWMyNjQzYTVjMDQ4NDYyNjRmZWUwMWY5NDNh
YzJiZmMwHhcNMjYwODI4MTg1NTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGVjOWI3NzYwMGE5MzA0ZjdmYmNmYjAwNzEzZWYyOWNhOWJiODRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuObJgc/aye38trbSMhXIHsTg6cU8
eKGRAGGTGrEN9NBpm1Or927wTxInWZR8UAmvetJnYrSKaVppCaN19VjQoeI9oftc
F2uuZ6KXAyOUWwi2Cf3U8WTZOpXc8mzybj3t3Tqpt5ajxJUfJFe39xdi2mPfRmb0
Dio+mnwxinKj/nfLM7edL8Z6BAnucbjn5NBuqS4uvsiazCH4KDwsTJeQnjGk1klc
UZNwJCTM8nVZpQLvboyX/egnfO92+wghtYeWduIc+zzJsMj9yExMXux0+CgDyKjc
p2RY8HTie3Tdk8LCW/QY1iCeAjW8tul4FulON6WWdiF8c35C5/9fyUWJOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHDsm3dgCpME9/vPsAcT7ynKm7hKMB8GA1UdIwQY
MBaAFFIib2ccJkOlwEhGJk/uAflDrCv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgt
YTEyZGUzYTMzNTUzLzEvY095YmQyQUtrd1QzLTgtd0J4UHZLY3FidUVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgtYTEyZGUzYTMzNTUz
LzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFbcMA0G
CSqGSIb3DQEBCwUAA4IBAQAaXNVjCopxXi52Cfn8KTto2uVEPSpyTH/t14a0e8yX
ud+C0VVY/21Yttn7O4XWC+Paf7QIsfBQgQ9RUzXou7uRCPHT2oJsT9RnDt7AcPYz
ohQ9/wOod/zw1rD44+n/DeiEhgW0hvv5LBQ7UHSRATZnSxDd7uAPzT7FHFQVrlyF
7WLLOkWM4UcA7LJrMWw4Q9v1jWDDga3SsF6ZsjdgxkpSzuz3+W5TDDOOMWNYUhwH
BPaB500/0qCvbIC8J5uUJm51sAiddVov83JEMBWO0BGRI9A+R4q8wDGgJRsveN/3
tk7Kf+qow10yMsbF14Q+mdpsoaF8YyKMaRRmw5QwWpr8
-----END CERTIFICATE-----
Generated at Fri Sep 18 22:06:22 2026 by rpki-client