Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/oL8dRFTa-VXT5pt2mawCdeRxYS4.roa
File: oL8dRFTa-VXT5pt2mawCdeRxYS4.roa (raw, json)
Hash identifier: fxvt25oPqpvVhBCod9OfMtcD4pNykpzYpCWzeg2ziD0=
Subject key identifier: A0:BF:1D:44:54:DA:F9:55:D3:E6:9B:76:99:AC:02:75:E4:71:61:2E
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019E3BC0E0FB85F5C116EB4C7BE3D4378AE0
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/oL8dRFTa-VXT5pt2mawCdeRxYS4.roa
Signing time: Mon 18 May 2026 15:42:36 +0000
ROA not before: Mon 18 May 2026 15:42:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203676
IP address blocks: 191.44.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3b:c0:e0:fb:85:f5:c1:16:eb:4c:7b:e3:d4:37:8a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: May 18 15:42:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0bf1d4454daf955d3e69b7699ac0275e471612e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:08:35:da:5c:76:e3:8e:a4:f9:80:e0:c7:20:
db:e9:59:b3:9f:5a:99:5c:d9:45:c3:07:4d:3f:85:
e0:ee:7c:3a:c5:56:69:9b:6c:9e:20:18:60:5a:2b:
b9:10:0a:5b:6b:9d:db:f4:95:6a:7a:f1:21:af:3a:
5c:cd:56:85:20:6f:a2:d7:12:69:a1:11:3a:64:27:
ea:c0:df:69:c8:63:55:de:cc:72:78:78:34:2a:01:
f1:70:4c:77:23:49:a9:d7:01:3f:66:60:cf:41:96:
7e:b4:fe:40:51:5f:e5:ef:43:75:31:7d:92:ae:30:
76:b1:e9:d0:d4:0d:d4:db:98:1e:bb:dd:2e:60:62:
f5:a0:df:b1:26:86:54:36:f9:b4:fc:36:ff:4b:55:
70:d8:d2:e0:0e:3b:bc:7c:26:1c:65:1c:28:ef:14:
58:e5:2e:01:08:c4:3a:06:e2:b9:a5:f4:9c:27:b6:
98:1b:ca:5f:b3:76:9d:77:08:b3:1e:9e:b2:0b:a6:
f4:19:bd:fa:7f:9d:9d:02:b7:20:8d:99:24:82:53:
05:97:b3:dd:88:ff:3f:74:67:7d:09:74:09:22:63:
44:8a:f0:3f:8b:49:aa:43:10:9f:b9:10:d0:6c:71:
8c:5b:3d:b6:b6:69:ff:f2:4f:40:ac:a3:b2:ea:db:
2b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BF:1D:44:54:DA:F9:55:D3:E6:9B:76:99:AC:02:75:E4:71:61:2E
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/oL8dRFTa-VXT5pt2mawCdeRxYS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.116.0/24
Signature Algorithm: sha256WithRSAEncryption
69:54:7a:86:9a:4b:e2:59:04:f8:a2:64:ee:42:0f:27:69:3c:
3a:a8:2d:51:5e:38:28:ed:7d:64:f3:bc:b5:49:8a:29:57:12:
13:63:68:c7:55:5a:d8:b9:12:9f:a6:ee:27:6e:0c:c3:55:7f:
4b:0b:78:e6:98:7a:6d:70:2b:69:a0:b6:6e:7b:9b:35:a4:f8:
19:da:d3:9f:a9:41:46:64:19:c1:ca:35:59:53:2b:1f:bf:92:
be:de:54:4e:5f:97:21:ae:b0:0e:0c:f9:7b:54:f0:b9:98:ca:
0b:9c:3f:ce:bc:27:77:1e:bf:39:d9:80:d7:87:47:bf:f4:53:
f8:32:6e:4b:42:0c:8c:ee:9b:1b:0f:90:cb:fd:f9:d7:25:b7:
bd:13:ba:96:05:60:06:61:05:cf:da:d8:0f:2b:99:42:e4:31:
6a:3d:43:0b:da:4e:66:6c:cd:4a:c8:2a:cf:d8:9c:bb:81:7c:
28:06:9f:7d:ff:f7:06:cd:45:19:36:27:11:dc:62:c1:a9:28:
89:8b:32:d4:e4:d9:b1:b3:96:ad:2b:d9:77:24:ea:e4:ac:ab:
80:0b:b8:06:a4:fc:6d:36:d0:a3:a7:d6:86:22:8c:e2:5e:ab:
8c:00:fd:ce:18:5b:f0:df:ac:56:26:7f:02:10:41:c2:a5:9a:
86:21:8b:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ47wOD7hfXBFutMe+PUN4rgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwNTE4MTU0MjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGJmMWQ0NDU0ZGFmOTU1ZDNlNjliNzY5OWFjMDI3NWU0NzE2MTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQg12lx2446k+YDgxyDb6Vmzn1qZ
XNlFwwdNP4Xg7nw6xVZpm2yeIBhgWiu5EApba53b9JVqevEhrzpczVaFIG+i1xJp
oRE6ZCfqwN9pyGNV3sxyeHg0KgHxcEx3I0mp1wE/ZmDPQZZ+tP5AUV/l70N1MX2S
rjB2senQ1A3U25geu90uYGL1oN+xJoZUNvm0/Db/S1Vw2NLgDju8fCYcZRwo7xRY
5S4BCMQ6BuK5pfScJ7aYG8pfs3addwizHp6yC6b0Gb36f52dArcgjZkkglMFl7Pd
iP8/dGd9CXQJImNEivA/i0mqQxCfuRDQbHGMWz22tmn/8k9ArKOy6tsrGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKC/HURU2vlV0+abdpmsAnXkcWEuMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvb0w4ZFJGVGEtVlhUNXB0Mm1hd0NkZVJ4WVM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvyx0MA0G
CSqGSIb3DQEBCwUAA4IBAQBpVHqGmkviWQT4omTuQg8naTw6qC1RXjgo7X1k87y1
SYopVxITY2jHVVrYuRKfpu4nbgzDVX9LC3jmmHptcCtpoLZue5s1pPgZ2tOfqUFG
ZBnByjVZUysfv5K+3lROX5chrrAODPl7VPC5mMoLnD/OvCd3Hr852YDXh0e/9FP4
Mm5LQgyM7psbD5DL/fnXJbe9E7qWBWAGYQXP2tgPK5lC5DFqPUML2k5mbM1KyCrP
2Jy7gXwoBp99//cGzUUZNicR3GLBqSiJizLU5Nmxs5atK9l3JOrkrKuAC7gGpPxt
NtCjp9aGIoziXquMAP3OGFvw36xWJn8CEEHCpZqGIYs4
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:03:42 2026 by rpki-client