Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/O8qIq7YOH6KDxtwFG24i8e59HOw.roa
File: O8qIq7YOH6KDxtwFG24i8e59HOw.roa (raw, json)
Hash identifier: izQbMdPGkYIxQM5xOZOlqOhdH5X7Gae7dDcLYt1HJpw=
Subject key identifier: 3B:CA:88:AB:B6:0E:1F:A2:83:C6:DC:05:1B:6E:22:F1:EE:7D:1C:EC
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 01A0E72BADBFDF68CD7DFD125CEF63BE2639
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/O8qIq7YOH6KDxtwFG24i8e59HOw.roa
Signing time: Mon 28 Sep 2026 08:39:54 +0000
ROA not before: Mon 28 Sep 2026 08:39:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 79.110.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:2b:ad:bf:df:68:cd:7d:fd:12:5c:ef:63:be:26:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Sep 28 08:39:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3bca88abb60e1fa283c6dc051b6e22f1ee7d1cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bd:b7:1a:51:87:83:77:fd:1f:ad:3e:e1:4c:
8e:b2:45:13:a0:74:b7:99:aa:de:04:2c:5f:7e:aa:
46:6d:46:fe:3c:40:cf:16:85:ce:54:96:8c:fd:b4:
fd:cc:3b:0e:a4:2c:ce:b3:62:3c:1e:b7:f6:4a:eb:
c3:d3:fd:41:19:fb:c9:a8:24:7a:ef:39:95:bc:81:
f8:54:4d:51:3f:38:e5:6e:f1:98:1a:21:a6:1b:b4:
15:50:7f:e2:eb:37:3c:d2:11:3f:3b:d7:55:21:4b:
c2:d1:11:de:54:11:27:37:dd:6a:c9:31:ef:f9:84:
ea:99:8a:b7:15:25:15:bb:3b:31:ed:17:8b:d2:99:
c3:6d:23:f7:36:6d:18:d6:c7:09:cc:1b:22:38:47:
e0:dd:58:3d:b4:79:ea:2d:b3:86:ed:44:74:b9:5c:
ae:4f:2d:d9:3c:47:ab:5b:17:ce:d1:1f:41:f4:4e:
bd:b2:b7:97:2b:c4:57:d6:72:6c:ec:23:89:d8:80:
fb:75:2e:8b:e5:72:21:5e:26:4c:a6:d4:a0:6d:3b:
a3:f3:35:6b:9d:79:28:09:5d:6e:28:4a:af:0a:8b:
8a:f8:52:96:4d:0d:f2:86:10:4b:53:bc:c8:0c:6d:
75:85:f2:d6:7b:d1:ec:d6:23:c5:59:0f:30:93:26:
cf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CA:88:AB:B6:0E:1F:A2:83:C6:DC:05:1B:6E:22:F1:EE:7D:1C:EC
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/O8qIq7YOH6KDxtwFG24i8e59HOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.0.0/24
Signature Algorithm: sha256WithRSAEncryption
99:97:00:de:c9:7a:53:eb:71:2c:4e:62:df:e4:35:98:c0:19:
e8:8b:da:00:88:db:95:fb:98:69:26:34:08:99:f1:2e:57:ef:
fc:f9:1d:91:f7:f4:34:00:81:99:17:c5:9b:42:fe:93:06:84:
49:a2:2b:9c:61:a4:8c:e5:b9:7c:e5:5d:5c:2f:d3:98:fe:73:
37:c8:0f:5c:ec:d8:67:a6:fb:78:c5:ad:67:07:3d:a2:a3:00:
fe:ea:64:41:6b:e1:d8:6b:bf:00:f3:d8:3c:1a:69:75:f2:e9:
5a:e3:4d:7b:d3:ca:7c:02:d7:9c:93:76:6e:1f:f8:77:34:8c:
e3:9d:3b:3d:d6:e4:bc:c6:53:94:0c:f3:4e:35:e3:25:3d:86:
4b:48:4b:90:6d:0a:5f:0f:7a:d2:70:7d:d1:33:d8:15:36:19:
41:e3:85:e9:90:89:df:af:7d:25:cb:b8:22:e7:dc:b8:4d:5e:
d3:0d:13:83:3c:7d:6d:a8:87:02:00:6e:94:4a:ae:6b:25:dc:
97:cf:98:14:be:7f:63:02:e9:b7:cc:36:ea:06:4b:73:f8:a4:
e7:bc:a7:b0:f2:89:ca:3f:fb:f1:48:6b:3e:ba:94:5b:4a:a4:
af:4c:f9:fd:a4:bc:05:4e:c9:84:7b:45:ed:ef:91:b6:86:29:
c3:ef:3a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:47:34 2026 by rpki-client