Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/o0gVrE7Bc9zU6ryWDaX492d1sfA.roa
File: o0gVrE7Bc9zU6ryWDaX492d1sfA.roa (raw, json)
Hash identifier: 9v3ef2RVFouJBdizh1A6hXEySOEcF+L137n8Gi5/wzQ=
Subject key identifier: A3:48:15:AC:4E:C1:73:DC:D4:EA:BC:96:0D:A5:F8:F7:67:75:B1:F0
Certificate issuer: /CN=887e81ba84344598c61462833aadf3204eae087c
Certificate serial: 01A14421CFC628514999662CDF5F26B84E25
Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/o0gVrE7Bc9zU6ryWDaX492d1sfA.roa
Signing time: Fri 16 Oct 2026 09:53:48 +0000
ROA not before: Fri 16 Oct 2026 09:53:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30950
IP address blocks: 193.28.236.0/24 maxlen: 24
2001:67c:324::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:21:cf:c6:28:51:49:99:66:2c:df:5f:26:b8:4e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887e81ba84344598c61462833aadf3204eae087c
Validity
Not Before: Oct 16 09:53:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a34815ac4ec173dcd4eabc960da5f8f76775b1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:20:e3:f2:19:80:e4:f1:a3:6d:c6:0a:f9:65:
c5:b1:79:df:28:d2:3d:3f:34:8f:27:81:6b:a5:4d:
5f:89:ba:b9:6c:d7:ca:cf:e1:66:61:c0:6f:76:95:
ed:f4:59:0e:33:61:5f:f7:3b:45:33:67:28:96:80:
6f:de:52:f1:89:ff:fb:bd:e0:06:3c:41:54:cf:eb:
3d:76:13:ef:f0:a1:99:96:1c:ff:55:7f:88:9c:00:
6a:ac:df:d6:f5:57:f8:b8:e9:de:ab:fe:65:02:83:
ad:b4:f2:3c:6d:08:d3:96:00:83:d0:e5:f8:47:80:
c6:04:3d:f5:7d:66:87:4b:a2:fa:53:58:a2:22:59:
15:d0:50:24:58:95:80:3f:84:f3:86:2c:a8:66:0f:
28:75:18:8d:71:31:95:32:39:a3:72:7b:77:1f:c2:
47:53:66:33:43:6c:f8:26:2c:2e:5b:f7:b7:f4:52:
b5:a4:ea:50:6f:bf:14:ac:5b:9b:5e:41:0a:34:56:
9b:0a:21:aa:15:83:e3:98:5f:50:90:10:11:3b:84:
f9:6e:a5:a3:10:9d:70:cd:bd:a6:b1:dd:8b:65:1c:
5c:7f:d1:e8:c9:3f:25:8f:23:ff:d2:8b:66:b9:2c:
75:18:a6:9d:ac:ee:ec:4f:97:f1:74:25:e8:b2:bc:
bc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:48:15:AC:4E:C1:73:DC:D4:EA:BC:96:0D:A5:F8:F7:67:75:B1:F0
X509v3 Authority Key Identifier:
keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/o0gVrE7Bc9zU6ryWDaX492d1sfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.236.0/24
IPv6:
2001:67c:324::/48
Signature Algorithm: sha256WithRSAEncryption
32:78:0b:2c:9c:e1:2d:2b:7f:31:15:87:31:50:76:d8:12:03:
24:11:c9:e1:76:c0:f5:08:65:48:e0:f3:96:57:00:05:a1:b5:
8f:79:76:92:ba:28:48:38:e6:70:0c:79:63:df:56:af:80:7e:
e9:f3:6f:c3:28:a5:a1:ca:12:53:e1:64:bb:dd:de:a6:a2:e7:
fc:56:38:70:c0:08:5b:2d:c0:62:4e:90:45:ca:83:15:74:0c:
83:c2:c3:eb:1e:0a:97:81:3b:41:cc:f6:45:c8:a2:67:c0:aa:
71:ee:08:bc:9e:3a:98:cc:ba:1e:47:33:cd:55:7a:ae:33:cc:
8a:cc:59:d1:31:ee:68:39:54:2d:55:0f:bb:23:54:5a:d2:b2:
5b:1e:f2:55:b0:73:0c:25:f2:67:cf:94:8c:af:86:26:54:f0:
0e:48:ad:c5:43:5a:b8:63:1e:31:ac:e5:6a:bf:5c:b2:bd:02:
92:d0:60:18:9a:77:98:ef:a2:18:0a:ad:af:0c:9d:45:c2:44:
8a:75:7a:ca:da:e1:52:65:66:60:72:0a:73:3f:52:4c:cb:61:
c2:a1:2a:2a:fc:c1:72:64:fc:41:2d:75:99:a0:33:4a:00:fc:
c7:36:4e:2a:2d:73:8a:bd:7d:cd:4e:0d:4b:68:aa:e0:1f:5e:
5d:92:ef:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 08:11:02 2026 by rpki-client