Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/AIbgyj5rJwPTdoMqpUx7rJPOJ8M.roa
File: AIbgyj5rJwPTdoMqpUx7rJPOJ8M.roa (raw, json)
Hash identifier: U67iM3Cy3xcIqgxJAbYo314HCWTV25q08Le26IrCtYQ=
Subject key identifier: 00:86:E0:CA:3E:6B:27:03:D3:76:83:2A:A5:4C:7B:AC:93:CE:27:C3
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A155234BA8E0E142468700B8BA6191E058
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/AIbgyj5rJwPTdoMqpUx7rJPOJ8M.roa
Signing time: Mon 19 Oct 2026 17:08:58 +0000
ROA not before: Mon 19 Oct 2026 17:08:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39450
IP address blocks: 188.212.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:23:4b:a8:e0:e1:42:46:87:00:b8:ba:61:91:e0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Oct 19 17:08:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0086e0ca3e6b2703d376832aa54c7bac93ce27c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:aa:b8:84:de:84:73:51:7a:a8:3b:34:bd:
ed:18:c2:99:4c:08:85:5a:5c:61:43:c2:b4:8d:f2:
de:a1:08:34:cd:d0:e9:6d:3e:14:91:84:c6:43:7f:
0d:ec:ea:4f:82:1f:ce:c3:56:1e:4c:84:e3:95:87:
e0:71:2c:8b:a0:82:98:aa:19:1f:68:4d:24:45:81:
d2:c9:df:24:8d:1e:3f:e3:dc:f2:d1:7c:b4:4a:b1:
53:94:7f:30:05:c1:4d:85:b6:60:08:b0:82:c4:75:
37:2a:d4:62:d5:9e:a0:9d:01:09:7b:c0:2d:02:f1:
8d:af:7a:04:d7:5b:4e:8d:5c:a6:54:2d:e8:be:08:
f5:5e:1b:c5:26:70:c1:8c:9c:61:23:0d:46:8e:7c:
d6:92:ee:2f:dc:6b:1d:22:cb:98:5b:53:c1:ad:05:
13:8c:9d:f1:a2:08:26:42:ee:3a:25:36:cb:9e:09:
1e:03:44:dd:47:fb:d6:40:a2:5b:34:e7:5d:86:9c:
60:30:1d:7d:76:30:76:56:a9:84:f1:87:3d:ab:4d:
21:2d:1e:18:c0:b0:fc:50:84:38:48:0a:d9:f7:7a:
e6:5e:54:e4:2e:40:fe:63:6b:7c:17:1f:e4:0a:65:
0f:83:23:e9:01:c4:09:ae:55:4e:e4:49:65:4b:9e:
f8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:86:E0:CA:3E:6B:27:03:D3:76:83:2A:A5:4C:7B:AC:93:CE:27:C3
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/AIbgyj5rJwPTdoMqpUx7rJPOJ8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.14.0/24
Signature Algorithm: sha256WithRSAEncryption
70:52:9b:5c:cb:bd:55:6b:88:06:95:3a:e3:c5:ae:98:39:0d:
e8:20:2c:23:05:51:c5:c9:11:86:85:25:e6:71:6b:d2:26:be:
90:e4:2f:47:dd:40:58:7a:00:0d:61:0b:b1:4c:2f:77:88:20:
89:43:c7:df:0f:3b:d3:8f:cd:54:dd:bd:da:3a:46:24:d7:da:
e8:f4:13:80:f5:1f:a0:95:51:19:46:6d:b1:81:1b:07:1a:dc:
26:49:42:35:56:87:0e:5a:f5:18:ac:e1:f4:d9:0c:5e:d9:ed:
bd:83:5c:16:b0:51:a6:59:f5:91:33:21:47:07:07:85:c6:2e:
89:00:7e:e2:ab:2b:d2:08:39:eb:3c:0c:b1:a4:1e:67:b8:1f:
25:51:a4:e8:ef:d7:5c:3b:3e:a7:2b:0d:8e:84:c8:00:28:d3:
4a:76:3e:ab:33:19:4e:55:68:6d:ec:e7:70:4d:a7:59:88:89:
a6:99:cb:02:62:7c:b3:8d:f8:8a:98:00:5d:b6:62:7b:40:0a:
1b:93:01:24:ff:58:08:a7:55:c7:ae:05:40:6b:03:c3:2f:dc:
1c:8e:61:00:5b:b3:aa:b6:e1:6b:59:fc:04:80:9c:d4:23:03:
1a:5d:a1:86:34:5b:a3:63:76:53:d8:46:c1:00:76:81:15:8a:
b2:b5:b0:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFVI0uo4OFCRocAuLphkeBYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjYxMDE5MTcwODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDg2ZTBjYTNlNmIyNzAzZDM3NjgzMmFhNTRjN2JhYzkzY2UyN2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4+quITehHNReqg7NL3tGMKZTAiF
WlxhQ8K0jfLeoQg0zdDpbT4UkYTGQ38N7OpPgh/Ow1YeTITjlYfgcSyLoIKYqhkf
aE0kRYHSyd8kjR4/49zy0Xy0SrFTlH8wBcFNhbZgCLCCxHU3KtRi1Z6gnQEJe8At
AvGNr3oE11tOjVymVC3ovgj1XhvFJnDBjJxhIw1GjnzWku4v3GsdIsuYW1PBrQUT
jJ3xoggmQu46JTbLngkeA0TdR/vWQKJbNOddhpxgMB19djB2VqmE8Yc9q00hLR4Y
wLD8UIQ4SArZ93rmXlTkLkD+Y2t8Fx/kCmUPgyPpAcQJrlVO5EllS574TQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFACG4Mo+aycD03aDKqVMe6yTzifDMB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvQUliZ3lqNXJKd1BUZG9NcXBVeDdySlBPSjhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNQOMA0G
CSqGSIb3DQEBCwUAA4IBAQBwUptcy71Va4gGlTrjxa6YOQ3oICwjBVHFyRGGhSXm
cWvSJr6Q5C9H3UBYegANYQuxTC93iCCJQ8ffDzvTj81U3b3aOkYk19ro9BOA9R+g
lVEZRm2xgRsHGtwmSUI1VocOWvUYrOH02Qxe2e29g1wWsFGmWfWRMyFHBweFxi6J
AH7iqyvSCDnrPAyxpB5nuB8lUaTo79dcOz6nKw2OhMgAKNNKdj6rMxlOVWht7Odw
TadZiImmmcsCYnyzjfiKmABdtmJ7QAobkwEk/1gIp1XHrgVAawPDL9wcjmEAW7Oq
tuFrWfwEgJzUIwMaXaGGNFujY3ZT2EbBAHaBFYqytbDS
-----END CERTIFICATE-----
Generated at Sun Oct 25 14:20:28 2026 by rpki-client