Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ONrIT_x1Qwd_gIL89KFSyouVXvg.roa
File: ONrIT_x1Qwd_gIL89KFSyouVXvg.roa (raw, json)
Hash identifier: oFsGkEsWOpkjfgJ8rV/2brjl1fLKWUtovnzZKJyLfks=
Subject key identifier: 38:DA:C8:4F:FC:75:43:07:7F:80:82:FC:F4:A1:52:CA:8B:95:5E:F8
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A09EB7C5923352D6DC60CF240CE65BDD26
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ONrIT_x1Qwd_gIL89KFSyouVXvg.roa
Signing time: Mon 14 Sep 2026 07:00:38 +0000
ROA not before: Mon 14 Sep 2026 07:00:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.200.0/24 maxlen: 24
45.8.252.0/24 maxlen: 24
45.8.253.0/24 maxlen: 24
85.208.104.0/24 maxlen: 24
85.208.105.0/24 maxlen: 24
85.208.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 16:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:b7:c5:92:33:52:d6:dc:60:cf:24:0c:e6:5b:dd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 14 07:00:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38dac84ffc7543077f8082fcf4a152ca8b955ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b8:99:44:2d:1d:69:92:4c:36:1e:7a:b1:30:
f4:04:e7:28:f9:29:b4:c8:98:52:75:ab:f6:68:c5:
4e:d5:cf:55:de:80:b7:2a:b5:3a:72:74:ff:b0:7b:
9b:0e:40:5c:74:bd:9e:9e:e4:44:62:00:ac:6f:05:
47:19:2c:59:9f:d5:af:26:66:71:1c:fb:02:a8:9d:
4b:05:ff:54:04:c6:bb:d2:ff:1d:03:ef:fe:25:08:
35:8d:bd:d8:dd:b7:2a:11:e0:a5:66:82:f7:81:9f:
36:8a:ef:ad:b4:b7:36:74:15:23:11:e5:57:0a:c8:
14:31:b9:d9:1c:85:7c:81:21:98:b4:4f:5c:b6:3c:
cb:47:bb:4d:34:ba:27:63:5a:1d:fe:8c:01:41:ea:
9f:2f:10:00:50:b3:00:6d:92:10:01:aa:bc:cb:5e:
98:dc:96:9d:e2:2b:a0:45:e0:56:d3:d4:bc:78:09:
e0:a3:b7:04:a6:30:83:73:a8:29:be:44:85:4b:3b:
87:a4:ea:f1:ad:57:58:80:c3:8f:9e:ba:c6:2a:68:
83:44:f7:2c:cd:35:81:93:8a:15:70:08:ac:92:61:
5c:d7:d2:18:5a:a6:93:59:49:35:58:15:9e:43:1d:
a5:0a:a6:f8:77:99:61:31:ee:13:62:ed:df:67:1f:
ea:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DA:C8:4F:FC:75:43:07:7F:80:82:FC:F4:A1:52:CA:8B:95:5E:F8
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ONrIT_x1Qwd_gIL89KFSyouVXvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.200.0/24
45.8.252.0/23
85.208.104.0/23
85.208.113.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c0:2b:68:32:e5:2a:5a:af:26:b4:ee:c5:76:cf:b9:93:cf:
93:9f:77:88:6e:fe:bc:02:a8:e1:e5:31:29:25:17:1f:3e:3d:
eb:84:64:ce:71:3f:70:1e:4c:b3:0e:81:69:46:c8:24:56:09:
04:e9:1d:a4:5f:0e:cc:6e:d0:b6:a5:a3:fe:2c:ba:9f:3c:ab:
75:e6:f5:3f:4c:1d:fe:a8:c3:6f:59:f2:51:e3:a6:0f:ec:f9:
9b:0b:52:d5:34:00:7d:57:e5:c6:6e:41:be:1f:3d:ed:9b:f1:
1f:43:6b:6b:33:ee:71:a7:cf:23:d8:1f:61:b7:3f:ef:88:b2:
77:36:53:c9:7d:db:2f:16:6f:ff:0f:82:c5:00:97:10:ba:2a:
61:88:28:1e:eb:fc:87:bd:5b:07:59:92:78:63:fe:8a:28:5b:
e9:1f:f3:b0:ae:2e:4e:ea:39:48:1a:1f:19:e7:ed:b7:75:94:
36:4d:57:38:e7:27:47:19:bc:c6:ea:55:59:32:7e:da:f9:80:
e0:b0:53:fa:fc:00:4b:3d:b2:84:ff:2a:28:6c:9a:da:8f:86:
64:15:97:36:02:4e:94:e9:b7:df:fb:17:c1:ee:b7:bb:92:f7:
31:c7:53:62:5c:f5:bc:bb:f0:e1:c4:f9:63:63:8b:b7:f9:c2:
f0:cc:d6:97
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaCet8WSM1LW3GDPJAzmW90mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjYwOTE0MDcwMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGRhYzg0ZmZjNzU0MzA3N2Y4MDgyZmNmNGExNTJjYThiOTU1ZWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2riZRC0daZJMNh56sTD0BOco+Sm0
yJhSdav2aMVO1c9V3oC3KrU6cnT/sHubDkBcdL2enuREYgCsbwVHGSxZn9WvJmZx
HPsCqJ1LBf9UBMa70v8dA+/+JQg1jb3Y3bcqEeClZoL3gZ82iu+ttLc2dBUjEeVX
CsgUMbnZHIV8gSGYtE9ctjzLR7tNNLonY1od/owBQeqfLxAAULMAbZIQAaq8y16Y
3Jad4iugReBW09S8eAngo7cEpjCDc6gpvkSFSzuHpOrxrVdYgMOPnrrGKmiDRPcs
zTWBk4oVcAiskmFc19IYWqaTWUk1WBWeQx2lCqb4d5lhMe4TYu3fZx/qWwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDjayE/8dUMHf4CC/PShUsqLlV74MB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvT05ySVRfeDFRd2RfZ0lMODlLRlN5b3VWWHZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALQjIAwQB
LQj8AwQBVdBoAwQAVdBxMA0GCSqGSIb3DQEBCwUAA4IBAQAkwCtoMuUqWq8mtO7F
ds+5k8+Tn3eIbv68Aqjh5TEpJRcfPj3rhGTOcT9wHkyzDoFpRsgkVgkE6R2kXw7M
btC2paP+LLqfPKt15vU/TB3+qMNvWfJR46YP7PmbC1LVNAB9V+XGbkG+Hz3tm/Ef
Q2trM+5xp88j2B9htz/viLJ3NlPJfdsvFm//D4LFAJcQuiphiCge6/yHvVsHWZJ4
Y/6KKFvpH/Owri5O6jlIGh8Z5+23dZQ2TVc45ydHGbzG6lVZMn7a+YDgsFP6/ABL
PbKE/yoobJraj4ZkFZc2Ak6U6bff+xfB7re7kvcxx1NiXPW8u/DhxPljY4u3+cLw
zNaX
-----END CERTIFICATE-----
Generated at Thu Sep 17 01:21:27 2026 by rpki-client