Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/oLiuEoOBIaZFRHkiJUFfiSKKHwk.roa
File: oLiuEoOBIaZFRHkiJUFfiSKKHwk.roa (raw, json)
Hash identifier: HDxlhV6rveassmnQwwofOMmIF1p19Y9g4WnshEZXckE=
Subject key identifier: A0:B8:AE:12:83:81:21:A6:45:44:79:22:25:41:5F:89:22:8A:1F:09
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01A0B425223561734F248D8D3106E587A1A7
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/oLiuEoOBIaZFRHkiJUFfiSKKHwk.roa
Signing time: Fri 18 Sep 2026 10:52:07 +0000
ROA not before: Fri 18 Sep 2026 10:52:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 2.56.0.0/24 maxlen: 24
2.56.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:25:22:35:61:73:4f:24:8d:8d:31:06:e5:87:a1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 18 10:52:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0b8ae12838121a64544792225415f89228a1f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:df:81:35:4b:d8:e6:b8:8e:b3:02:85:77:
af:42:a5:57:8a:26:05:51:e6:85:83:9b:bb:a0:b6:
a4:6e:b6:0b:c3:34:3c:fd:85:d3:ba:72:33:24:11:
b4:15:5a:9b:62:02:7c:ae:c2:32:05:6f:fb:98:d4:
cb:c6:80:5b:f2:75:7c:07:fd:3f:e1:f2:91:55:fa:
78:48:8b:12:b3:9f:ad:d0:d7:77:a1:ff:76:a1:34:
53:9d:ff:7b:2f:c0:53:d2:87:70:dc:84:e1:e8:67:
d1:27:a7:80:50:75:9b:69:7f:82:5f:e7:50:fe:b1:
a4:06:45:df:de:e2:f3:12:1e:c5:f9:08:c7:51:4c:
49:6d:93:1c:0c:09:4c:55:40:71:97:35:f7:5d:ae:
59:e7:9b:10:1d:ed:2f:cc:58:8e:06:7f:12:d3:b6:
8f:a9:3d:75:dc:a8:49:46:16:03:7f:2a:3a:33:cd:
06:26:c6:06:6d:46:73:c7:71:c1:f7:d3:c0:94:41:
dc:ff:fc:b9:15:82:00:d9:7e:e6:74:5d:fb:0a:2b:
09:9b:2e:b4:a8:e3:65:20:2d:f1:13:70:d6:c4:8c:
dc:b7:df:18:9b:22:b3:78:5d:03:68:32:b5:5c:c8:
ad:1b:40:a1:00:26:a3:1d:f2:58:fe:d5:2e:7c:57:
d9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B8:AE:12:83:81:21:A6:45:44:79:22:25:41:5F:89:22:8A:1F:09
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/oLiuEoOBIaZFRHkiJUFfiSKKHwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.0.0/23
Signature Algorithm: sha256WithRSAEncryption
23:c9:11:50:b9:7d:7a:ae:5d:8a:14:42:b1:ab:6a:3e:33:36:
16:27:d6:2e:cf:21:3a:e4:d1:3b:94:c7:29:db:9b:36:06:dd:
6b:34:4a:d3:29:c0:88:f9:65:bd:28:66:93:fb:6f:53:99:a5:
88:54:3a:ac:2e:41:49:c8:6a:fd:1b:87:c2:1d:18:a9:cc:88:
0e:d4:5e:77:c5:03:64:a4:0e:7b:d5:ab:46:95:60:07:cb:75:
10:f6:19:41:38:8a:69:cd:a3:32:ca:77:6b:dd:9c:3a:c6:bc:
d9:61:e8:fc:3a:28:05:31:af:e8:a5:35:23:47:c2:f5:6e:24:
28:55:da:33:cd:d7:3f:93:9c:4c:2d:57:47:11:fd:fa:05:46:
86:10:60:39:de:15:1b:bd:c4:b7:0f:67:e5:af:13:d3:91:12:
04:08:4d:12:9c:40:ce:04:4b:33:be:f6:3f:cc:e8:2c:3b:21:
99:cd:64:54:af:dc:dc:54:36:11:70:f2:3e:de:08:ed:01:15:
e6:d2:6b:6a:a2:98:ff:4b:f8:3d:06:4d:95:78:cf:be:98:c8:
aa:8e:d0:e4:ab:c3:01:30:b6:d4:1f:7f:4e:16:14:e0:a0:01:
7d:58:1b:90:4d:9c:d5:ef:7c:b3:a6:77:45:88:6a:0e:94:1c:
f1:c9:78:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC0JSI1YXNPJI2NMQblh6GnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjYwOTE4MTA1MjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGI4YWUxMjgzODEyMWE2NDU0NDc5MjIyNTQxNWY4OTIyOGExZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx13fgTVL2Oa4jrMChXevQqVXiiYF
UeaFg5u7oLakbrYLwzQ8/YXTunIzJBG0FVqbYgJ8rsIyBW/7mNTLxoBb8nV8B/0/
4fKRVfp4SIsSs5+t0Nd3of92oTRTnf97L8BT0odw3ITh6GfRJ6eAUHWbaX+CX+dQ
/rGkBkXf3uLzEh7F+QjHUUxJbZMcDAlMVUBxlzX3Xa5Z55sQHe0vzFiOBn8S07aP
qT113KhJRhYDfyo6M80GJsYGbUZzx3HB99PAlEHc//y5FYIA2X7mdF37CisJmy60
qONlIC3xE3DWxIzct98YmyKzeF0DaDK1XMitG0ChACajHfJY/tUufFfZ0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKC4rhKDgSGmRUR5IiVBX4kiih8JMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvb0xpdUVvT0JJYVpGUkhraUpVRmZpU0tLSHdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBAjgAMA0G
CSqGSIb3DQEBCwUAA4IBAQAjyRFQuX16rl2KFEKxq2o+MzYWJ9YuzyE65NE7lMcp
25s2Bt1rNErTKcCI+WW9KGaT+29TmaWIVDqsLkFJyGr9G4fCHRipzIgO1F53xQNk
pA571atGlWAHy3UQ9hlBOIppzaMyyndr3Zw6xrzZYej8OigFMa/opTUjR8L1biQo
Vdozzdc/k5xMLVdHEf36BUaGEGA53hUbvcS3D2flrxPTkRIECE0SnEDOBEszvvY/
zOgsOyGZzWRUr9zcVDYRcPI+3gjtARXm0mtqopj/S/g9Bk2VeM++mMiqjtDkq8MB
MLbUH39OFhTgoAF9WBuQTZzV73yzpndFiGoOlBzxyXiP
-----END CERTIFICATE-----
Generated at Fri Sep 18 19:09:48 2026 by rpki-client