Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/O0GJXUB8mPo0kfsusOtJBHkt4Vs.roa
File: O0GJXUB8mPo0kfsusOtJBHkt4Vs.roa (raw, json)
Hash identifier: u7UbrFzUbOV5TgsI912dyxu81xZTMSTmqJ8sorD9At4=
Subject key identifier: 3B:41:89:5D:40:7C:98:FA:34:91:FB:2E:B0:EB:49:04:79:2D:E1:5B
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 01A0EAD52D83BC4ACE6E01A9D15664E6DD9F
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/O0GJXUB8mPo0kfsusOtJBHkt4Vs.roa
Signing time: Tue 29 Sep 2026 01:43:54 +0000
ROA not before: Tue 29 Sep 2026 01:43:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212336
IP address blocks: 69.8.128.0/24 maxlen: 24
69.8.129.0/24 maxlen: 24
69.8.130.0/23 maxlen: 24
69.8.132.0/23 maxlen: 24
69.8.136.0/24 maxlen: 24
69.8.137.0/24 maxlen: 24
69.8.138.0/23 maxlen: 24
216.23.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:d5:2d:83:bc:4a:ce:6e:01:a9:d1:56:64:e6:dd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Sep 29 01:43:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b41895d407c98fa3491fb2eb0eb4904792de15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:c0:b1:b4:29:41:5f:3d:76:dc:3e:d9:9e:
04:0b:6b:cc:89:02:17:75:1d:00:f6:d0:5f:e8:78:
79:12:17:67:e3:c4:38:7b:88:af:f7:6c:24:2d:d3:
aa:97:08:3a:5a:38:c0:08:ce:12:a0:2f:18:6e:6f:
15:3a:16:af:35:ee:e8:5b:9b:2c:8e:cc:1a:cb:94:
e0:08:9f:bc:4b:e8:0c:4f:59:42:89:05:93:15:f6:
e5:f0:08:ed:87:13:ca:5a:e8:2c:16:57:fc:3e:62:
b6:6c:4b:cc:a6:ef:61:64:60:23:ea:89:da:4c:80:
d2:4d:36:fd:b5:83:ba:5f:82:e6:ae:fe:46:49:29:
1a:1c:d5:3f:de:c6:3b:3b:67:a9:26:21:d9:3b:00:
e6:03:da:3c:4f:f0:9b:72:41:6d:8c:61:dd:dc:b6:
66:fa:e6:c2:39:de:da:f9:8b:59:e0:01:a5:be:f8:
ea:57:b5:4f:27:b0:27:92:6b:16:67:d3:38:ab:9b:
06:22:c4:d3:76:4a:59:f3:c3:3d:07:ae:f7:c2:7c:
7e:14:9d:6b:e4:0b:c0:8c:aa:71:bf:33:12:75:0f:
cd:93:64:fa:d8:8a:33:b4:dd:f5:00:61:84:08:fd:
db:f4:89:d9:18:08:7a:d9:f2:5f:1c:dd:5d:45:cd:
23:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:41:89:5D:40:7C:98:FA:34:91:FB:2E:B0:EB:49:04:79:2D:E1:5B
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/O0GJXUB8mPo0kfsusOtJBHkt4Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.8.128.0-69.8.133.255
69.8.136.0/22
216.23.124.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:a7:f7:ec:e6:3c:65:34:38:31:16:31:ef:78:1b:69:a8:a9:
c7:55:fd:f4:24:32:78:d0:d4:49:07:62:e1:c1:1c:17:d9:a2:
dd:0c:f3:1d:53:80:f4:95:78:b4:0f:2f:1a:8f:98:3a:17:8b:
d8:70:c6:38:2a:c4:be:fd:fe:fd:12:31:1b:3c:13:12:0d:1b:
97:1e:90:5c:e8:9e:9b:bd:55:cd:39:05:a3:2d:00:0b:cd:7f:
23:b8:f8:13:87:4a:f0:82:93:f7:61:46:43:a2:a3:0a:0c:14:
49:d9:09:f0:f5:d9:2a:23:81:5a:dd:eb:3c:00:37:7c:b9:2f:
53:be:18:68:48:5b:d3:d6:4d:30:e2:3a:e8:d3:d2:54:05:d1:
95:74:11:3d:eb:5b:0f:32:5d:cf:e6:34:84:3e:2a:dd:b0:02:
cf:19:0e:49:cf:f5:64:c0:0f:75:da:e1:b8:7d:85:1d:d7:93:
fe:d6:93:4b:fd:93:cf:e7:9e:05:b9:be:31:e3:3c:48:e2:20:
41:35:84:79:d2:40:3a:65:02:4e:a4:50:af:b9:0c:f0:dd:49:
40:6f:db:6a:d5:06:59:b0:22:8a:04:2f:06:c7:8b:df:4c:5a:
88:25:9a:29:4b:02:45:82:f3:b9:ef:b9:29:9f:cb:af:c9:d4:
95:f1:89:70
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAaDq1S2DvErObgGp0VZk5t2fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzdjOTliMmE0YzA2MmQ1YzIwNjc4ZjlkY2YzMjA3YWVm
ZDVlNzgwHhcNMjYwOTI5MDE0MzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjQxODk1ZDQwN2M5OGZhMzQ5MWZiMmViMGViNDkwNDc5MmRlMTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxzAsbQpQV89dtw+2Z4EC2vMiQIX
dR0A9tBf6Hh5Ehdn48Q4e4iv92wkLdOqlwg6WjjACM4SoC8Ybm8VOhavNe7oW5ss
jsway5TgCJ+8S+gMT1lCiQWTFfbl8AjthxPKWugsFlf8PmK2bEvMpu9hZGAj6ona
TIDSTTb9tYO6X4Lmrv5GSSkaHNU/3sY7O2epJiHZOwDmA9o8T/CbckFtjGHd3LZm
+ubCOd7a+YtZ4AGlvvjqV7VPJ7AnkmsWZ9M4q5sGIsTTdkpZ88M9B673wnx+FJ1r
5AvAjKpxvzMSdQ/Nk2T62IoztN31AGGECP3b9InZGAh62fJfHN1dRc0jXQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFDtBiV1AfJj6NJH7LrDrSQR5LeFbMB8GA1UdIwQY
MBaAFAg3yZsqTAYtXCBnj53PMgeu/V54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEt
ZjEyMzdmNGM1Y2Y2LzEvTzBHSlhVQjhtUG8wa2ZzdXNPdEpCSGt0NFZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEtZjEyMzdmNGM1Y2Y2
LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAdFCIAD
BAFFCIQDBAJFCIgDBALYF3wwDQYJKoZIhvcNAQELBQADggEBAC+n9+zmPGU0ODEW
Me94G2moqcdV/fQkMnjQ1EkHYuHBHBfZot0M8x1TgPSVeLQPLxqPmDoXi9hwxjgq
xL79/v0SMRs8ExING5cekFzonpu9Vc05BaMtAAvNfyO4+BOHSvCCk/dhRkOiowoM
FEnZCfD12SojgVrd6zwAN3y5L1O+GGhIW9PWTTDiOujT0lQF0ZV0ET3rWw8yXc/m
NIQ+Kt2wAs8ZDknP9WTAD3Xa4bh9hR3Xk/7Wk0v9k8/nngW5vjHjPEjiIEE1hHnS
QDplAk6kUK+5DPDdSUBv22rVBlmwIooELwbHi99MWoglmilLAkWC87nvuSmfy6/J
1JXxiXA=
-----END CERTIFICATE-----
Generated at Fri Oct 23 01:20:23 2026 by rpki-client