Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/O8tXuxRFQOkLS2j-q3Ipz6rPTkc.roa
File: O8tXuxRFQOkLS2j-q3Ipz6rPTkc.roa (raw, json)
Hash identifier: djWARojZvpN74ddrIbbxdjeMO26ZjR0Y/nyLh/tJ4eY=
Subject key identifier: 3B:CB:57:BB:14:45:40:E9:0B:4B:68:FE:AB:72:29:CF:AA:CF:4E:47
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01A0E1AC8369082046B47AAC7DBA760F2707
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/O8tXuxRFQOkLS2j-q3Ipz6rPTkc.roa
Signing time: Sun 27 Sep 2026 07:02:54 +0000
ROA not before: Sun 27 Sep 2026 07:02:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47583
IP address blocks: 88.222.208.0/20 maxlen: 24
88.222.240.0/21 maxlen: 24
88.223.80.0/20 maxlen: 24
88.223.80.0/21 maxlen: 24
88.223.88.0/22 maxlen: 24
88.223.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:ac:83:69:08:20:46:b4:7a:ac:7d:ba:76:0f:27:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Sep 27 07:02:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3bcb57bb144540e90b4b68feab7229cfaacf4e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fb:fa:90:f4:d3:57:ef:ed:11:f8:38:58:0d:
22:33:fd:7d:c8:2c:5c:89:3e:03:12:aa:b4:03:bb:
8c:4f:93:32:a2:10:b4:50:97:dd:7d:84:3f:82:1c:
4e:3c:97:eb:f8:19:79:83:0b:63:6a:95:9d:dc:26:
f9:ad:b7:cf:d9:0a:36:13:5c:a2:d8:f5:4a:52:99:
7d:f1:8a:32:ed:8b:a4:7a:15:d6:13:cc:b0:b4:00:
bc:26:bf:97:8c:bc:4b:6f:0c:2b:18:01:dd:5a:f8:
24:f5:c5:3b:01:e2:d0:bd:f4:51:a3:2d:5a:f9:8c:
5b:7a:26:99:00:47:c4:d6:d0:9b:a6:83:2d:91:3c:
3b:b4:4c:89:05:d1:c3:ff:0e:a8:f1:ca:5f:cf:f7:
47:e9:38:c8:fd:37:6a:b9:2a:c9:d8:00:39:c3:f1:
29:0b:68:a0:f5:2b:ef:5f:75:ab:1f:30:36:42:95:
85:0f:56:1b:bf:b0:44:cb:ea:b1:8d:e8:52:47:92:
7c:97:87:7c:87:e6:ff:63:b9:e0:d9:d8:62:59:56:
2f:10:c1:c5:ac:95:47:dd:e9:1c:39:9b:e7:41:25:
87:db:15:56:02:6a:76:f9:71:94:ff:9a:2a:b4:1c:
5f:66:44:87:ea:d1:d3:24:0f:d2:26:92:c5:e2:9e:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CB:57:BB:14:45:40:E9:0B:4B:68:FE:AB:72:29:CF:AA:CF:4E:47
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/O8tXuxRFQOkLS2j-q3Ipz6rPTkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.222.208.0/20
88.222.240.0/21
88.223.80.0/20
Signature Algorithm: sha256WithRSAEncryption
75:56:38:db:c8:26:44:32:9b:77:27:46:b8:42:eb:da:69:e4:
10:09:bf:16:d5:d9:dd:06:6d:27:36:65:02:7c:0c:19:8a:33:
0f:4e:44:b4:eb:ff:33:f6:d1:e3:a0:59:d3:c0:34:51:84:52:
5b:a1:2d:00:18:43:c8:86:3a:0a:db:68:6a:aa:20:ae:92:13:
1c:80:93:6a:cf:08:55:e6:47:b7:5e:66:66:94:af:08:75:25:
0b:4b:e9:f2:a3:a5:51:30:ca:77:9e:e6:f2:c7:9e:59:b1:04:
03:32:18:24:0f:2a:fc:25:2d:33:d3:b7:7b:50:05:54:26:fe:
08:ea:9c:52:ae:29:19:a3:ac:9e:02:1a:00:5a:97:8a:07:f7:
4d:a0:24:37:39:8a:3f:c2:3b:d5:0e:d4:56:e3:3b:40:8e:1e:
d4:04:46:ee:7a:61:ba:56:78:68:c6:13:27:e9:f1:33:06:6b:
4b:0c:b0:f0:0f:b2:08:f4:9b:b3:ab:c1:4f:be:f3:8c:c6:9c:
d1:66:48:d9:9a:e0:dc:4b:b2:7f:12:f8:b0:7e:91:9b:e5:c2:
15:b4:03:94:b5:e1:eb:7c:e1:b7:0e:d2:d5:36:13:28:8d:03:
39:f7:e2:9e:c4:68:32:7e:fa:90:4a:09:13:cc:1b:5e:8f:65:
e9:57:3f:61
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaDhrINpCCBGtHqsfbp2DycHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjYwOTI3MDcwMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmNiNTdiYjE0NDU0MGU5MGI0YjY4ZmVhYjcyMjljZmFhY2Y0ZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/v6kPTTV+/tEfg4WA0iM/19yCxc
iT4DEqq0A7uMT5MyohC0UJfdfYQ/ghxOPJfr+Bl5gwtjapWd3Cb5rbfP2Qo2E1yi
2PVKUpl98Yoy7YukehXWE8ywtAC8Jr+XjLxLbwwrGAHdWvgk9cU7AeLQvfRRoy1a
+YxbeiaZAEfE1tCbpoMtkTw7tEyJBdHD/w6o8cpfz/dH6TjI/TdquSrJ2AA5w/Ep
C2ig9SvvX3WrHzA2QpWFD1Ybv7BEy+qxjehSR5J8l4d8h+b/Y7ng2dhiWVYvEMHF
rJVH3ekcOZvnQSWH2xVWAmp2+XGU/5oqtBxfZkSH6tHTJA/SJpLF4p7VRwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDvLV7sURUDpC0to/qtyKc+qz05HMB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvTzh0WHV4UkZRT2tMUzJqLXEzSXB6NnJQVGtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEWN7QAwQD
WN7wAwQEWN9QMA0GCSqGSIb3DQEBCwUAA4IBAQB1VjjbyCZEMpt3J0a4QuvaaeQQ
Cb8W1dndBm0nNmUCfAwZijMPTkS06/8z9tHjoFnTwDRRhFJboS0AGEPIhjoK22hq
qiCukhMcgJNqzwhV5ke3XmZmlK8IdSULS+nyo6VRMMp3nubyx55ZsQQDMhgkDyr8
JS0z07d7UAVUJv4I6pxSrikZo6yeAhoAWpeKB/dNoCQ3OYo/wjvVDtRW4ztAjh7U
BEbuemG6VnhoxhMn6fEzBmtLDLDwD7II9Juzq8FPvvOMxpzRZkjZmuDcS7J/Eviw
fpGb5cIVtAOUteHrfOG3DtLVNhMojQM59+KexGgyfvqQSgkTzBtej2XpVz9h
-----END CERTIFICATE-----
Generated at Sat Oct 24 07:10:36 2026 by rpki-client