Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/O5uTquH5RPTOQbmmStVXaejWCOs.roa
File: O5uTquH5RPTOQbmmStVXaejWCOs.roa (raw, json)
Hash identifier: FB6MzbHMpsFpbr55IXrC9Y7Wddt7Q2mcYiiI4m8yVaY=
Subject key identifier: 3B:9B:93:AA:E1:F9:44:F4:CE:41:B9:A6:4A:D5:57:69:E8:D6:08:EB
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01A008B13C084AE5ADABB4818CF2A4EC52D5
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/O5uTquH5RPTOQbmmStVXaejWCOs.roa
Signing time: Sun 16 Aug 2026 03:50:27 +0000
ROA not before: Sun 16 Aug 2026 03:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209697
IP address blocks: 77.242.157.0/24 maxlen: 24
88.209.200.0/24 maxlen: 24
88.209.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:08:b1:3c:08:4a:e5:ad:ab:b4:81:8c:f2:a4:ec:52:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 16 03:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b9b93aae1f944f4ce41b9a64ad55769e8d608eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:b4:21:79:75:e5:c0:d7:1d:11:d0:2e:9a:
fc:7e:5a:76:fe:36:3b:98:0d:8c:3c:9f:5a:e3:62:
0b:86:79:12:46:85:36:f4:d9:9b:45:2e:69:da:34:
d9:f6:1d:02:84:09:c7:c6:0f:20:fd:02:db:a9:6c:
7b:bc:a8:25:26:68:03:80:3e:33:e3:5f:80:19:9f:
8d:06:d4:1a:28:38:bf:aa:8f:69:ce:ca:b9:e6:4f:
cb:4d:65:19:bf:13:b5:b3:70:98:d5:1a:d9:39:50:
57:5c:b4:98:84:e0:ef:4a:ae:a6:00:6e:48:c7:26:
31:2a:e8:e5:32:c8:86:29:e8:9c:a3:27:2a:0f:00:
ba:c7:e8:aa:5b:22:4f:80:1e:53:fa:a2:dc:fa:db:
8e:ca:1a:71:d2:e5:31:61:d9:f8:fa:ca:54:4b:82:
4d:9b:c2:34:c2:19:92:f3:81:3a:9f:26:bb:6d:31:
0d:a0:14:92:a0:66:f2:6f:23:4c:77:5f:8c:bf:47:
1b:1e:59:dc:00:89:28:5d:5b:0f:91:a6:01:ee:b2:
2c:38:92:b0:5b:f6:19:1d:33:b4:2c:fc:73:a3:4f:
1c:ec:de:13:5f:0d:48:8d:02:28:a2:8e:d7:e7:3d:
a5:ef:97:0e:c1:23:46:5a:d1:c0:9a:de:7d:36:e0:
e5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9B:93:AA:E1:F9:44:F4:CE:41:B9:A6:4A:D5:57:69:E8:D6:08:EB
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/O5uTquH5RPTOQbmmStVXaejWCOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.157.0/24
88.209.200.0/24
88.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:65:68:9f:e0:53:6f:0c:31:a9:35:45:f0:6a:b5:6a:91:5e:
29:50:f5:72:41:69:a0:ae:cf:f1:2c:be:82:b8:7f:dd:0b:51:
b7:bb:2a:1a:35:ce:3b:62:7d:fc:55:ca:de:a9:bd:4e:51:d5:
df:f3:78:69:0e:c8:e8:ce:09:a9:91:2a:81:d9:ed:37:9b:6a:
1a:4c:c9:43:32:53:e7:14:37:2f:b3:69:85:31:38:d8:d6:f5:
b5:80:12:03:d5:fe:fc:80:34:f1:26:24:b4:36:75:bd:9b:38:
36:f5:1a:a2:aa:95:93:3b:6a:ac:1f:59:f2:7a:5b:20:d6:e9:
bc:95:b3:bb:e2:ae:9a:52:46:16:d6:51:c1:a3:e7:c2:2d:a2:
79:9a:99:45:47:7e:cd:ed:e4:2e:d3:61:b3:59:cb:3d:60:ab:
d1:0e:7e:41:40:4f:ab:5e:af:ed:ba:c6:fe:16:1b:68:52:a1:
9c:71:61:91:ef:43:82:72:2a:c2:b7:4b:7a:b3:04:90:85:45:
8e:67:10:1d:d9:7c:ab:bd:70:0b:08:98:42:79:6b:5a:4c:81:
ce:e6:a2:f3:1c:ef:f0:5a:71:91:a7:14:0c:1a:4b:03:dc:0d:
44:61:4a:34:ed:59:e9:22:96:a1:ae:53:88:21:05:da:54:f2:
59:2c:3b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:40 2026 by rpki-client