Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/O6IDrDsGhF1eTbwU9x6NJxs2RFI.roa
File: O6IDrDsGhF1eTbwU9x6NJxs2RFI.roa (raw, json)
Hash identifier: pVOrFHAX/Lnb3FuStEB2bMj1QRU4ZVatYcxzuU5OSMo=
Subject key identifier: 3B:A2:03:AC:3B:06:84:5D:5E:4D:BC:14:F7:1E:8D:27:1B:36:44:52
Certificate issuer: /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial: 019C8AA8E72554107ECE705732EFD0E7395A
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/O6IDrDsGhF1eTbwU9x6NJxs2RFI.roa
Signing time: Mon 23 Feb 2026 13:20:50 +0000
ROA not before: Mon 23 Feb 2026 13:20:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35470
IP address blocks: 77.241.80.0/24 maxlen: 24
77.241.86.0/24 maxlen: 24
83.217.67.0/24 maxlen: 24
83.217.69.0/24 maxlen: 24
217.19.239.0/24 maxlen: 24
2a02:d0f::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8a:a8:e7:25:54:10:7e:ce:70:57:32:ef:d0:e7:39:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
Validity
Not Before: Feb 23 13:20:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ba203ac3b06845d5e4dbc14f71e8d271b364452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:69:28:cc:21:83:a8:51:c3:3f:ad:5c:5e:33:
4a:bc:da:7c:3d:31:d2:12:45:3e:91:3a:ca:12:1d:
47:b7:89:10:89:64:9c:45:63:19:72:db:f6:c1:7a:
74:be:2b:51:5e:0c:82:66:e6:7c:b0:7e:06:8f:40:
49:68:f1:d4:ef:54:46:25:63:37:d4:48:8f:99:40:
20:2e:ed:37:ae:87:9c:85:8a:01:d5:f8:36:e4:cf:
da:56:c5:60:e6:b2:16:25:14:43:4f:e3:a2:15:b6:
1f:35:fb:b2:6a:e2:9d:e1:f1:b7:33:b6:fc:48:71:
33:e2:f9:ba:06:eb:ae:97:15:49:c4:27:57:b7:4f:
ec:be:03:64:41:fa:e2:d9:c2:0d:aa:cb:d3:f6:3f:
ef:20:58:62:4c:b5:d2:fd:9c:09:65:36:87:19:34:
8f:12:ae:7f:89:66:02:5a:34:1e:ff:8d:66:ef:d6:
1a:74:e0:4b:e6:fa:d6:ba:db:1c:03:ca:55:68:bd:
5f:0a:43:55:de:25:80:42:83:1e:9e:af:0e:4f:1a:
36:87:f4:ea:fa:b5:6a:4e:45:1a:e8:19:c2:6e:e1:
d9:d1:27:e0:7f:42:cb:5a:6f:e8:f4:d4:a3:d0:fb:
fa:be:51:1f:e7:86:4d:31:5e:a3:d5:03:a9:70:14:
ba:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A2:03:AC:3B:06:84:5D:5E:4D:BC:14:F7:1E:8D:27:1B:36:44:52
X509v3 Authority Key Identifier:
keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/O6IDrDsGhF1eTbwU9x6NJxs2RFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.80.0/24
77.241.86.0/24
83.217.67.0/24
83.217.69.0/24
217.19.239.0/24
IPv6:
2a02:d0f::/44
Signature Algorithm: sha256WithRSAEncryption
24:26:c7:69:62:0c:e5:38:46:46:61:88:ca:41:a9:67:08:af:
4e:4f:a9:37:89:ce:d7:9e:1c:57:bf:ef:15:83:3c:f0:49:c2:
be:17:53:20:fa:73:1f:e9:74:da:fb:94:f0:1a:58:ca:73:34:
1a:ac:36:0e:69:a1:68:52:b8:74:9c:10:a0:20:3b:df:b3:c5:
1b:9f:e8:32:b2:53:20:3e:30:4f:83:25:e4:59:8d:52:ce:67:
16:b2:07:a8:e5:87:51:a2:5d:f5:fc:8e:a3:44:68:51:da:58:
6b:a2:ba:bb:d0:14:49:07:72:de:0a:cd:18:7b:1d:8c:e2:51:
07:15:81:2a:3f:11:37:66:e4:79:49:2a:8d:19:5e:a2:f0:da:
ba:69:ae:2f:b5:5c:52:14:4d:87:ce:69:c1:d4:83:45:5e:46:
e2:81:a7:35:a5:92:22:0b:55:a3:39:9c:b9:47:2a:6f:03:55:
78:3e:e1:7a:34:82:b7:c5:85:0a:00:b8:36:5c:5b:81:61:43:
29:85:be:35:6f:a0:cf:83:e3:12:0b:86:c3:65:22:5c:b1:2b:
af:ff:52:fb:bf:52:fa:75:d7:8c:df:fa:c7:20:76:5a:09:71:
2c:95:62:20:37:97:14:ad:37:49:a3:7f:7a:2b:d1:f4:61:45:
ae:a2:09:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:53:10 2026 by rpki-client