Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/d8oOPqlSra-rTmA54o0j2vzxr0A.roa
File: d8oOPqlSra-rTmA54o0j2vzxr0A.roa (raw, json)
Hash identifier: AhlHhCywmKUI+lzSLHD7mQ2qyNEVroRmLAbTnYAauQM=
Subject key identifier: 77:CA:0E:3E:A9:52:AD:AF:AB:4E:60:39:E2:8D:23:DA:FC:F1:AF:40
Certificate issuer: /CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Certificate serial: 01A17951C867C143EA3C107F298D0FD8BA4A
Authority key identifier: 6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/d8oOPqlSra-rTmA54o0j2vzxr0A.roa
Signing time: Mon 26 Oct 2026 17:46:05 +0000
ROA not before: Mon 26 Oct 2026 17:46:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205544
IP address blocks: 86.110.33.0/24 maxlen: 24
86.110.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:51:c8:67:c1:43:ea:3c:10:7f:29:8d:0f:d8:ba:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Validity
Not Before: Oct 26 17:46:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77ca0e3ea952adafab4e6039e28d23dafcf1af40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:97:8e:6c:f7:cd:78:b5:d1:c5:1f:f8:9a:21:
61:a2:16:40:d7:3b:57:ca:bd:38:54:69:e2:f2:08:
a7:3f:35:b6:72:4f:87:ae:6c:34:68:2f:52:0b:90:
df:8c:21:f7:e3:c6:63:f8:4d:97:35:04:3a:4d:de:
5e:92:d9:cd:3f:07:eb:41:12:59:d9:b9:46:7a:57:
a3:db:2e:3f:f6:08:93:8e:a6:08:3c:8d:e4:a1:46:
45:4e:d3:b5:49:7d:ca:2c:a0:81:04:a8:21:45:7b:
f0:6a:cc:7c:36:ca:cd:32:a7:ed:0a:62:35:e6:ff:
8d:7e:4c:ad:22:da:fa:3f:45:73:c5:b4:aa:00:cb:
08:ae:0f:2e:66:e9:1c:bd:c5:f4:ff:73:a6:ca:12:
8f:17:4a:5b:1b:dd:1a:9b:7f:cf:36:ea:11:a0:d8:
cd:d1:1d:8b:da:60:53:de:36:47:e9:31:ca:15:02:
05:8c:89:3e:d0:59:d8:4b:df:75:0b:1d:18:50:60:
02:30:1e:d9:ea:d1:de:12:22:00:af:84:07:0a:d4:
c2:e9:6c:6d:86:5e:55:72:0b:43:5d:4b:49:04:cd:
88:26:95:f8:42:8f:74:71:61:1c:92:6b:98:75:86:
be:a6:72:da:ce:a4:f2:fa:34:20:ce:21:0e:f1:79:
05:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CA:0E:3E:A9:52:AD:AF:AB:4E:60:39:E2:8D:23:DA:FC:F1:AF:40
X509v3 Authority Key Identifier:
keyid:6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/d8oOPqlSra-rTmA54o0j2vzxr0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.33.0/24
86.110.46.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ed:a1:65:e1:98:d7:7c:a5:1e:36:df:47:ad:cc:2d:3d:41:
0b:d7:fa:4b:7c:a4:0c:dc:a6:1a:e6:11:43:61:5d:11:5a:05:
77:c5:3b:16:a2:0f:21:2a:bd:76:dc:52:20:6c:28:27:5c:70:
bd:22:a1:1f:0d:8c:ea:49:fd:9f:92:85:45:e9:82:56:ad:3e:
04:79:7e:65:75:02:35:38:cb:52:91:c1:d2:1b:10:7f:34:60:
69:40:32:c4:e3:7a:d2:b0:de:f4:0d:c9:96:8b:9e:38:ac:9e:
0c:1e:eb:ec:e9:e0:88:d8:67:5e:6f:7b:5c:51:8d:47:59:52:
ac:2a:aa:aa:10:91:1a:8d:39:45:94:37:24:b5:b3:72:81:5b:
71:04:7c:91:01:0c:68:67:00:23:59:3c:1f:89:8d:fb:c6:0c:
b1:8d:a5:34:f0:48:17:6d:7e:9a:7f:99:15:a4:fe:18:27:d7:
92:a7:67:25:b1:ca:a3:94:ed:cf:94:2b:74:30:59:76:2b:77:
32:18:21:3e:df:12:bf:08:78:e2:17:a8:e4:d3:21:a2:88:83:
f4:e7:a4:90:21:8e:3d:81:9c:15:3a:7b:ec:7a:87:a1:7b:12:
9f:bf:54:3a:27:77:44:64:66:d8:08:73:c2:4e:d7:52:e1:c5:
5a:11:a3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:56:34 2026 by rpki-client