Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/O8r_qv2yXQqAvZrQ0jfpQHwYgi4.roa
File: O8r_qv2yXQqAvZrQ0jfpQHwYgi4.roa (raw, json)
Hash identifier: RWTdXUa+iSybycGajkLlOunVuvAlO58dNpaXACjUKZs=
Subject key identifier: 3B:CA:FF:AA:FD:B2:5D:0A:80:BD:9A:D0:D2:37:E9:40:7C:18:82:2E
Certificate issuer: /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial: 01A0C5A78D9C22C7E6D0D25A57B1EBE3ABE0
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/O8r_qv2yXQqAvZrQ0jfpQHwYgi4.roa
Signing time: Mon 21 Sep 2026 20:28:07 +0000
ROA not before: Mon 21 Sep 2026 20:28:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210487
IP address blocks: 185.161.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:a7:8d:9c:22:c7:e6:d0:d2:5a:57:b1:eb:e3:ab:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Validity
Not Before: Sep 21 20:28:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3bcaffaafdb25d0a80bd9ad0d237e9407c18822e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:e7:8c:bd:d9:3a:08:a8:c3:57:fa:f6:78:
2b:63:0a:5d:7f:e1:17:bd:80:c7:0f:f9:54:24:58:
b8:f1:ba:46:c4:78:2e:40:92:d9:ac:7e:ab:58:3f:
fd:1d:e8:fd:2b:07:21:a0:c2:7c:10:4a:bf:1f:0d:
cc:49:3d:d8:11:f6:c3:65:c7:cb:4e:bc:e4:13:3c:
60:6d:ab:c0:45:d9:0a:ad:58:fd:2d:97:9b:4b:31:
02:92:ff:98:c9:38:0d:33:ef:93:33:7e:a6:0a:f1:
8e:5f:1f:56:51:54:76:40:80:3e:79:75:a2:f0:66:
75:4e:c1:89:f5:39:36:d5:45:f5:8c:3c:cf:fd:e8:
00:9f:cc:dc:a9:b4:f4:7b:33:01:78:d1:2b:36:75:
2f:26:b0:05:17:1c:d1:a6:76:7a:a5:b1:52:39:7d:
72:fb:da:81:a3:74:e0:c7:e2:a6:2d:1f:45:6d:20:
f4:a0:26:01:cc:cb:82:8a:16:31:b0:75:c0:bd:d1:
a6:c1:e3:10:f5:49:07:48:35:d7:6b:44:db:d8:43:
f2:ce:4e:37:f3:c3:7e:c2:f2:ba:d3:0e:6f:b3:98:
1e:2c:53:30:67:79:b8:e1:06:a1:81:f6:f6:c0:a4:
f2:c8:43:6f:e7:3f:67:6b:46:52:cf:5c:0e:ee:07:
ef:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CA:FF:AA:FD:B2:5D:0A:80:BD:9A:D0:D2:37:E9:40:7C:18:82:2E
X509v3 Authority Key Identifier:
keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/O8r_qv2yXQqAvZrQ0jfpQHwYgi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.36.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:91:07:43:9f:18:4d:17:e4:bc:b1:f5:05:12:46:9f:bc:dd:
8b:f2:e8:c6:a8:08:aa:8c:66:21:9f:46:32:3e:be:f1:65:ab:
48:c2:cd:94:2c:8a:93:95:c4:a7:82:a8:6b:13:2d:87:4c:a7:
18:5c:b1:7f:57:a9:db:3f:d2:21:4f:66:bc:5c:c0:58:b5:95:
65:0f:5e:e1:14:c4:e9:df:13:d4:96:84:30:1a:d2:c8:f5:35:
01:01:9d:0c:75:e5:ec:2f:18:fb:2f:4a:09:a3:cb:77:85:0c:
63:9d:f7:b4:78:5e:ef:d5:08:02:c5:82:40:8c:e6:ff:f7:47:
52:f0:94:50:fc:bc:eb:d2:d9:20:77:3e:c1:ea:ea:fe:7f:45:
12:4d:71:e5:ab:49:3b:6e:0d:38:f2:93:5a:a0:57:00:c1:22:
b3:79:3f:0b:dd:a2:34:1d:b2:fe:c9:4a:17:13:e3:a7:20:cf:
62:cf:05:d7:e7:5c:5c:4e:ba:8c:f8:18:0d:b2:fc:b6:a8:8a:
fa:2f:30:fc:ac:e9:67:33:4b:cf:a5:86:ea:f6:b4:3f:15:49:
2c:eb:7c:15:50:00:1e:3a:c9:7a:03:22:7f:72:59:2b:e6:33:
c4:30:21:6f:a3:28:0b:5a:c7:f4:91:ce:1e:5c:64:5f:83:17:
5b:67:2f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:36:22 2026 by rpki-client