Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/o5GOkPrlXgQzLa6sGnscrjUeEfI.roa
File: o5GOkPrlXgQzLa6sGnscrjUeEfI.roa (raw, json)
Hash identifier: y2LKqRhTTMlRdjoeURan0gc/kQHBYRlY4LCWE7Znibk=
Subject key identifier: A3:91:8E:90:FA:E5:5E:04:33:2D:AE:AC:1A:7B:1C:AE:35:1E:11:F2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E73D281E67A30B31CD4CC807526A04537
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/o5GOkPrlXgQzLa6sGnscrjUeEfI.roa
Signing time: Fri 29 May 2026 13:00:36 +0000
ROA not before: Fri 29 May 2026 13:00:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27010
IP address blocks: 81.168.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:d2:81:e6:7a:30:b3:1c:d4:cc:80:75:26:a0:45:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 29 13:00:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3918e90fae55e04332daeac1a7b1cae351e11f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c2:2f:0e:35:80:e7:e0:e2:7d:da:2a:57:c8:
cb:77:f2:7a:4b:bf:e2:d1:96:dc:33:5e:bf:1a:57:
35:21:45:4c:da:fd:33:87:9c:c7:23:27:1b:07:4c:
a8:be:7b:19:05:9d:4a:ce:e6:42:31:38:7f:db:9e:
11:92:d9:b1:31:ac:b2:f3:3e:4a:b6:04:72:13:b1:
0e:08:0a:bb:b2:6d:0e:4e:49:bf:3e:3b:79:74:37:
6f:b2:21:7f:63:a5:6a:eb:0e:30:e8:c9:fb:ce:4e:
bf:bf:a3:77:b9:7b:d2:2d:a5:47:13:e1:d4:8b:d4:
94:72:89:fa:9f:7c:b1:78:09:7a:41:00:f7:d4:72:
dd:8b:a0:76:a0:f8:9a:f4:23:58:35:89:41:25:11:
71:2e:c1:6b:f5:8d:e6:e9:af:78:c9:a1:15:44:78:
8b:ef:cb:8a:b2:d2:71:fe:1c:6c:d6:0d:b1:6c:31:
1d:7b:10:a4:27:c2:f8:16:a7:03:07:d0:aa:2e:1f:
bc:d0:07:af:68:c1:87:a2:52:25:73:b1:e6:bf:88:
0e:23:61:17:fb:59:c5:29:19:33:bf:92:34:86:35:
31:ff:b3:83:1a:00:ba:12:9e:c4:77:3f:74:95:9c:
33:5e:b9:b7:2a:01:79:d0:35:5c:ea:a3:23:c8:4e:
55:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:91:8E:90:FA:E5:5E:04:33:2D:AE:AC:1A:7B:1C:AE:35:1E:11:F2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/o5GOkPrlXgQzLa6sGnscrjUeEfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.10.0/24
Signature Algorithm: sha256WithRSAEncryption
28:9b:4d:25:66:53:d9:f2:2c:7d:c1:43:a7:a7:66:8c:0a:7f:
fb:42:b7:46:5a:a3:75:96:70:69:d4:fa:37:5d:4c:9b:9e:41:
16:6a:72:fd:74:48:c2:82:8e:fb:a6:ce:28:73:5e:57:a8:ee:
ce:49:db:80:d2:4e:1b:26:17:7a:cf:48:ca:4f:cc:91:46:f9:
2b:db:3a:3b:4f:5d:40:0f:0c:62:ee:ab:5d:10:ff:18:32:92:
b0:03:54:0e:81:34:e6:6a:da:21:33:0b:2e:34:54:c9:fa:bd:
ab:1b:a6:fa:54:c9:26:5f:7c:e2:1b:6e:73:ee:28:5f:02:90:
65:ad:82:ce:35:cc:11:f4:74:9e:15:71:61:91:cf:a7:0c:7f:
87:5f:0e:d4:a7:88:03:84:7c:98:41:90:33:d7:a4:e8:c7:dc:
b6:fe:9b:fc:3b:0b:95:e7:55:b1:9f:96:c5:dc:5a:23:2e:5e:
52:64:07:38:5f:40:78:2b:6a:42:ef:cb:2b:16:0f:c7:d1:9a:
5b:7e:f1:55:81:76:26:11:7a:db:3a:d7:e0:a8:94:b0:02:b0:
23:63:f5:b4:a4:c0:7b:0d:a4:5d:e1:ee:08:f4:33:c4:50:9a:
22:ca:ed:31:03:d0:28:c5:38:4a:46:98:2b:d8:0a:c3:5f:8c:
a2:ae:41:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:25:04 2026 by rpki-client