Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/s-OrRs_NYP_NP52qUqP6fghVc0I.roa
File: s-OrRs_NYP_NP52qUqP6fghVc0I.roa (raw, json)
Hash identifier: o9FcxytVD/Gn0DANPhKF76P+ooE5vX+ccvZ9870ZhzU=
Subject key identifier: B3:E3:AB:46:CF:CD:60:FF:CD:3F:9D:AA:52:A3:FA:7E:08:55:73:42
Certificate issuer: /CN=0b405306d0561a379d7789472b78fb22b6870a9c
Certificate serial: 019C8940BBCF705B6BBB6127A04C9C67D2D7
Authority key identifier: 0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/s-OrRs_NYP_NP52qUqP6fghVc0I.roa
Signing time: Mon 23 Feb 2026 06:47:26 +0000
ROA not before: Mon 23 Feb 2026 06:47:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39817
IP address blocks: 81.91.208.0/20 maxlen: 20
2a02:2310::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:89:40:bb:cf:70:5b:6b:bb:61:27:a0:4c:9c:67:d2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b405306d0561a379d7789472b78fb22b6870a9c
Validity
Not Before: Feb 23 06:47:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3e3ab46cfcd60ffcd3f9daa52a3fa7e08557342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:a9:91:b2:06:02:79:96:ac:12:94:d5:bc:
3e:1d:38:43:96:82:5a:a0:fc:d4:90:af:6f:8a:e0:
22:32:13:1c:b5:22:c4:5e:f7:d5:18:18:9b:55:89:
26:71:20:b9:25:8c:ab:7c:14:cc:e0:5f:09:58:a0:
1c:58:30:27:f9:73:34:f9:7f:c3:8a:38:90:b7:8a:
3f:6e:11:86:9b:92:fd:1d:05:6f:b6:8d:c2:c7:09:
1b:ba:dd:32:c9:5f:d0:d6:af:02:0a:4a:c1:44:1f:
33:4d:9e:69:b1:d5:be:ae:76:4a:da:aa:c5:23:69:
72:4f:80:74:54:bf:d9:36:61:4c:4b:0f:35:d0:f0:
1b:e5:23:b3:f3:d4:22:d7:3a:ee:04:b6:0e:80:93:
56:14:16:66:9c:52:96:b0:1c:8e:9a:28:1d:15:81:
89:2e:0b:c7:30:ae:15:62:7c:cc:d7:15:f1:1e:68:
bb:72:fd:f1:e9:3b:b1:2f:e9:af:d0:ff:fc:4d:e9:
ab:49:2e:c1:85:9c:00:ba:73:2c:89:a0:79:f8:41:
69:e2:05:6c:9f:0d:9b:24:1e:5d:50:57:32:e9:37:
7f:b4:5b:3f:56:67:82:93:65:df:d2:0d:33:59:37:
b0:e3:06:7a:d8:d3:6c:87:00:0c:58:3b:25:74:a2:
8f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E3:AB:46:CF:CD:60:FF:CD:3F:9D:AA:52:A3:FA:7E:08:55:73:42
X509v3 Authority Key Identifier:
keyid:0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/s-OrRs_NYP_NP52qUqP6fghVc0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.91.208.0/20
IPv6:
2a02:2310::/32
Signature Algorithm: sha256WithRSAEncryption
4a:d3:ac:b3:8e:91:92:59:25:e4:01:a5:e7:b1:9b:90:c3:8e:
08:96:f1:fe:7f:80:90:01:c9:c2:1a:39:db:e4:43:87:be:cd:
60:3c:51:c3:3e:3b:69:b9:19:43:7f:c3:2d:e0:a7:29:80:ba:
1c:1a:22:4c:17:1b:b0:5e:2f:91:9b:b6:6f:96:cb:85:ba:8b:
dc:05:e0:d5:98:b6:36:91:c6:26:c1:9f:c9:fa:e8:71:64:b5:
3b:8f:32:1b:c4:4b:16:eb:af:35:6a:27:d7:0a:9a:ce:5f:ae:
38:a5:3c:35:56:6f:d7:80:66:8c:2c:e4:73:45:62:f7:3c:bf:
12:0b:53:03:87:23:cf:e0:51:2d:82:8d:de:35:95:56:4d:a5:
e0:50:82:ea:de:04:80:59:f4:4c:0c:e9:34:9f:79:d1:5a:66:
30:36:b1:cf:6d:ae:1c:45:17:bf:b8:ed:14:0c:e4:ca:2a:89:
57:4d:41:42:ca:04:2d:ad:21:6f:17:8e:73:c6:39:d8:27:c8:
62:ca:a4:d8:5b:7b:01:00:32:c2:06:51:f7:d7:73:22:69:8c:
94:73:0f:cf:1f:8a:43:fa:4a:aa:58:ae:29:8e:fb:1e:87:ed:
76:d2:c4:a3:5d:cf:9d:1a:9d:b6:c2:ac:43:07:45:33:43:76:
d2:b4:42:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:30:37 2026 by rpki-client