Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/oC8MNAr3RRJD7iVzFgvjH2c0fSg.roa
File: oC8MNAr3RRJD7iVzFgvjH2c0fSg.roa (raw, json)
Hash identifier: zQGn/viKIKxmP8Pxorl9pkhqm4xAapY3F6TTAuu6mlY=
Subject key identifier: A0:2F:0C:34:0A:F7:45:12:43:EE:25:73:16:0B:E3:1F:67:34:7D:28
Certificate issuer: /CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Certificate serial: 019C6FFD3D42BD4B3248C0C3CB330978558E
Authority key identifier: 61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/oC8MNAr3RRJD7iVzFgvjH2c0fSg.roa
Signing time: Wed 18 Feb 2026 09:03:12 +0000
ROA not before: Wed 18 Feb 2026 09:03:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50599
IP address blocks: 194.117.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6f:fd:3d:42:bd:4b:32:48:c0:c3:cb:33:09:78:55:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Validity
Not Before: Feb 18 09:03:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a02f0c340af7451243ee2573160be31f67347d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3d:49:aa:41:ce:c7:23:f6:07:08:f4:28:9d:
49:3b:fe:88:83:d3:b9:7d:31:00:fd:b0:eb:c3:ce:
02:f1:b0:48:47:af:63:4e:3c:91:87:c8:bd:d4:20:
09:f6:be:24:da:51:3f:e2:24:98:40:22:f1:7b:b6:
17:28:85:4b:b1:4f:9f:62:0c:44:98:f3:6e:6d:b2:
60:fe:1a:e2:51:a1:db:86:55:b9:1b:1c:e0:f5:0d:
67:dd:77:8e:f7:a1:39:96:5b:69:b9:ca:9a:6f:96:
8a:f9:d9:32:4a:57:bd:11:e3:3b:2d:2a:df:7f:ad:
9d:c0:c9:09:f5:f1:a2:5c:8a:7e:3d:6c:93:8d:2c:
61:56:af:a1:b4:4c:c7:6a:f2:ab:cd:5d:8a:df:96:
71:a1:4c:df:0c:21:fb:56:6d:f2:7c:f3:a5:ea:1f:
4a:01:7a:ff:1d:73:9d:7c:15:48:93:7e:33:ae:cc:
fb:84:09:8f:63:63:eb:ec:9e:22:90:36:5a:83:0a:
4e:a0:4a:76:00:3a:ee:75:9e:52:16:16:bc:67:7b:
b8:cd:be:e5:37:a2:26:40:7b:9b:7d:8c:fc:50:a6:
4e:9b:b4:b9:72:9f:66:c1:3a:e9:67:a8:a6:a2:c6:
0e:90:5c:97:a5:dd:25:9b:83:ef:fb:bf:82:e7:19:
98:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2F:0C:34:0A:F7:45:12:43:EE:25:73:16:0B:E3:1F:67:34:7D:28
X509v3 Authority Key Identifier:
keyid:61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/oC8MNAr3RRJD7iVzFgvjH2c0fSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.81.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:99:83:92:fc:19:90:4a:79:f3:e8:d9:ea:2f:54:bd:0a:9a:
58:38:2d:74:93:e2:6f:da:1e:f3:b7:53:59:e0:14:67:86:91:
d2:82:2d:70:0d:8a:c0:88:e4:61:65:4e:79:8d:a6:7d:67:aa:
ae:38:77:92:6f:6d:6c:bc:71:ca:e4:bd:16:a4:35:89:64:47:
b2:3f:c2:cc:0b:01:68:b2:d6:3e:79:dc:8b:a6:3a:a9:86:e6:
39:1a:a5:97:18:2a:38:db:5f:a6:dc:a0:3b:31:4f:89:c9:fe:
ad:76:63:06:0a:60:14:8a:08:3b:6a:e9:f3:48:53:3e:3e:0f:
b6:07:55:d9:93:e9:dd:39:ab:58:4a:a4:21:7f:5f:87:3f:36:
a9:b1:9e:6e:92:9d:5e:1e:44:a9:94:78:b4:41:4b:b2:9e:30:
e4:e6:d3:ea:20:4c:1b:96:95:5a:42:35:bc:13:e0:07:d1:4e:
02:71:0b:65:88:58:57:fd:ac:d0:7f:c7:d3:ba:71:88:bc:8a:
7b:98:c3:6d:a6:11:d2:ed:03:84:f1:aa:13:70:3e:f9:0d:6e:
f3:8e:67:dc:69:3f:b9:d4:3d:bd:39:f6:99:6d:43:c3:5d:ad:
de:d8:0e:a3:6d:38:f3:87:cf:7c:66:4a:fc:e1:02:81:d9:b2:
7c:f9:1f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:18:21 2026 by rpki-client