Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/OlOjaehZAlphcHqVmmTowCbGt4w.roa
File: OlOjaehZAlphcHqVmmTowCbGt4w.roa (raw, json)
Hash identifier: cMGH7rGT8bq+zY9mSAt/CKVz3I6hhsPT7Xtl05keutY=
Subject key identifier: 3A:53:A3:69:E8:59:02:5A:61:70:7A:95:9A:64:E8:C0:26:C6:B7:8C
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01A075A5E25D5F6A6C42644C732100BDBAEF
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/OlOjaehZAlphcHqVmmTowCbGt4w.roa
Signing time: Sun 06 Sep 2026 07:36:40 +0000
ROA not before: Sun 06 Sep 2026 07:36:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 88.209.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:75:a5:e2:5d:5f:6a:6c:42:64:4c:73:21:00:bd:ba:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 6 07:36:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a53a369e859025a61707a959a64e8c026c6b78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4c:c8:39:7f:f1:4e:b4:82:14:4c:27:b6:a9:
6f:ee:d4:96:b2:ea:a8:1e:23:5d:4a:f2:eb:e9:06:
98:8d:3c:83:a8:d4:00:42:18:0f:b2:96:a9:4f:98:
49:82:b8:e4:cc:c7:8e:87:23:72:2f:dc:08:f4:68:
82:65:cb:bf:6a:d2:78:ce:bc:12:f6:aa:21:4f:15:
97:a5:6f:3a:91:dc:c3:58:fc:5c:2f:3d:98:c4:26:
d9:dd:a0:62:16:35:52:6a:cc:ea:ee:4a:0f:36:42:
e8:0e:43:93:9d:22:3e:ef:7f:aa:be:e4:f3:8c:e3:
1d:b6:4c:0f:24:1e:2b:68:d1:f3:5f:2b:7b:cb:f1:
94:e9:bd:68:d2:b0:4e:11:14:f3:6e:0e:34:45:01:
cf:2c:35:a6:79:bc:9f:d0:0e:82:95:5a:3c:58:0b:
48:68:cf:86:2a:59:f2:7b:56:da:b9:35:04:cd:aa:
5f:ac:d0:1c:98:8b:f6:86:b7:cb:94:e6:81:7e:f1:
cf:0b:5b:a8:37:61:69:51:bd:0a:d0:0e:23:96:d6:
68:5c:90:40:ba:2b:8e:04:af:c3:6b:bf:34:32:ab:
19:03:64:1e:b2:b9:4c:4a:2c:94:a5:bb:39:5d:e1:
97:98:7b:73:ae:6e:84:cc:da:cf:35:be:9b:9f:75:
a9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:53:A3:69:E8:59:02:5A:61:70:7A:95:9A:64:E8:C0:26:C6:B7:8C
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/OlOjaehZAlphcHqVmmTowCbGt4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.201.0/24
Signature Algorithm: sha256WithRSAEncryption
80:97:e9:d1:0e:82:29:e9:6f:d0:64:4a:9b:30:9f:e4:fb:04:
9e:88:5b:d8:07:4b:13:b4:85:6f:10:3b:40:51:de:2a:ec:a5:
5c:e6:94:78:b1:fd:f4:22:53:f4:21:a2:db:85:de:72:b7:0f:
86:d8:00:61:7e:f7:0b:44:e5:15:ac:5a:58:86:36:52:19:a0:
9e:dd:dd:c8:09:56:ac:48:01:0a:aa:df:22:8d:41:25:e9:4e:
7e:3e:8e:51:65:f5:84:f3:aa:6f:ce:5c:b8:04:a7:8d:da:2e:
97:21:36:1b:ee:69:e8:cd:07:3b:de:3e:7c:eb:3e:e2:b1:a1:
f5:72:fa:ad:79:f4:98:63:a2:e8:9b:22:c4:4b:48:8f:72:50:
df:df:18:f4:55:0e:96:6f:fd:c3:54:7b:fe:26:18:e7:a7:7d:
b0:1b:8d:38:3a:b9:5b:71:34:ba:c5:30:f7:d6:dc:32:71:f4:
64:91:10:e6:b4:a1:28:72:b7:db:67:6b:52:bb:dd:38:3d:04:
3c:d0:6b:bb:40:f5:ce:c1:09:9c:69:06:c0:7a:e8:4d:d1:b3:
97:80:12:a9:46:f5:4e:86:ad:72:6a:91:61:07:9f:a4:b6:64:
7f:3a:e1:9b:36:c4:da:a7:81:10:9c:81:41:c0:f8:4c:8c:3d:
a2:84:5f:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaB1peJdX2psQmRMcyEAvbrvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjYwOTA2MDczNjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTUzYTM2OWU4NTkwMjVhNjE3MDdhOTU5YTY0ZThjMDI2YzZiNzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kzIOX/xTrSCFEwntqlv7tSWsuqo
HiNdSvLr6QaYjTyDqNQAQhgPspapT5hJgrjkzMeOhyNyL9wI9GiCZcu/atJ4zrwS
9qohTxWXpW86kdzDWPxcLz2YxCbZ3aBiFjVSaszq7koPNkLoDkOTnSI+73+qvuTz
jOMdtkwPJB4raNHzXyt7y/GU6b1o0rBOERTzbg40RQHPLDWmebyf0A6ClVo8WAtI
aM+GKlnye1bauTUEzapfrNAcmIv2hrfLlOaBfvHPC1uoN2FpUb0K0A4jltZoXJBA
uiuOBK/Da780MqsZA2QesrlMSiyUpbs5XeGXmHtzrm6EzNrPNb6bn3WpCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDpTo2noWQJaYXB6lZpk6MAmxreMMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvT2xPamFlaFpBbHBoY0hxVm1tVG93Q2JHdDR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNHJMA0G
CSqGSIb3DQEBCwUAA4IBAQCAl+nRDoIp6W/QZEqbMJ/k+wSeiFvYB0sTtIVvEDtA
Ud4q7KVc5pR4sf30IlP0IaLbhd5ytw+G2ABhfvcLROUVrFpYhjZSGaCe3d3ICVas
SAEKqt8ijUEl6U5+Po5RZfWE86pvzly4BKeN2i6XITYb7mnozQc73j586z7isaH1
cvqtefSYY6LomyLES0iPclDf3xj0VQ6Wb/3DVHv+Jhjnp32wG404OrlbcTS6xTD3
1twycfRkkRDmtKEocrfbZ2tSu904PQQ80Gu7QPXOwQmcaQbAeuhN0bOXgBKpRvVO
hq1yapFhB5+ktmR/OuGbNsTap4EQnIFBwPhMjD2ihF/b
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:37:07 2026 by rpki-client