Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/08gP1Pz3L6sNLkF0XOv1bRginos.roa
File: 08gP1Pz3L6sNLkF0XOv1bRginos.roa (raw, json)
Hash identifier: s62GDEll6pi3YRowk9gynSRO8D6by2ywYeSj5r0hD9o=
Subject key identifier: D3:C8:0F:D4:FC:F7:2F:AB:0D:2E:41:74:5C:EB:F5:6D:18:22:9E:8B
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01A0D2DE099B40528F00943BC380B6FA2F10
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/08gP1Pz3L6sNLkF0XOv1bRginos.roa
Signing time: Thu 24 Sep 2026 10:02:41 +0000
ROA not before: Thu 24 Sep 2026 10:02:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50714
IP address blocks: 46.161.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:09:9b:40:52:8f:00:94:3b:c3:80:b6:fa:2f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Sep 24 10:02:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3c80fd4fcf72fab0d2e41745cebf56d18229e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:6c:91:c7:d6:00:93:4d:96:04:6d:b3:88:
45:4e:4b:8d:d8:71:00:17:08:10:d1:cd:16:11:31:
c7:5f:36:cf:69:65:31:a0:36:2b:86:dd:3d:f9:f0:
82:61:e8:e7:be:3c:ca:7d:14:ce:87:11:44:3f:5a:
47:e5:1c:51:65:a3:26:10:36:2d:f0:af:e6:fa:23:
af:d6:a9:c3:b4:91:c9:b5:fc:2a:00:7c:68:d5:05:
34:d6:90:b1:ff:81:ca:d5:8b:ca:0c:42:7b:83:4e:
3a:c1:24:99:14:3e:4a:64:d2:ea:c5:45:14:83:d6:
86:da:b5:16:bb:18:37:b0:00:0f:26:55:a1:2e:eb:
92:d6:2d:8a:a3:6b:6c:2c:90:4a:51:a6:3f:3f:60:
60:44:18:41:48:a9:5f:89:5b:ca:a8:16:01:46:d8:
93:1d:a1:bc:b7:44:4e:72:a2:c9:8e:52:6a:9a:6b:
b4:e2:76:5c:a8:39:21:cb:a1:a3:04:06:a8:38:bc:
fb:a6:97:8a:e5:ba:56:0e:eb:77:8a:97:c2:3e:fc:
f9:46:a6:31:50:24:1c:e5:fa:eb:49:bb:f2:a2:9e:
98:a0:c1:03:b6:cc:18:07:79:63:48:52:cc:7e:82:
0a:0c:e9:44:18:5e:11:76:3a:c3:c3:2b:22:ee:27:
46:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C8:0F:D4:FC:F7:2F:AB:0D:2E:41:74:5C:EB:F5:6D:18:22:9E:8B
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/08gP1Pz3L6sNLkF0XOv1bRginos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.0.0/24
Signature Algorithm: sha256WithRSAEncryption
00:81:76:dd:60:e9:97:a1:d4:31:77:ea:31:04:78:8c:dc:1b:
ce:e9:60:50:e5:2a:79:1b:a0:a9:67:ec:e7:57:2a:93:ca:40:
2b:2c:13:83:3d:f4:98:c5:62:5c:11:76:02:d5:7a:62:c7:f9:
32:0c:6e:61:7a:69:55:53:19:f7:78:ff:00:ee:6d:71:3f:cd:
8c:19:07:38:1d:77:e6:c4:6f:dd:eb:d7:37:cf:f9:43:e0:2c:
2b:6e:73:17:85:dc:28:28:a2:59:9a:ef:ac:5b:6e:d1:38:ae:
c7:53:8a:92:33:25:31:bd:1b:f2:b4:a2:1a:62:4f:22:a3:10:
92:f4:41:c7:60:2b:f2:35:96:bf:4a:09:47:b1:36:c8:10:42:
40:2d:23:a2:17:4f:55:f5:72:78:4d:27:c9:16:f8:71:28:ba:
b7:96:85:d3:f1:6d:8b:e5:10:ab:e7:ad:bd:da:88:32:85:0a:
25:f7:e3:70:c2:49:59:2c:2a:be:0e:c3:12:99:e9:ac:ef:80:
6e:35:d0:26:24:85:c1:13:5a:e5:55:33:5f:54:b4:0f:ed:7e:
0b:b6:0f:ea:e8:dd:3a:c3:13:1f:2c:46:d9:a5:63:49:58:22:
62:f4:ef:1b:5b:91:69:12:e0:92:2d:1c:50:db:1a:f7:49:58:
e7:24:5c:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDS3gmbQFKPAJQ7w4C2+i8QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjYwOTI0MTAwMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2M4MGZkNGZjZjcyZmFiMGQyZTQxNzQ1Y2ViZjU2ZDE4MjI5ZThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYVskcfWAJNNlgRts4hFTkuN2HEA
FwgQ0c0WETHHXzbPaWUxoDYrht09+fCCYejnvjzKfRTOhxFEP1pH5RxRZaMmEDYt
8K/m+iOv1qnDtJHJtfwqAHxo1QU01pCx/4HK1YvKDEJ7g046wSSZFD5KZNLqxUUU
g9aG2rUWuxg3sAAPJlWhLuuS1i2Ko2tsLJBKUaY/P2BgRBhBSKlfiVvKqBYBRtiT
HaG8t0ROcqLJjlJqmmu04nZcqDkhy6GjBAaoOLz7ppeK5bpWDut3ipfCPvz5RqYx
UCQc5frrSbvyop6YoMEDtswYB3ljSFLMfoIKDOlEGF4RdjrDwysi7idGwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNPID9T89y+rDS5BdFzr9W0YIp6LMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvMDhnUDFQejNMNnNOTGtGMFhPdjFiUmdpbm9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALqEAMA0G
CSqGSIb3DQEBCwUAA4IBAQAAgXbdYOmXodQxd+oxBHiM3BvO6WBQ5Sp5G6CpZ+zn
VyqTykArLBODPfSYxWJcEXYC1Xpix/kyDG5hemlVUxn3eP8A7m1xP82MGQc4HXfm
xG/d69c3z/lD4CwrbnMXhdwoKKJZmu+sW27ROK7HU4qSMyUxvRvytKIaYk8ioxCS
9EHHYCvyNZa/SglHsTbIEEJALSOiF09V9XJ4TSfJFvhxKLq3loXT8W2L5RCr5629
2ogyhQol9+NwwklZLCq+DsMSmems74BuNdAmJIXBE1rlVTNfVLQP7X4Ltg/q6N06
wxMfLEbZpWNJWCJi9O8bW5FpEuCSLRxQ2xr3SVjnJFwU
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:18:03 2026 by rpki-client