Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/os0I0obTgyc71lmMpvWXLb4BXXE.roa
File: os0I0obTgyc71lmMpvWXLb4BXXE.roa (raw, json)
Hash identifier: 2LIi3kyj7edFMP0IZp4x5bxYqtPyJL7a+L8zfAyaJUM=
Subject key identifier: A2:CD:08:D2:86:D3:83:27:3B:D6:59:8C:A6:F5:97:2D:BE:01:5D:71
Certificate issuer: /CN=13319513fd0b90417060a218b76d62b8e3fbcc51
Certificate serial: 01A08952E94844932E4477B57E44F25460F2
Authority key identifier: 13:31:95:13:FD:0B:90:41:70:60:A2:18:B7:6D:62:B8:E3:FB:CC:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/os0I0obTgyc71lmMpvWXLb4BXXE.roa
Signing time: Thu 10 Sep 2026 03:18:27 +0000
ROA not before: Thu 10 Sep 2026 03:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30900
IP address blocks: 194.8.48.0/24 maxlen: 24
194.8.59.0/24 maxlen: 24
194.9.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:52:e9:48:44:93:2e:44:77:b5:7e:44:f2:54:60:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13319513fd0b90417060a218b76d62b8e3fbcc51
Validity
Not Before: Sep 10 03:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2cd08d286d383273bd6598ca6f5972dbe015d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b5:9e:8f:89:5d:eb:f5:d5:80:fc:52:3c:0e:
50:73:59:9e:64:d0:5c:6e:61:26:26:29:84:bd:e8:
10:c5:b1:85:63:40:5d:5e:2c:cb:c5:7b:18:87:d8:
4a:e5:31:4a:dc:99:53:bd:47:4f:48:74:2d:80:58:
8a:9c:97:ae:68:f3:0e:31:50:c5:d0:d0:fa:d7:32:
15:c2:37:90:85:f6:26:79:8d:f1:cd:67:4f:be:7d:
53:3b:2d:b0:85:03:ed:03:81:df:a2:dc:d3:6c:60:
c8:7f:43:4f:b7:76:df:77:99:12:c6:7f:1f:fd:e6:
94:b1:76:02:36:a9:09:78:42:66:04:32:ca:ed:60:
82:ab:c3:cf:eb:e4:2c:60:33:ae:6a:09:c6:32:fa:
a2:b8:4a:32:3f:20:ce:e3:9e:e5:94:18:a1:13:55:
19:16:8c:69:7a:53:d9:0c:ca:65:ed:dc:d6:5d:c6:
c8:3e:a1:18:be:02:e9:bd:be:4e:c4:c0:b0:63:90:
e5:96:18:13:03:a7:ac:91:3b:26:ad:5d:28:4f:64:
cd:9b:0b:2c:bc:98:22:cc:a8:f5:ae:3c:9e:60:2c:
40:1d:08:7b:c7:15:59:0c:17:3c:b8:4d:41:c5:17:
31:16:cd:55:44:59:8e:42:c5:07:c2:cb:11:87:1c:
56:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CD:08:D2:86:D3:83:27:3B:D6:59:8C:A6:F5:97:2D:BE:01:5D:71
X509v3 Authority Key Identifier:
keyid:13:31:95:13:FD:0B:90:41:70:60:A2:18:B7:6D:62:B8:E3:FB:CC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/os0I0obTgyc71lmMpvWXLb4BXXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.48.0/24
194.8.59.0/24
194.9.174.0/24
Signature Algorithm: sha256WithRSAEncryption
75:f3:99:80:bd:15:36:61:fd:09:6e:73:9e:f5:69:0e:d5:37:
b1:66:7a:7a:d6:d1:7e:63:02:18:80:2f:70:6b:47:02:5d:b9:
f8:fd:83:c7:ef:bf:c0:e0:84:b9:b4:09:63:cd:fa:2e:ef:cb:
96:1c:c4:3e:e7:7c:6d:72:f4:d6:31:6a:00:30:bb:d4:38:b1:
24:2e:02:4a:28:4c:09:f4:a2:ab:4f:8a:3e:df:0d:69:9b:94:
20:49:e3:47:fd:d3:b0:fa:57:fc:14:a0:5a:69:b7:48:a2:84:
c4:0b:46:51:dc:d4:45:8e:08:b4:7d:5f:73:20:02:51:ba:74:
fc:8c:ed:16:8b:d8:ba:8d:99:96:6d:37:ed:1b:47:e8:47:0d:
4f:97:8b:7c:da:05:e2:55:ef:70:79:4f:c9:c1:25:5b:36:64:
8a:32:79:44:bf:55:58:25:24:81:b9:f6:2b:a7:47:9a:f9:3f:
f9:ea:f7:fc:f5:a7:38:b1:cf:f9:e0:59:b7:21:d2:7a:eb:31:
23:2d:e4:63:aa:76:9a:0c:83:f1:23:a7:5a:1d:24:ae:16:8f:
09:d2:68:3a:1e:05:f3:0c:f0:e2:4a:f3:e2:68:1a:6e:07:da:
2c:b1:69:f0:51:09:00:29:d9:82:de:87:24:8e:58:54:18:98:
df:06:f2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:03:50 2026 by rpki-client