Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/O5gW9hOPRMxR11eVov12x6UzYHU.roa
File: O5gW9hOPRMxR11eVov12x6UzYHU.roa (raw, json)
Hash identifier: bkCHLibjEuyg8IqJTSvrDEUtIjNQgIWoyJGDY8GOdz0=
Subject key identifier: 3B:98:16:F6:13:8F:44:CC:51:D7:57:95:A2:FD:76:C7:A5:33:60:75
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019F1EB19A5A95C4EB67833A2A1EAAD5E9A1
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/O5gW9hOPRMxR11eVov12x6UzYHU.roa
Signing time: Wed 01 Jul 2026 17:19:43 +0000
ROA not before: Wed 01 Jul 2026 17:19:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203753
IP address blocks: 212.22.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1e:b1:9a:5a:95:c4:eb:67:83:3a:2a:1e:aa:d5:e9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jul 1 17:19:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b9816f6138f44cc51d75795a2fd76c7a5336075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:16:dc:59:d6:91:e3:4a:7a:6b:0d:23:a4:23:
55:dd:ec:e7:28:09:6c:fc:d7:47:bc:d2:4e:5b:8f:
36:94:67:d5:2b:1c:3d:fa:3b:b2:dc:45:8c:77:b3:
e1:29:90:78:61:5c:b5:58:52:6d:bd:41:b4:ad:92:
11:8c:f4:3c:2a:ec:ab:d9:d3:9e:45:cc:9b:bc:80:
9b:48:0f:c1:90:f2:11:b4:dc:b0:a0:dd:95:2b:1e:
8c:fe:d4:af:c3:bf:d5:43:f3:cb:b2:a6:f3:8a:41:
ec:d4:e5:33:84:15:03:d3:58:67:20:25:aa:f0:b8:
9f:31:e7:aa:11:2a:7d:a2:2b:71:fb:ca:2c:b2:71:
6d:7b:09:85:01:1e:4d:9a:58:e5:da:ea:68:09:77:
f0:d9:32:47:b7:ba:2c:56:72:d2:e1:57:dc:6f:85:
35:6b:69:0a:54:4c:db:1c:c6:d8:15:d3:8f:b3:9b:
39:0c:5b:39:cf:8f:9e:a4:c4:3b:30:be:f1:f6:f4:
31:df:20:cb:f2:f1:71:68:ee:63:4f:bd:62:af:f2:
4f:a0:a3:9a:3e:38:4c:b8:aa:6f:51:d8:70:07:73:
e5:c4:07:d7:ca:a5:f1:a8:bf:98:7b:c6:70:b2:f6:
24:eb:b1:50:12:04:58:84:69:d8:54:8a:a8:63:58:
9d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:98:16:F6:13:8F:44:CC:51:D7:57:95:A2:FD:76:C7:A5:33:60:75
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/O5gW9hOPRMxR11eVov12x6UzYHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.86.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:19:68:01:94:8e:e8:82:1d:bf:04:e0:11:b2:2c:22:b4:13:
ac:e7:b3:3b:c6:cf:2a:43:01:bc:22:25:11:26:87:9d:1f:32:
3f:c8:12:af:64:07:b7:14:90:bd:88:0a:31:e7:7c:f9:99:c3:
b0:98:ff:33:88:d9:72:a7:f3:f9:1e:1a:7b:6d:e4:76:d6:c9:
63:3c:7f:57:bb:9f:a5:6a:c7:45:86:a1:49:b0:fa:ca:a7:b7:
61:b7:95:be:c2:d5:f6:78:ab:64:9b:7f:fd:f1:3d:e8:9a:f0:
52:c1:d2:18:c7:3f:cb:18:62:3d:a2:c7:41:40:14:f3:dd:d2:
0e:cb:46:b2:d5:bc:17:06:e8:f3:1e:ec:a1:08:af:5c:b9:52:
1a:66:a8:3c:e2:ac:7c:c6:45:a6:6e:7a:fa:88:21:2e:52:14:
1b:9f:e1:28:47:3c:13:7c:c6:fc:62:26:c0:ca:2c:f5:3b:4a:
75:db:2c:2e:11:a9:19:06:f6:a7:92:37:b9:d3:f8:b7:b6:c4:
f6:d0:0f:aa:03:0e:57:c8:fa:4a:ee:c5:75:4d:22:69:26:50:
b1:f5:8b:ad:aa:47:fb:cb:20:90:5f:12:a6:c6:1c:10:70:13:
e9:f2:23:c8:c8:3e:54:4f:48:ba:7e:b7:d5:5e:72:fa:2a:7c:
26:26:4e:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8esZpalcTrZ4M6Kh6q1emhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjYwNzAxMTcxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjk4MTZmNjEzOGY0NGNjNTFkNzU3OTVhMmZkNzZjN2E1MzM2MDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBbcWdaR40p6aw0jpCNV3eznKAls
/NdHvNJOW482lGfVKxw9+juy3EWMd7PhKZB4YVy1WFJtvUG0rZIRjPQ8Kuyr2dOe
RcybvICbSA/BkPIRtNywoN2VKx6M/tSvw7/VQ/PLsqbzikHs1OUzhBUD01hnICWq
8LifMeeqESp9oitx+8ossnFtewmFAR5Nmljl2upoCXfw2TJHt7osVnLS4Vfcb4U1
a2kKVEzbHMbYFdOPs5s5DFs5z4+epMQ7ML7x9vQx3yDL8vFxaO5jT71ir/JPoKOa
PjhMuKpvUdhwB3PlxAfXyqXxqL+Ye8ZwsvYk67FQEgRYhGnYVIqoY1idIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDuYFvYTj0TMUddXlaL9dselM2B1MB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvTzVnVzloT1BSTXhSMTFlVm92MTJ4NlV6WUhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BZWMA0G
CSqGSIb3DQEBCwUAA4IBAQC1GWgBlI7ogh2/BOARsiwitBOs57M7xs8qQwG8IiUR
JoedHzI/yBKvZAe3FJC9iAox53z5mcOwmP8ziNlyp/P5Hhp7beR21sljPH9Xu5+l
asdFhqFJsPrKp7dht5W+wtX2eKtkm3/98T3omvBSwdIYxz/LGGI9osdBQBTz3dIO
y0ay1bwXBujzHuyhCK9cuVIaZqg84qx8xkWmbnr6iCEuUhQbn+EoRzwTfMb8YibA
yiz1O0p12ywuEakZBvankje50/i3tsT20A+qAw5XyPpK7sV1TSJpJlCx9Yutqkf7
yyCQXxKmxhwQcBPp8iPIyD5UT0i6frfVXnL6KnwmJk79
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:38:48 2026 by rpki-client