Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/8OlOEZgObzEvy1E8VmktgWUdQi0.roa
File: 8OlOEZgObzEvy1E8VmktgWUdQi0.roa (raw, json)
Hash identifier: vpY2iql20BkJOzJyUWVMsBYvSfuAgM3xo1h/baltqkw=
Subject key identifier: F0:E9:4E:11:98:0E:6F:31:2F:CB:51:3C:56:69:2D:81:65:1D:42:2D
Certificate issuer: /CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Certificate serial: 019C8F7701A2D33141528EDB3403F165B792
Authority key identifier: E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/8OlOEZgObzEvy1E8VmktgWUdQi0.roa
Signing time: Tue 24 Feb 2026 11:44:27 +0000
ROA not before: Tue 24 Feb 2026 11:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206047
IP address blocks: 79.98.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:77:01:a2:d3:31:41:52:8e:db:34:03:f1:65:b7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Validity
Not Before: Feb 24 11:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0e94e11980e6f312fcb513c56692d81651d422d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:d2:a8:44:6b:52:d9:24:6c:33:f6:6a:25:
53:d1:5d:1b:b5:73:2d:61:20:2e:05:5c:f2:fe:fa:
00:f1:ac:f1:1b:83:db:10:ce:49:8c:55:22:81:63:
ae:0a:fd:a1:7d:bb:cd:61:45:f6:ab:45:4f:14:f0:
31:8f:f6:20:04:64:99:6d:ab:54:7d:d0:4c:dd:db:
e8:66:88:dd:22:25:db:60:c2:00:af:27:80:f0:5c:
17:3f:e8:f0:8d:a3:26:4c:8c:9e:d7:81:22:03:a2:
33:d9:7d:6c:96:ae:90:f7:15:b3:a3:97:a5:3f:d4:
3e:69:8b:e0:f6:29:30:15:81:33:da:0b:8d:c4:2a:
1a:9d:da:a2:cc:6c:56:7a:ed:8b:2e:0e:ce:91:16:
3a:12:2f:1a:01:1d:9e:11:62:cb:a2:aa:33:86:87:
6b:9f:94:a9:b0:b1:f4:0f:f2:94:49:8a:63:a5:2e:
d8:0d:07:c8:11:10:b8:8e:ca:d9:0f:42:a0:f2:d6:
0e:6e:6c:be:5b:99:bc:8f:16:2f:9a:c9:43:fe:da:
55:d7:54:50:b2:3f:90:44:bf:10:1f:44:1a:8a:7a:
26:89:09:aa:ef:b9:b0:2b:75:79:92:8e:73:38:1e:
24:66:64:15:f3:d8:34:fb:c7:14:a4:b5:d0:f3:c9:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E9:4E:11:98:0E:6F:31:2F:CB:51:3C:56:69:2D:81:65:1D:42:2D
X509v3 Authority Key Identifier:
keyid:E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/8OlOEZgObzEvy1E8VmktgWUdQi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.52.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:a2:63:2d:ad:58:1e:78:f8:f7:23:c7:f2:02:b9:dd:b3:91:
bd:59:81:3f:16:25:9d:8d:7b:9f:e9:70:4c:3f:fd:75:ab:1d:
c6:85:40:5f:bc:c2:23:a7:19:91:ee:ef:bd:40:bf:38:6f:de:
53:82:57:75:0a:76:1e:86:7e:ac:db:d1:aa:31:de:ad:79:62:
3e:f1:a8:fb:05:45:da:16:e6:84:a2:73:2a:01:bf:a5:c3:b3:
38:1f:e1:d5:66:b7:db:eb:6d:16:e0:95:3f:92:32:39:7b:6c:
f8:63:d7:45:ff:3b:23:eb:b5:8b:1f:eb:b0:e8:34:67:d5:0a:
b0:e1:33:2a:d4:5a:14:19:ef:10:87:d3:9b:af:24:5d:d6:bd:
05:4a:3f:9a:99:18:e7:85:36:9e:0c:2d:c1:d6:d2:5a:64:25:
28:ad:78:66:2f:5e:31:32:46:03:af:59:6a:e5:e5:24:53:cd:
95:3a:17:0b:19:f2:ac:e7:c7:a7:93:69:fd:4f:d3:08:c0:c8:
79:84:63:64:64:c8:16:92:cd:c7:e5:bb:41:05:ce:3b:e5:58:
21:d1:76:f4:35:d5:14:c7:de:df:3e:a7:8c:61:c4:9b:19:6a:
a7:fa:0c:be:91:52:13:a9:52:b0:bb:3b:59:2b:e3:4a:64:77:
90:b9:82:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:09:19 2026 by rpki-client