Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/olfQz2had4FnTBXa528wcF51OOs.roa
File: olfQz2had4FnTBXa528wcF51OOs.roa (raw, json)
Hash identifier: MBtBGn7BmjYKhFEPXmxGUQZEUjUUl1AxJbH/O1CQWp0=
Subject key identifier: A2:57:D0:CF:68:5A:77:81:67:4C:15:DA:E7:6F:30:70:5E:75:38:EB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F21CC5353DB7E374F8B38EADC288C9AD4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/olfQz2had4FnTBXa528wcF51OOs.roa
Signing time: Thu 02 Jul 2026 07:47:46 +0000
ROA not before: Thu 02 Jul 2026 07:47:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32159
IP address blocks: 151.244.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:cc:53:53:db:7e:37:4f:8b:38:ea:dc:28:8c:9a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 2 07:47:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a257d0cf685a7781674c15dae76f30705e7538eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:7a:cf:e7:fe:39:6b:b3:c8:3c:3f:ce:6b:
c1:5f:7c:12:f2:3a:c6:61:d7:2a:41:83:5d:9c:e8:
12:f3:66:83:39:8d:d9:d5:a7:0a:06:79:ed:ab:91:
f2:0a:3e:d1:72:71:b1:a9:3f:70:3d:5d:05:6c:53:
15:ca:0d:f7:eb:49:2b:2e:4b:54:95:86:b0:ea:f8:
65:70:a0:21:63:f2:5c:53:22:d0:2f:e3:f2:c4:65:
9e:62:24:fa:23:ad:c3:5c:6c:ca:da:b7:4a:31:07:
7d:c5:a6:6c:d7:31:87:22:f3:db:79:15:21:82:eb:
e4:6a:33:24:21:02:dc:9b:b2:4e:44:cb:62:1b:6f:
89:c3:de:ae:22:ff:6e:07:1a:79:12:e3:70:bb:9b:
19:a0:88:d8:f1:42:40:66:9e:86:f3:25:f4:75:30:
7b:da:69:0b:6d:f8:47:49:6b:cc:bc:53:40:80:28:
9d:ba:8f:33:b3:88:d8:99:ef:a5:d9:77:b1:c1:11:
8f:3a:97:52:e4:f8:2b:42:5b:7a:62:e3:20:48:fa:
ba:8a:bc:cf:4e:79:b9:7d:69:ce:44:30:0c:23:71:
3a:eb:31:08:bf:86:27:67:bd:f4:e6:12:73:92:42:
28:11:0e:cf:cd:4d:1c:6c:94:02:30:4d:c2:df:72:
eb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:57:D0:CF:68:5A:77:81:67:4C:15:DA:E7:6F:30:70:5E:75:38:EB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/olfQz2had4FnTBXa528wcF51OOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.196.0/24
Signature Algorithm: sha256WithRSAEncryption
02:69:a1:23:b7:fd:d8:da:05:94:12:25:84:34:8d:2d:f3:7a:
1b:96:f6:2b:26:1a:cb:ba:0d:b8:4f:a5:e8:47:7e:b6:fe:6d:
1b:19:0f:9d:5f:8c:4c:50:77:bf:61:43:70:79:77:21:76:4f:
b4:d8:06:b3:53:c0:62:7b:4c:41:b8:d4:d4:34:7c:e4:d9:4f:
1c:18:0f:76:34:96:0c:b1:f4:37:bb:10:39:02:d0:59:cd:df:
2c:c2:20:6e:61:1f:90:99:a9:5c:de:e8:39:62:22:e0:4d:0e:
68:a2:9f:b2:88:ce:b0:25:8c:1e:af:67:55:67:0a:28:a2:7a:
e1:67:8e:f6:71:06:25:6a:2c:5e:1a:28:a0:85:a3:0c:42:a5:
48:8d:59:9e:07:76:b0:31:08:99:52:a0:bd:4e:5c:46:d2:6e:
9b:2b:f0:69:7e:9d:91:12:0b:89:ba:e9:fc:59:f4:16:0c:d7:
01:bd:63:9b:9b:7c:c1:b2:dc:4e:69:c6:d0:1e:d8:00:a9:75:
44:da:5e:9f:8b:bb:7e:c1:a9:9e:de:74:c3:8d:04:c2:e2:40:
2a:5b:db:a9:2e:62:25:2d:58:69:0a:06:b7:cc:85:00:09:cc:
ee:1c:dd:65:67:80:c6:8b:e0:7c:e5:64:4d:f6:d1:81:7b:e6:
87:5e:98:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8hzFNT2343T4s46twojJrUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNzAyMDc0NzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjU3ZDBjZjY4NWE3NzgxNjc0YzE1ZGFlNzZmMzA3MDVlNzUzOGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiR6z+f+OWuzyDw/zmvBX3wS8jrG
YdcqQYNdnOgS82aDOY3Z1acKBnntq5HyCj7RcnGxqT9wPV0FbFMVyg3360krLktU
lYaw6vhlcKAhY/JcUyLQL+PyxGWeYiT6I63DXGzK2rdKMQd9xaZs1zGHIvPbeRUh
guvkajMkIQLcm7JORMtiG2+Jw96uIv9uBxp5EuNwu5sZoIjY8UJAZp6G8yX0dTB7
2mkLbfhHSWvMvFNAgCiduo8zs4jYme+l2XexwRGPOpdS5PgrQlt6YuMgSPq6irzP
Tnm5fWnORDAMI3E66zEIv4YnZ7305hJzkkIoEQ7PzU0cbJQCME3C33LrdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKJX0M9oWneBZ0wV2udvMHBedTjrMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvb2xmUXoyaGFkNEZuVEJYYTUyOHdjRjUxT09zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/TEMA0G
CSqGSIb3DQEBCwUAA4IBAQACaaEjt/3Y2gWUEiWENI0t83oblvYrJhrLug24T6Xo
R362/m0bGQ+dX4xMUHe/YUNweXchdk+02AazU8Bie0xBuNTUNHzk2U8cGA92NJYM
sfQ3uxA5AtBZzd8swiBuYR+Qmalc3ug5YiLgTQ5oop+yiM6wJYwer2dVZwooonrh
Z472cQYlaixeGiighaMMQqVIjVmeB3awMQiZUqC9TlxG0m6bK/Bpfp2REguJuun8
WfQWDNcBvWObm3zBstxOacbQHtgAqXVE2l6fi7t+wame3nTDjQTC4kAqW9upLmIl
LVhpCga3zIUACczuHN1lZ4DGi+B85WRN9tGBe+aHXphV
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:40 2026 by rpki-client