Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/efFTEfRQiUftQzQVb9cHtQZa-cQ.roa
File: efFTEfRQiUftQzQVb9cHtQZa-cQ.roa (raw, json)
Hash identifier: a58cXnpcOrNRPkaTSvpbx4ht46VIhtHlsm03YV/tuII=
Subject key identifier: 79:F1:53:11:F4:50:89:47:ED:43:34:15:6F:D7:07:B5:06:5A:F9:C4
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A18CF650799422C6C3B859B300189FA692
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/efFTEfRQiUftQzQVb9cHtQZa-cQ.roa
Signing time: Fri 30 Oct 2026 13:18:34 +0000
ROA not before: Fri 30 Oct 2026 13:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147034
IP address blocks: 188.208.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:f6:50:79:94:22:c6:c3:b8:59:b3:00:18:9f:a6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Oct 30 13:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79f15311f4508947ed4334156fd707b5065af9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:55:a9:07:7e:ad:24:90:20:20:5a:c5:d0:69:
48:35:45:61:40:6f:db:3a:cf:b7:91:03:8e:1a:21:
a7:10:5b:61:ff:62:02:e8:9b:52:95:e4:91:a3:f1:
51:e9:9d:75:41:14:14:d6:45:1b:2b:85:a5:71:f1:
86:26:71:40:6a:5b:1e:23:9c:d2:7d:66:3a:e4:97:
ee:91:41:70:4b:b4:5f:1c:5c:d9:62:25:fc:25:de:
84:67:f2:0d:b4:53:93:6b:e2:ad:7a:c7:9e:96:ef:
d0:b9:f6:41:84:cd:1c:f4:3d:cc:52:07:6c:cc:e3:
71:2f:fd:d9:91:58:5c:0e:e8:af:21:aa:5b:82:92:
35:96:fc:95:7c:b8:b1:77:78:5c:cb:fe:96:1a:d4:
63:1f:cd:d2:d0:15:93:30:7d:e9:29:79:86:2b:78:
13:1a:5d:b7:d3:2a:4d:82:bd:ec:47:53:9f:59:7b:
db:75:04:23:f0:b2:f9:a7:33:5d:8c:c7:09:e8:db:
32:2f:78:b1:52:e9:a9:38:57:90:c8:cb:b0:9c:73:
1e:59:59:8e:b0:34:a7:a0:90:6a:91:45:cf:7c:a1:
fb:53:31:2c:ce:6f:45:3b:00:d0:17:22:83:7e:14:
da:11:c7:3a:97:df:6f:ca:0c:53:ae:10:88:37:8e:
3d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F1:53:11:F4:50:89:47:ED:43:34:15:6F:D7:07:B5:06:5A:F9:C4
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/efFTEfRQiUftQzQVb9cHtQZa-cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.204.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:90:0d:13:b1:5d:1f:28:85:53:a5:d0:3c:8c:56:ba:3e:58:
ad:e6:ed:93:c7:f8:e7:96:c4:9a:d6:14:0f:e3:07:d0:00:38:
2b:19:46:ff:9b:2c:c1:bb:80:ce:71:90:10:ef:04:5f:ae:94:
40:6f:3b:66:ab:86:3e:3b:ad:ce:15:1d:2e:9a:bd:52:dc:20:
93:95:4f:9b:6e:b7:6a:df:17:1d:79:bf:9f:85:0c:a4:9a:34:
57:7c:da:71:79:cc:d8:b8:13:ff:86:70:8b:37:e0:94:e1:5e:
83:58:53:b5:ba:a1:f1:6f:de:c5:8c:1c:2b:03:96:cc:4b:41:
67:78:15:e2:50:d0:cf:22:72:32:2b:13:44:62:91:13:3f:ef:
a5:f5:5b:b5:da:74:88:48:05:89:b9:f4:06:21:98:1d:32:3f:
e2:e6:ec:83:f2:ec:2e:09:d7:c0:a9:9a:18:fa:63:86:83:79:
22:7c:b7:15:78:93:ad:e3:73:25:83:83:89:88:b4:85:5c:1c:
c5:15:91:bd:90:99:d4:08:6a:01:2d:5d:c0:59:8c:d3:e9:f9:
de:70:2d:34:0b:7d:ee:4d:eb:1e:54:89:57:b5:b5:57:eb:31:
84:19:36:12:ab:e1:e3:f7:91:e4:b7:94:d3:b6:26:10:84:91:
47:51:56:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGM9lB5lCLGw7hZswAYn6aSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjYxMDMwMTMxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWYxNTMxMWY0NTA4OTQ3ZWQ0MzM0MTU2ZmQ3MDdiNTA2NWFmOWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFWpB36tJJAgIFrF0GlINUVhQG/b
Os+3kQOOGiGnEFth/2IC6JtSleSRo/FR6Z11QRQU1kUbK4WlcfGGJnFAalseI5zS
fWY65JfukUFwS7RfHFzZYiX8Jd6EZ/INtFOTa+Kteseelu/QufZBhM0c9D3MUgds
zONxL/3ZkVhcDuivIapbgpI1lvyVfLixd3hcy/6WGtRjH83S0BWTMH3pKXmGK3gT
Gl230ypNgr3sR1OfWXvbdQQj8LL5pzNdjMcJ6NsyL3ixUumpOFeQyMuwnHMeWVmO
sDSnoJBqkUXPfKH7UzEszm9FOwDQFyKDfhTaEcc6l99vygxTrhCIN449ywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHnxUxH0UIlH7UM0FW/XB7UGWvnEMB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvZWZGVEVmUlFpVWZ0UXpRVmI5Y0h0UVphLWNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvNDMMA0G
CSqGSIb3DQEBCwUAA4IBAQCMkA0TsV0fKIVTpdA8jFa6Plit5u2Tx/jnlsSa1hQP
4wfQADgrGUb/myzBu4DOcZAQ7wRfrpRAbztmq4Y+O63OFR0umr1S3CCTlU+bbrdq
3xcdeb+fhQykmjRXfNpxeczYuBP/hnCLN+CU4V6DWFO1uqHxb97FjBwrA5bMS0Fn
eBXiUNDPInIyKxNEYpETP++l9Vu12nSISAWJufQGIZgdMj/i5uyD8uwuCdfAqZoY
+mOGg3kifLcVeJOt43Mlg4OJiLSFXBzFFZG9kJnUCGoBLV3AWYzT6fnecC00C33u
TeseVIlXtbVX6zGEGTYSq+Hj95Hkt5TTtiYQhJFHUVYw
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:32:43 2026 by rpki-client