Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Io8cnTFhl3nISyR7DY2-CHrdupQ.roa
File: Io8cnTFhl3nISyR7DY2-CHrdupQ.roa (raw, json)
Hash identifier: mWgyVBFFel7wl1Ea2Gx/TNDSbIU8QgF91GVPUXcEUdE=
Subject key identifier: 22:8F:1C:9D:31:61:97:79:C8:4B:24:7B:0D:8D:BE:08:7A:DD:BA:94
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01A0A8C9BA786482048620D3221C6C56F45F
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Io8cnTFhl3nISyR7DY2-CHrdupQ.roa
Signing time: Wed 16 Sep 2026 05:56:27 +0000
ROA not before: Wed 16 Sep 2026 05:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213538
IP address blocks: 217.156.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a8:c9:ba:78:64:82:04:86:20:d3:22:1c:6c:56:f4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 16 05:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=228f1c9d31619779c84b247b0d8dbe087addba94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8b:15:73:4e:67:e4:67:9e:63:93:ed:4c:fc:
4c:5a:7a:a1:62:1a:96:23:94:9d:86:1b:c8:58:d6:
8d:46:3c:7e:e0:19:a2:e9:c3:20:8f:7e:d3:8e:c0:
98:78:74:17:b7:99:a6:e3:3a:40:e1:7e:92:bf:bf:
51:db:2e:10:58:4f:b5:4b:5c:3f:c2:9a:20:88:b4:
ba:0c:e4:e7:0e:d0:09:9c:25:71:3a:42:32:35:7c:
a4:be:dc:ee:8c:cc:7a:84:b1:99:cd:b9:c6:d6:68:
9d:54:4c:6b:01:af:b1:8e:b7:73:85:af:59:a3:d6:
b4:de:9d:89:b2:fd:04:5e:f2:19:33:1c:d6:13:93:
23:b0:86:c8:11:9d:a5:74:d8:41:97:48:f8:81:d7:
35:18:9d:30:98:f7:01:4f:26:21:d7:f6:e8:65:f7:
11:01:4f:55:dd:d7:38:2f:d8:c8:27:dd:22:9f:cb:
23:45:35:10:a7:e4:3f:b9:90:60:39:18:d6:a1:af:
e5:e1:34:6d:64:21:3e:51:2e:0d:5a:2d:ca:02:dd:
9b:df:31:0e:c0:ed:f4:14:e6:94:1b:3a:ba:23:2f:
e1:d0:b6:c6:9f:66:a7:6d:1b:6c:29:65:fa:59:fd:
7c:ae:a6:2e:a7:7b:a9:51:11:1f:e0:00:1d:91:10:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8F:1C:9D:31:61:97:79:C8:4B:24:7B:0D:8D:BE:08:7A:DD:BA:94
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Io8cnTFhl3nISyR7DY2-CHrdupQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.156.90.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:55:a4:fe:31:8f:48:52:93:a5:d1:bc:c9:5f:54:43:02:44:
19:f2:0d:9a:d6:c0:1f:30:ec:32:48:cf:5d:d1:ad:ee:dd:2e:
f5:6b:09:1d:71:dd:2f:dd:84:c6:46:2d:39:2c:c5:57:a0:53:
8c:86:6b:39:a9:40:e2:08:3b:6c:f4:28:90:33:e8:8f:6e:85:
67:45:f2:14:c9:d1:b8:43:10:73:42:06:6b:88:bf:0c:15:7e:
b2:fa:0b:7d:0a:fe:3c:98:65:8b:74:38:bc:ec:39:5f:9a:eb:
9b:e8:f9:a9:56:09:c1:83:f9:3e:74:f1:e8:c6:6f:89:80:76:
70:08:4b:2d:90:da:09:8e:49:26:51:6c:d7:cd:ed:a1:02:9a:
48:cb:cd:dc:c3:c2:03:24:7d:4e:2d:a5:95:2d:36:91:13:68:
c1:f0:fd:a6:87:57:7f:f6:cc:62:9e:6a:8c:b3:e4:51:91:39:
9e:53:9a:58:35:02:47:40:fb:36:b2:5c:62:ce:84:97:0f:e2:
21:cb:ce:14:e3:ba:55:92:b3:b3:d8:b2:95:ac:3d:3f:93:e8:
a7:80:c8:0b:a4:bc:5e:c6:9d:82:b7:77:ac:49:e2:a0:fb:33:
7d:58:c6:a7:0e:96:a1:21:a0:4d:fc:4b:54:e8:94:07:0d:62:
53:bf:cf:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCoybp4ZIIEhiDTIhxsVvRfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYwOTE2MDU1NjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjhmMWM5ZDMxNjE5Nzc5Yzg0YjI0N2IwZDhkYmUwODdhZGRiYTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIsVc05n5GeeY5PtTPxMWnqhYhqW
I5SdhhvIWNaNRjx+4Bmi6cMgj37TjsCYeHQXt5mm4zpA4X6Sv79R2y4QWE+1S1w/
wpogiLS6DOTnDtAJnCVxOkIyNXykvtzujMx6hLGZzbnG1midVExrAa+xjrdzha9Z
o9a03p2Jsv0EXvIZMxzWE5MjsIbIEZ2ldNhBl0j4gdc1GJ0wmPcBTyYh1/boZfcR
AU9V3dc4L9jIJ90in8sjRTUQp+Q/uZBgORjWoa/l4TRtZCE+US4NWi3KAt2b3zEO
wO30FOaUGzq6Iy/h0LbGn2anbRtsKWX6Wf18rqYup3upUREf4AAdkRDPwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCKPHJ0xYZd5yEskew2Nvgh63bqUMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvSW84Y25URmhsM25JU3lSN0RZMi1DSHJkdXBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZxaMA0G
CSqGSIb3DQEBCwUAA4IBAQBLVaT+MY9IUpOl0bzJX1RDAkQZ8g2a1sAfMOwySM9d
0a3u3S71awkdcd0v3YTGRi05LMVXoFOMhms5qUDiCDts9CiQM+iPboVnRfIUydG4
QxBzQgZriL8MFX6y+gt9Cv48mGWLdDi87Dlfmuub6PmpVgnBg/k+dPHoxm+JgHZw
CEstkNoJjkkmUWzXze2hAppIy83cw8IDJH1OLaWVLTaRE2jB8P2mh1d/9sxinmqM
s+RRkTmeU5pYNQJHQPs2slxizoSXD+Ihy84U47pVkrOz2LKVrD0/k+ingMgLpLxe
xp2Ct3esSeKg+zN9WManDpahIaBN/EtU6JQHDWJTv896
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:56:10 2026 by rpki-client