Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/oYS0O0nDUb1bSbJX-budFHNh0oM.roa
File: oYS0O0nDUb1bSbJX-budFHNh0oM.roa (raw, json)
Hash identifier: ROx/kmzAkP9cr47uO/eWuDakWqRS1HzXubOQQ7E7gvk=
Subject key identifier: A1:84:B4:3B:49:C3:51:BD:5B:49:B2:57:F9:BB:9D:14:73:61:D2:83
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01A13068886A90D3E8D8C692CB9D2AAD1537
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/oYS0O0nDUb1bSbJX-budFHNh0oM.roa
Signing time: Mon 12 Oct 2026 13:58:39 +0000
ROA not before: Mon 12 Oct 2026 13:58:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16157
IP address blocks: 194.176.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:68:88:6a:90:d3:e8:d8:c6:92:cb:9d:2a:ad:15:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Oct 12 13:58:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a184b43b49c351bd5b49b257f9bb9d147361d283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:3e:d1:31:be:b4:d1:f6:b3:d1:25:2e:5f:
07:ea:83:35:d5:be:70:5d:8d:57:bd:0e:41:21:3e:
00:eb:5a:75:15:19:72:6a:10:c5:84:32:c6:39:a7:
49:3a:e5:65:af:9b:ee:45:a0:cd:ed:bb:02:f1:e3:
82:ea:08:f8:8b:76:cc:b2:19:05:e8:3a:c9:1b:3d:
6e:95:48:7c:ad:86:f9:98:be:91:78:e9:fa:df:85:
1c:db:06:b4:3b:1a:76:a2:48:59:b0:a7:61:ae:2c:
02:26:27:85:ba:c1:2e:5e:ea:78:d0:af:c8:24:5c:
99:2a:2f:8e:20:f2:08:ca:15:6e:01:38:bb:7c:c1:
ab:fa:fa:58:96:7c:71:cf:88:84:23:b7:03:92:ff:
66:be:f1:87:1f:f9:f0:44:ee:a3:be:dd:ce:3f:64:
df:c0:fc:89:be:bb:c3:da:2f:34:cd:5a:2b:cf:f6:
44:e5:bd:da:5f:1c:5f:35:8f:80:8d:90:a4:ab:60:
d5:a8:95:ef:ff:c8:b4:b2:99:7e:af:fa:7e:58:ce:
20:29:08:c4:77:23:ac:10:08:1d:55:10:5f:73:ea:
5d:f4:03:30:fd:39:3f:c9:c5:31:37:0d:33:e8:01:
5b:b3:83:55:cd:9f:95:9f:97:f0:c5:81:76:a8:d8:
54:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:84:B4:3B:49:C3:51:BD:5B:49:B2:57:F9:BB:9D:14:73:61:D2:83
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/oYS0O0nDUb1bSbJX-budFHNh0oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.185.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:fb:1f:6e:41:c7:aa:ae:7c:66:29:19:28:75:8f:8a:b0:66:
97:58:f4:38:fc:2b:c9:3e:fd:36:63:80:e7:f8:c6:17:63:13:
d2:43:5c:5e:d0:db:33:5e:a5:46:3c:d8:ea:91:d3:f3:78:b2:
b9:a7:ae:5a:3b:92:ef:f0:a9:dc:4d:e0:6c:e2:e0:6d:7d:a8:
de:25:19:79:4e:45:4d:3c:32:60:bb:44:71:ca:b4:31:7b:16:
b9:b4:af:a5:84:f7:f8:c7:09:5d:af:cb:49:c7:e9:b4:c1:a3:
83:75:17:80:bc:43:95:84:7c:3d:4a:3c:8d:cf:45:22:4a:70:
17:ff:63:ff:c2:fb:8a:b2:e9:34:5e:0b:0d:69:d0:72:65:fc:
b2:64:ac:56:12:d9:9b:25:90:f0:05:cc:f9:d5:d5:89:0c:57:
c8:2a:47:e0:06:8c:72:02:ca:af:39:98:54:52:10:be:9b:53:
da:d1:47:2f:57:c1:de:db:c0:61:af:3a:71:93:d5:43:46:81:
30:de:b9:50:3c:e5:8c:3f:b2:65:55:ac:ea:0b:b2:f0:6f:29:
78:d7:74:c8:01:9d:7b:7a:12:8a:0d:73:3b:e6:6b:b9:1d:ec:
87:63:c7:37:f2:96:63:c0:6c:44:d5:82:99:b0:fa:e6:6e:5a:
ec:74:cc:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEwaIhqkNPo2MaSy50qrRU3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYxMDEyMTM1ODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTg0YjQzYjQ5YzM1MWJkNWI0OWIyNTdmOWJiOWQxNDczNjFkMjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurw+0TG+tNH2s9ElLl8H6oM11b5w
XY1XvQ5BIT4A61p1FRlyahDFhDLGOadJOuVlr5vuRaDN7bsC8eOC6gj4i3bMshkF
6DrJGz1ulUh8rYb5mL6ReOn634Uc2wa0Oxp2okhZsKdhriwCJieFusEuXup40K/I
JFyZKi+OIPIIyhVuATi7fMGr+vpYlnxxz4iEI7cDkv9mvvGHH/nwRO6jvt3OP2Tf
wPyJvrvD2i80zVorz/ZE5b3aXxxfNY+AjZCkq2DVqJXv/8i0spl+r/p+WM4gKQjE
dyOsEAgdVRBfc+pd9AMw/Tk/ycUxNw0z6AFbs4NVzZ+Vn5fwxYF2qNhU2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKGEtDtJw1G9W0myV/m7nRRzYdKDMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvb1lTME8wbkRVYjFiU2JKWC1idWRGSE5oMG9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrC5MA0G
CSqGSIb3DQEBCwUAA4IBAQCP+x9uQceqrnxmKRkodY+KsGaXWPQ4/CvJPv02Y4Dn
+MYXYxPSQ1xe0NszXqVGPNjqkdPzeLK5p65aO5Lv8KncTeBs4uBtfajeJRl5TkVN
PDJgu0RxyrQxexa5tK+lhPf4xwldr8tJx+m0waODdReAvEOVhHw9SjyNz0UiSnAX
/2P/wvuKsuk0XgsNadByZfyyZKxWEtmbJZDwBcz51dWJDFfIKkfgBoxyAsqvOZhU
UhC+m1Pa0UcvV8He28Bhrzpxk9VDRoEw3rlQPOWMP7JlVazqC7Lwbyl413TIAZ17
ehKKDXM75mu5HeyHY8c38pZjwGxE1YKZsPrmblrsdMz9
-----END CERTIFICATE-----
Generated at Sun Oct 18 09:33:25 2026 by rpki-client