Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oyx1d1VcqsKwynC9Z1q47MTPPbo.roa
File: oyx1d1VcqsKwynC9Z1q47MTPPbo.roa (raw, json)
Hash identifier: x/4K/6bnySRnys3M9p/RV5XllRhSenzdFBQ7Wrbt10o=
Subject key identifier: A3:2C:75:77:55:5C:AA:C2:B0:CA:70:BD:67:5A:B8:EC:C4:CF:3D:BA
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0E7A06D2AE801BD785937E4D8F0722BD3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oyx1d1VcqsKwynC9Z1q47MTPPbo.roa
Signing time: Mon 28 Sep 2026 10:47:25 +0000
ROA not before: Mon 28 Sep 2026 10:47:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215613
IP address blocks: 188.240.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:a0:6d:2a:e8:01:bd:78:59:37:e4:d8:f0:72:2b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 28 10:47:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a32c7577555caac2b0ca70bd675ab8ecc4cf3dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:75:d4:86:c2:86:36:1c:ff:63:0c:83:72:f1:
3d:ef:78:80:61:20:f8:d9:0e:22:11:aa:27:10:33:
de:9a:ad:71:3f:36:27:40:fe:3c:04:0e:c6:a2:49:
08:91:d4:41:0c:9a:ae:ce:2e:56:a2:8d:19:a8:3f:
e0:29:a7:ce:33:be:73:0f:db:9c:0f:2f:67:0b:af:
2a:dc:e0:c5:6c:98:f6:f7:66:43:aa:b1:8d:d8:c3:
ae:1b:d4:22:62:1c:ac:78:e9:ec:96:ce:b3:95:f6:
af:75:31:b3:87:d0:89:f9:d9:fc:d9:9d:56:cd:e4:
aa:06:a8:4b:8f:4a:d7:04:22:06:ad:22:6a:39:d4:
9c:20:47:0e:ae:8f:0d:2f:0f:1f:a8:92:1c:95:53:
4d:62:b8:46:bf:ca:b3:07:0e:a6:84:7d:33:e2:b8:
f1:b9:b1:bf:4b:af:27:e0:57:7f:07:56:86:2c:70:
0d:9a:39:5b:6e:c2:fc:f4:10:df:42:d7:c0:27:30:
a8:dc:ca:bd:e6:49:d6:75:17:69:60:1e:ce:15:31:
0b:8c:42:dc:72:8b:0f:ba:35:d5:43:ab:f9:0d:db:
1b:a5:15:68:98:ec:56:e3:2a:5b:8f:42:ec:eb:df:
c1:f4:06:9d:9c:90:bd:57:47:64:c2:8e:ae:90:2a:
e0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2C:75:77:55:5C:AA:C2:B0:CA:70:BD:67:5A:B8:EC:C4:CF:3D:BA
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oyx1d1VcqsKwynC9Z1q47MTPPbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.240.213.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:55:64:d7:0a:b7:71:ed:50:80:78:ef:87:04:13:99:2c:d1:
1e:f9:b6:0d:69:71:0a:bf:e3:ff:54:4a:48:ff:40:7e:35:ca:
e7:bc:bf:dd:4a:f1:9d:24:67:f3:5a:2b:79:14:d1:86:30:01:
55:9a:87:48:24:de:25:a2:c9:14:e8:5f:eb:b0:dc:ec:e7:78:
ca:00:f2:9e:da:4e:ac:e5:3e:80:8d:3c:fc:5f:67:67:06:a5:
3b:8c:d1:58:f5:bb:be:b0:1b:22:2a:6e:69:93:e7:be:3d:b1:
d9:56:96:8e:fc:8a:be:44:87:c1:27:61:7c:8d:fe:9b:ca:6e:
ea:b7:f8:eb:ed:61:1d:eb:cc:10:37:cb:77:51:34:22:f3:31:
13:0e:e7:b4:46:bb:31:9e:6f:d0:10:9e:b3:9f:6a:62:ac:1c:
31:ba:34:6e:54:bf:a0:94:89:b1:b6:d2:b6:cd:5e:a2:b8:55:
2f:43:8f:e3:23:2d:60:4a:46:87:f6:6f:99:2d:1a:ba:43:d6:
1a:92:de:7f:8c:15:4c:1b:83:9e:5c:5d:50:f4:00:52:34:f0:
76:a6:f2:c9:6e:83:ea:68:94:85:e1:96:76:65:0f:7a:6f:81:
b9:78:53:e4:33:e5:f1:84:bb:7f:f8:3a:d3:cf:e1:b0:db:97:
75:bb:6c:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDnoG0q6AG9eFk35NjwcivTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwOTI4MTA0NzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzJjNzU3NzU1NWNhYWMyYjBjYTcwYmQ2NzVhYjhlY2M0Y2YzZGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XXUhsKGNhz/YwyDcvE973iAYSD4
2Q4iEaonEDPemq1xPzYnQP48BA7GokkIkdRBDJquzi5Woo0ZqD/gKafOM75zD9uc
Dy9nC68q3ODFbJj292ZDqrGN2MOuG9QiYhyseOnsls6zlfavdTGzh9CJ+dn82Z1W
zeSqBqhLj0rXBCIGrSJqOdScIEcOro8NLw8fqJIclVNNYrhGv8qzBw6mhH0z4rjx
ubG/S68n4Fd/B1aGLHANmjlbbsL89BDfQtfAJzCo3Mq95knWdRdpYB7OFTELjELc
cosPujXVQ6v5DdsbpRVomOxW4ypbj0Ls69/B9AadnJC9V0dkwo6ukCrgTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKMsdXdVXKrCsMpwvWdauOzEzz26MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvb3l4MWQxVmNxc0t3eW5DOVoxcTQ3TVRQUGJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvPDVMA0G
CSqGSIb3DQEBCwUAA4IBAQA+VWTXCrdx7VCAeO+HBBOZLNEe+bYNaXEKv+P/VEpI
/0B+NcrnvL/dSvGdJGfzWit5FNGGMAFVmodIJN4loskU6F/rsNzs53jKAPKe2k6s
5T6AjTz8X2dnBqU7jNFY9bu+sBsiKm5pk+e+PbHZVpaO/Iq+RIfBJ2F8jf6bym7q
t/jr7WEd68wQN8t3UTQi8zETDue0Rrsxnm/QEJ6zn2pirBwxujRuVL+glImxttK2
zV6iuFUvQ4/jIy1gSkaH9m+ZLRq6Q9Yakt5/jBVMG4OeXF1Q9ABSNPB2pvLJboPq
aJSF4ZZ2ZQ96b4G5eFPkM+XxhLt/+DrTz+Gw25d1u2zU
-----END CERTIFICATE-----
Generated at Sat Oct 17 09:13:00 2026 by rpki-client