Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/O-yrRi9o6rG_oL9Hiv5yfahA9Ag.roa
File: O-yrRi9o6rG_oL9Hiv5yfahA9Ag.roa (raw, json)
Hash identifier: l6q40j8l0typE55iAgRRwHZpUAEEusluy2Yc28Vu39M=
Subject key identifier: 3B:EC:AB:46:2F:68:EA:B1:BF:A0:BF:47:8A:FE:72:7D:A8:40:F4:08
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1063666363D3A946522ECB3DA0A9B7CB7
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/O-yrRi9o6rG_oL9Hiv5yfahA9Ag.roa
Signing time: Sun 04 Oct 2026 09:19:50 +0000
ROA not before: Sun 04 Oct 2026 09:19:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 78.17.196.0/24 maxlen: 24
91.208.61.0/24 maxlen: 24
153.76.203.0/24 maxlen: 24
212.192.16.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:36:66:36:3d:3a:94:65:22:ec:b3:da:0a:9b:7c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 4 09:19:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3becab462f68eab1bfa0bf478afe727da840f408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:c1:80:a2:89:98:42:d6:0f:ee:2a:54:82:
14:6d:85:d3:87:f3:9e:52:dd:87:e3:19:48:b9:7b:
ff:2c:da:7e:12:d0:ce:37:2f:70:9a:63:40:b9:5f:
3c:46:94:e5:8f:2f:fb:f9:77:cf:b0:ba:9f:9f:78:
41:82:54:07:da:a7:6f:d9:de:e5:80:e7:38:e1:62:
7c:24:17:25:19:3c:d9:ba:d2:34:e8:a8:00:3a:45:
18:61:fe:9a:43:0b:f6:e2:4f:79:d6:e8:b5:08:2c:
1d:b2:fa:ea:b6:9a:51:66:61:0f:d7:d8:60:3c:bf:
1a:18:90:10:ff:e3:c0:91:47:7c:5f:20:44:4f:2f:
f5:88:49:c4:87:46:f5:29:d8:2a:f2:02:5e:aa:09:
d5:d6:ff:27:a9:d3:fc:4f:25:ad:ca:c4:79:ac:e4:
06:93:eb:41:24:bf:66:cb:85:94:a4:2d:76:3f:b3:
32:37:c2:cb:d0:eb:50:23:7d:4d:c7:3f:b4:0a:03:
47:0b:49:59:07:3b:d8:d9:d6:7a:ad:75:75:99:d4:
11:f0:1c:82:9e:76:4e:f5:ed:1c:1d:62:a4:7a:e7:
f7:40:7f:bb:a6:7a:21:11:db:56:45:7c:dc:df:f1:
44:26:a6:3d:50:45:2b:31:82:8c:1c:28:95:96:09:
00:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EC:AB:46:2F:68:EA:B1:BF:A0:BF:47:8A:FE:72:7D:A8:40:F4:08
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/O-yrRi9o6rG_oL9Hiv5yfahA9Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.196.0/24
91.208.61.0/24
153.76.203.0/24
212.192.16.0/23
Signature Algorithm: sha256WithRSAEncryption
10:e3:e1:db:dd:1a:b3:5c:b8:9b:6d:84:bd:9c:4c:de:a9:10:
d3:bc:e2:07:31:df:36:10:8a:5a:17:01:d5:fe:b3:ce:b2:04:
2d:a2:2d:fd:9c:89:60:35:ea:86:d4:62:5d:53:89:fc:18:c1:
4d:51:64:d9:f9:83:99:51:55:e8:44:7b:e3:c5:d5:91:3d:ec:
02:29:02:89:36:44:d6:48:dd:3c:13:eb:9f:18:7b:ee:d7:0f:
e0:20:64:7e:e2:35:33:f1:25:5d:78:83:e5:1b:dc:4b:30:0a:
94:79:1b:3f:23:a7:ad:de:4f:54:1c:7b:41:8c:0c:37:86:e3:
a8:86:7c:c2:14:aa:79:a7:30:f3:49:c3:c7:33:47:3a:3e:0d:
e7:ff:37:e8:62:3a:09:67:3f:da:59:14:29:d9:90:5d:0b:48:
0a:6f:84:b1:ab:23:45:2d:70:a8:90:ab:27:46:2c:9f:f0:d4:
81:52:db:9a:eb:a5:e2:5b:98:2a:47:38:e3:ba:da:d1:d4:d6:
a7:15:11:68:98:2a:d1:76:68:4b:7e:60:87:bd:5e:3c:64:72:
27:0f:b4:09:a1:fe:85:a4:21:fb:4a:fc:7f:37:57:01:b7:e2:
ad:64:79:f2:90:e6:5b:28:c7:29:f5:30:a6:82:de:62:10:74:
f6:d5:7b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:54:45 2026 by rpki-client