Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/d7bda7-414b-42e3-93f1-37bee341d5b6/1/cytV20G2bBo39tVg7IAn_fvo724.roa
File: cytV20G2bBo39tVg7IAn_fvo724.roa (raw, json)
Hash identifier: 6yRKdGIP7ACoveMwQRKqL5rdUlANPoMl4K9JrWV2XL0=
Subject key identifier: 73:2B:55:DB:41:B6:6C:1A:37:F6:D5:60:EC:80:27:FD:FB:E8:EF:6E
Certificate issuer: /CN=d65a3550268293db49a44c31dc0e076615b2e5f7
Certificate serial: 01A16F4BDFE48FAE8BD8C6E6E582BE36AD4A
Authority key identifier: D6:5A:35:50:26:82:93:DB:49:A4:4C:31:DC:0E:07:66:15:B2:E5:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lo1UCaCk9tJpEwx3A4HZhWy5fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d7bda7-414b-42e3-93f1-37bee341d5b6/1/cytV20G2bBo39tVg7IAn_fvo724.roa
Signing time: Sat 24 Oct 2026 19:03:25 +0000
ROA not before: Sat 24 Oct 2026 19:03:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13301
IP address blocks: 217.66.128.0/21 maxlen: 21
2a07:2c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d7bda7-414b-42e3-93f1-37bee341d5b6/1/1lo1UCaCk9tJpEwx3A4HZhWy5fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d7bda7-414b-42e3-93f1-37bee341d5b6/1/1lo1UCaCk9tJpEwx3A4HZhWy5fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lo1UCaCk9tJpEwx3A4HZhWy5fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:4b:df:e4:8f:ae:8b:d8:c6:e6:e5:82:be:36:ad:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65a3550268293db49a44c31dc0e076615b2e5f7
Validity
Not Before: Oct 24 19:03:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=732b55db41b66c1a37f6d560ec8027fdfbe8ef6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:78:34:96:6b:10:99:f5:4e:47:23:ed:16:ce:
73:ae:68:35:1b:f4:d7:c8:4c:27:ee:dc:57:df:9c:
3a:67:88:85:e9:86:24:2e:77:13:bc:fe:24:f7:3b:
7a:59:17:59:56:7b:a0:15:b9:31:12:e3:dc:f3:13:
54:02:d1:a9:51:a0:0c:97:c1:4b:ea:72:87:cb:45:
8e:6c:ae:93:b3:93:c1:76:d0:83:fc:84:78:08:b9:
b8:0f:2c:3d:68:67:55:d2:cf:68:1c:07:63:ba:b0:
95:a4:33:a9:fd:ba:e2:56:2d:a4:0c:cf:0e:09:31:
ca:8c:15:48:41:56:48:73:0f:b8:98:9c:13:67:d8:
1f:46:ba:30:67:a4:28:27:47:87:e2:44:90:b1:1e:
b9:cc:9c:d5:d7:60:ca:94:ed:66:f8:df:15:de:8f:
f6:cf:07:18:e6:99:96:2f:14:6d:aa:fc:db:e9:9d:
8e:a9:ff:4f:33:a2:53:e2:10:da:30:44:e9:11:61:
c6:73:a1:de:53:28:73:6a:67:b5:a4:70:e4:26:d9:
a4:32:70:d6:46:20:51:92:bb:5a:72:b3:80:ef:a4:
ae:f5:ca:00:b3:8c:aa:1d:d2:3a:44:e4:59:7e:ef:
d1:e2:02:0d:ab:3f:d6:26:89:0c:50:2b:23:2c:c7:
29:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2B:55:DB:41:B6:6C:1A:37:F6:D5:60:EC:80:27:FD:FB:E8:EF:6E
X509v3 Authority Key Identifier:
keyid:D6:5A:35:50:26:82:93:DB:49:A4:4C:31:DC:0E:07:66:15:B2:E5:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lo1UCaCk9tJpEwx3A4HZhWy5fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d7bda7-414b-42e3-93f1-37bee341d5b6/1/cytV20G2bBo39tVg7IAn_fvo724.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d7bda7-414b-42e3-93f1-37bee341d5b6/1/1lo1UCaCk9tJpEwx3A4HZhWy5fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.66.128.0/21
IPv6:
2a07:2c40::/29
Signature Algorithm: sha256WithRSAEncryption
51:f5:b1:d3:c1:a3:f6:92:fe:97:e3:37:6e:2e:31:28:1a:41:
52:75:78:bd:24:28:04:79:ce:bf:fa:cd:18:f6:9b:42:e6:f3:
ee:16:a1:8e:06:ba:3c:1a:16:5c:1b:f8:e1:3d:e4:bc:96:00:
f4:46:e8:e1:dc:b2:08:03:3e:27:4e:59:0d:d5:40:b0:eb:01:
7d:ea:0c:ba:b6:3b:46:9b:b6:3a:8e:34:66:0c:b9:c0:c2:7f:
b8:29:f9:99:34:f5:b9:2e:28:6a:33:96:a9:51:9d:23:96:7b:
75:db:12:b9:57:46:77:16:05:a9:ec:c3:3f:24:55:00:a1:02:
9d:48:d5:fa:0a:40:83:e3:48:76:fa:a8:31:12:0b:e5:24:97:
6f:ce:f7:33:e4:37:48:50:ea:70:18:ed:67:b1:db:d8:94:0f:
60:30:83:65:d6:15:37:5d:3a:2e:d7:17:47:3c:4e:94:77:ab:
18:0c:62:b0:5e:0a:a2:8b:cd:4a:95:cb:b3:8a:4d:b2:67:1d:
8c:fa:fe:74:18:0a:6d:86:70:3a:4e:c0:9d:9f:39:fd:9e:d0:
48:2b:f8:4f:10:43:93:00:0a:ff:0d:15:d3:b1:98:27:f6:e9:
1a:dd:da:51:41:2a:44:0c:aa:4b:b5:14:37:63:d0:fb:b7:62:
1e:77:93:eb
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaFvS9/kj66L2Mbm5YK+Nq1KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NWEzNTUwMjY4MjkzZGI0OWE0NGMzMWRjMGUwNzY2MTVi
MmU1ZjcwHhcNMjYxMDI0MTkwMzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzJiNTVkYjQxYjY2YzFhMzdmNmQ1NjBlYzgwMjdmZGZiZThlZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXg0lmsQmfVORyPtFs5zrmg1G/TX
yEwn7txX35w6Z4iF6YYkLncTvP4k9zt6WRdZVnugFbkxEuPc8xNUAtGpUaAMl8FL
6nKHy0WObK6Ts5PBdtCD/IR4CLm4Dyw9aGdV0s9oHAdjurCVpDOp/briVi2kDM8O
CTHKjBVIQVZIcw+4mJwTZ9gfRrowZ6QoJ0eH4kSQsR65zJzV12DKlO1m+N8V3o/2
zwcY5pmWLxRtqvzb6Z2Oqf9PM6JT4hDaMETpEWHGc6HeUyhzame1pHDkJtmkMnDW
RiBRkrtacrOA76Su9coAs4yqHdI6RORZfu/R4gINqz/WJokMUCsjLMcpDwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHMrVdtBtmwaN/bVYOyAJ/376O9uMB8GA1UdIwQY
MBaAFNZaNVAmgpPbSaRMMdwOB2YVsuX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWxvMVVDYUNrOXRKcEV3eDNBNEhaaFd5NWZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kN2JkYTctNDE0Yi00MmUzLTkzZjEt
MzdiZWUzNDFkNWI2LzEvY3l0VjIwRzJiQm8zOXRWZzdJQW5fZnZvNzI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kN2JkYTctNDE0Yi00MmUzLTkzZjEtMzdiZWUzNDFkNWI2
LzEvMWxvMVVDYUNrOXRKcEV3eDNBNEhaaFd5NWZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQD2UKAMA0E
AgACMAcDBQMqByxAMA0GCSqGSIb3DQEBCwUAA4IBAQBR9bHTwaP2kv6X4zduLjEo
GkFSdXi9JCgEec6/+s0Y9ptC5vPuFqGOBro8GhZcG/jhPeS8lgD0Rujh3LIIAz4n
TlkN1UCw6wF96gy6tjtGm7Y6jjRmDLnAwn+4KfmZNPW5LihqM5apUZ0jlnt12xK5
V0Z3FgWp7MM/JFUAoQKdSNX6CkCD40h2+qgxEgvlJJdvzvcz5DdIUOpwGO1nsdvY
lA9gMINl1hU3XTou1xdHPE6Ud6sYDGKwXgqii81Klcuzik2yZx2M+v50GApthnA6
TsCdnzn9ntBIK/hPEEOTAAr/DRXTsZgn9uka3dpRQSpEDKpLtRQ3Y9D7t2Ied5Pr
-----END CERTIFICATE-----
Generated at Wed Nov 4 17:04:47 2026 by rpki-client