Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/oyaoJP_-oRrikeFzcx4wX4DNZNc.roa
File: oyaoJP_-oRrikeFzcx4wX4DNZNc.roa (raw, json)
Hash identifier: tT9qKyAULqzBtDWH2BB9KDYx0XdnjR7kUjgqU8anAsM=
Subject key identifier: A3:26:A8:24:FF:FE:A1:1A:E2:91:E1:73:73:1E:30:5F:80:CD:64:D7
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 01A067F8E6DBA74712BCA0E62EAAFEDDF75A
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/oyaoJP_-oRrikeFzcx4wX4DNZNc.roa
Signing time: Thu 03 Sep 2026 15:52:40 +0000
ROA not before: Thu 03 Sep 2026 15:52:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198401
IP address blocks: 91.149.196.0/23 maxlen: 23
91.149.198.0/24 maxlen: 24
91.149.199.0/24 maxlen: 24
91.149.201.0/24 maxlen: 24
91.149.204.0/22 maxlen: 22
91.149.208.0/22 maxlen: 22
91.149.212.0/24 maxlen: 24
91.149.213.0/24 maxlen: 24
91.149.214.0/24 maxlen: 24
91.149.216.0/23 maxlen: 24
91.149.220.0/24 maxlen: 24
91.149.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:f8:e6:db:a7:47:12:bc:a0:e6:2e:aa:fe:dd:f7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Sep 3 15:52:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a326a824fffea11ae291e173731e305f80cd64d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:50:c4:fa:fe:d1:a5:d7:7b:91:77:c8:c2:
6e:2b:c3:58:d2:21:a9:83:79:b6:2d:9d:f4:4f:9c:
4a:30:6a:f3:10:cf:8e:1e:7e:df:91:da:2a:22:05:
e9:55:03:83:ce:e6:7c:b9:54:78:ed:aa:c3:4b:91:
eb:9d:fe:64:57:85:16:8b:3d:9f:a4:3f:23:b5:9f:
10:31:38:a3:62:8f:5e:15:a3:26:12:15:08:99:5d:
f8:c3:d2:28:e3:bb:bf:87:d0:de:f4:92:56:0b:04:
3a:89:76:41:8f:25:60:6d:78:53:ce:69:af:a6:ee:
c3:e7:84:b3:5d:34:cb:8f:4e:4f:17:c7:7d:ed:0f:
bd:31:82:15:5c:0d:10:88:d0:57:ac:a7:2d:ef:06:
57:7b:6b:ac:bc:ea:b2:e0:a1:38:8c:a0:86:0d:ee:
36:e0:50:b2:63:1f:76:ff:0f:dc:c0:b1:f1:ec:ea:
df:ea:c4:72:0b:fb:da:95:12:a8:74:de:a2:65:95:
9a:c1:25:40:d5:c5:04:c0:27:04:71:95:3f:68:1e:
58:73:d7:52:78:1c:81:d9:29:98:6f:9b:da:66:d6:
7e:6f:90:2d:60:30:0c:bf:92:08:8d:0e:f5:2e:30:
17:35:21:1e:be:7c:34:99:49:4c:22:b0:e5:20:b7:
3e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:26:A8:24:FF:FE:A1:1A:E2:91:E1:73:73:1E:30:5F:80:CD:64:D7
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/oyaoJP_-oRrikeFzcx4wX4DNZNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.196.0/22
91.149.201.0/24
91.149.204.0-91.149.214.255
91.149.216.0/23
91.149.220.0/24
91.149.234.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:c9:6b:bb:af:d2:89:68:b1:72:68:98:21:48:9c:77:93:18:
18:f0:ae:03:ff:4a:21:3b:38:43:e5:83:53:91:08:64:9d:89:
fc:e9:bd:bb:9f:5d:fa:9e:aa:c0:4e:b9:94:4f:d9:c0:e7:72:
5e:5a:4f:6b:e8:4d:74:ce:07:98:fa:5c:f9:70:6b:4c:e8:c5:
33:40:7f:57:74:e8:a2:25:8c:f9:33:a5:f8:25:ca:2b:de:89:
d5:66:32:08:7d:bf:09:ba:ce:75:d7:ba:dd:68:8e:e5:48:d1:
24:d5:c7:2d:24:d7:14:3c:46:52:27:cb:b5:c0:69:f1:43:10:
95:6c:0e:49:21:3c:c8:9b:22:db:4f:3f:49:93:a2:f2:a1:0e:
c8:4e:84:88:0d:39:eb:ed:8e:66:1c:3b:24:e7:42:e6:0d:b2:
53:89:43:16:35:08:b3:bf:a8:4c:8b:23:5c:20:67:cc:2b:41:
86:db:f8:0f:94:07:18:08:20:88:2b:fa:9b:a6:59:d9:cb:c6:
90:8d:b7:67:c9:fc:2a:3d:43:bd:11:9b:c1:c2:f6:d5:d3:bf:
c7:8b:0f:ca:14:2b:7a:76:7e:79:b6:46:0a:ea:1f:81:5f:76:
fe:81:38:6c:bc:68:bf:94:89:04:99:e4:77:40:97:bb:82:bb:
5f:63:d0:5d
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAaBn+Obbp0cSvKDmLqr+3fdaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk
YzJhZjkwHhcNMjYwOTAzMTU1MjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzI2YTgyNGZmZmVhMTFhZTI5MWUxNzM3MzFlMzA1ZjgwY2Q2NGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK9QxPr+0aXXe5F3yMJuK8NY0iGp
g3m2LZ30T5xKMGrzEM+OHn7fkdoqIgXpVQODzuZ8uVR47arDS5Hrnf5kV4UWiz2f
pD8jtZ8QMTijYo9eFaMmEhUImV34w9Io47u/h9De9JJWCwQ6iXZBjyVgbXhTzmmv
pu7D54SzXTTLj05PF8d97Q+9MYIVXA0QiNBXrKct7wZXe2usvOqy4KE4jKCGDe42
4FCyYx92/w/cwLHx7Orf6sRyC/valRKodN6iZZWawSVA1cUEwCcEcZU/aB5Yc9dS
eByB2SmYb5vaZtZ+b5AtYDAMv5IIjQ71LjAXNSEevnw0mUlMIrDlILc+bwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFKMmqCT//qEa4pHhc3MeMF+AzWTXMB8GA1UdIwQY
MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt
N2E5MzY3NTFkYjFiLzEvb3lhb0pQXy1vUnJpa2VGemN4NHdYNEROWk5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi
LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQCW5XEAwQA
W5XJMAwDBAJblcwDBABbldYDBAFbldgDBABbldwDBABbleowDQYJKoZIhvcNAQEL
BQADggEBAAzJa7uv0olosXJomCFInHeTGBjwrgP/SiE7OEPlg1ORCGSdifzpvbuf
XfqeqsBOuZRP2cDncl5aT2voTXTOB5j6XPlwa0zoxTNAf1d06KIljPkzpfglyive
idVmMgh9vwm6znXXut1ojuVI0STVxy0k1xQ8RlIny7XAafFDEJVsDkkhPMibIttP
P0mTovKhDshOhIgNOevtjmYcOyTnQuYNslOJQxY1CLO/qEyLI1wgZ8wrQYbb+A+U
BxgIIIgr+pumWdnLxpCNt2fJ/Co9Q70Rm8HC9tXTv8eLD8oUK3p2fnm2RgrqH4Ff
dv6BOGy8aL+UiQSZ5HdAl7uCu19j0F0=
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:03:26 2026 by rpki-client