Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/IBeYnHgb3EsF56poz0a2D6cdlIY.roa
File: IBeYnHgb3EsF56poz0a2D6cdlIY.roa (raw, json)
Hash identifier: D4zyEaO3R/Zqmjp8851nyWAupe4pUCwoadZ9CDCmJeM=
Subject key identifier: 20:17:98:9C:78:1B:DC:4B:05:E7:AA:68:CF:46:B6:0F:A7:1D:94:86
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019F182D3ACED712A9FD73CC33444C4BA047
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/IBeYnHgb3EsF56poz0a2D6cdlIY.roa
Signing time: Tue 30 Jun 2026 10:57:24 +0000
ROA not before: Tue 30 Jun 2026 10:57:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3949
IP address blocks: 80.96.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:2d:3a:ce:d7:12:a9:fd:73:cc:33:44:4c:4b:a0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jun 30 10:57:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2017989c781bdc4b05e7aa68cf46b60fa71d9486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f1:be:1d:e6:63:32:76:e1:19:2c:ff:24:a7:
15:d5:8e:fa:e4:73:78:20:fd:87:fc:df:8c:47:72:
c6:b9:89:4a:5a:14:75:93:cf:7a:da:af:57:ed:9d:
ef:4e:ad:19:49:4a:43:07:4f:13:7b:5f:3a:51:c3:
07:de:05:ac:92:5f:81:48:9b:3a:4c:f4:1c:ba:29:
41:59:8b:12:11:5f:e6:ab:b2:a6:76:d4:bd:0e:33:
0b:ad:1f:fe:d1:85:ca:7a:85:ab:11:e1:ee:20:3e:
61:84:77:30:6e:8f:3d:e0:45:87:01:65:d3:58:2f:
2b:42:6e:6d:bf:bb:ea:99:30:41:dd:eb:b9:b8:7e:
e9:a1:62:e7:3b:d2:99:d4:81:6c:08:12:b7:41:da:
dc:3f:7c:9b:1c:14:16:eb:d3:e3:18:c7:96:aa:7f:
a6:1b:31:b7:52:3c:e5:d0:ed:84:1b:e6:c1:1d:43:
d9:2c:5c:43:2d:d9:59:4f:31:a9:53:38:f0:31:c2:
5d:9b:cf:50:2a:75:7c:e7:bd:46:49:63:cc:46:67:
73:fb:7f:e8:c9:ca:09:40:ea:30:c1:f3:01:8d:1c:
0e:ac:5d:5c:31:ca:38:bd:0a:5f:ce:9e:c0:8e:3f:
2c:f2:dd:45:1e:1e:1d:1a:33:3e:88:bc:24:44:8d:
f0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:17:98:9C:78:1B:DC:4B:05:E7:AA:68:CF:46:B6:0F:A7:1D:94:86
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/IBeYnHgb3EsF56poz0a2D6cdlIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.148.0/23
Signature Algorithm: sha256WithRSAEncryption
21:92:be:70:23:2a:be:4f:91:d3:0e:49:bc:4d:54:41:a0:d3:
8c:5f:1c:db:f5:24:5c:8d:1c:94:ab:33:a3:78:ce:d7:5a:b4:
fa:eb:bd:10:40:a9:12:17:50:f4:cf:36:57:54:f2:3b:07:86:
79:8e:82:98:89:0b:17:ec:e6:3a:ca:21:fd:a7:f4:e7:a6:93:
62:ef:57:43:ef:ff:97:ee:64:fc:80:0d:c8:6e:d1:c1:fa:6b:
01:ed:2a:44:09:a6:ca:55:58:17:96:2a:ae:f9:92:a9:a6:04:
6c:c6:b7:f8:0d:ee:06:1b:f5:f2:95:10:45:4d:14:37:19:4c:
60:e4:46:ab:16:37:3b:0a:88:41:fd:3e:8b:98:2c:13:48:53:
47:33:00:a7:a3:c5:f0:08:72:1d:d6:3f:29:b7:d5:99:e5:f1:
fb:96:db:c4:2c:99:10:7a:d1:09:39:49:ce:73:98:52:9f:fb:
4b:b9:23:e4:e5:b8:17:5b:cb:c4:44:ee:e7:f5:05:06:2a:f9:
2f:84:c0:68:2b:68:68:7e:8b:1a:45:94:a6:33:29:43:64:07:
02:d8:91:f2:b1:d7:01:33:c1:72:4a:50:89:ee:cd:cc:1f:b9:
a8:a5:90:41:b2:ef:50:98:99:4b:8f:5b:97:71:2d:d7:57:f2:
6d:0b:cd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:32 2026 by rpki-client