Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/bybU-ALtdFOAYGWPJIdrXnlJpsE.roa
File: bybU-ALtdFOAYGWPJIdrXnlJpsE.roa (raw, json)
Hash identifier: IhoD5+ZK284yvX7U34qLp2ObNOIWs6rJkCYkyy0P2oI=
Subject key identifier: 6F:26:D4:F8:02:ED:74:53:80:60:65:8F:24:87:6B:5E:79:49:A6:C1
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F23683D2F9B2B7D986A0E02D91BC80525
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/bybU-ALtdFOAYGWPJIdrXnlJpsE.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198831
IP address blocks: 2a10:4646:2d0::/44 maxlen: 44
2a10:4646:3f0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3d:2f:9b:2b:7d:98:6a:0e:02:d9:1b:c8:05:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f26d4f802ed74538060658f24876b5e7949a6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:79:fc:2c:79:bd:2d:a0:80:c5:22:fe:3d:80:
b8:30:57:57:ca:b7:23:73:93:ad:1c:86:7d:ac:e4:
18:d0:8b:c7:94:1e:b9:7e:fa:37:06:6d:eb:a3:b8:
a1:f3:7e:e9:9b:fd:f5:76:14:a1:5e:bd:b0:cc:78:
8c:a3:4f:83:68:1a:9d:0f:b4:e4:f7:bd:e1:3e:b3:
81:17:e6:da:78:63:62:30:ee:49:fa:9e:89:86:2e:
13:b4:72:43:95:d7:bf:68:cc:02:96:1f:ce:09:da:
4b:19:07:b1:74:b9:07:67:be:16:1b:ae:79:6d:7e:
23:71:bf:ad:f1:60:bc:f0:c4:a3:ef:34:b0:f5:74:
b9:26:a9:5e:02:d8:1f:86:7a:3a:e8:0f:64:25:60:
b2:76:70:ea:38:7b:c5:1d:c6:45:09:1c:e2:c0:f4:
0f:39:d4:2f:3c:92:88:a6:0f:2f:b3:15:b9:22:c8:
1f:18:4a:12:29:fc:cc:68:44:c8:2b:c2:16:7c:98:
89:ca:e0:a5:80:43:d9:c9:b1:6a:79:50:e5:8e:7f:
58:b7:2c:e0:56:4d:2a:10:bd:ad:9b:64:19:21:bc:
2c:79:27:99:2d:90:14:73:aa:81:36:bf:07:d4:4b:
78:93:f6:a0:eb:97:ee:8e:a8:d8:28:48:40:cc:33:
eb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:26:D4:F8:02:ED:74:53:80:60:65:8F:24:87:6B:5E:79:49:A6:C1
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/bybU-ALtdFOAYGWPJIdrXnlJpsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:2d0::/44
2a10:4646:3f0::/44
Signature Algorithm: sha256WithRSAEncryption
62:2c:e7:4c:d4:f5:df:bf:1e:0a:de:2f:eb:b1:05:63:df:e2:
60:e7:10:20:eb:31:7d:80:75:0c:63:93:ff:5e:dc:46:25:11:
91:41:d4:e9:0f:e3:a4:d0:10:88:c2:15:4e:af:e9:f4:19:c0:
c9:f1:c8:34:ac:f2:74:12:3d:3a:b2:d3:54:b8:47:c2:cf:6a:
36:f7:11:72:2e:17:5b:e8:0a:ef:43:55:86:2d:87:f1:ae:69:
30:a2:d6:23:18:ee:0b:9f:23:d3:9f:b0:66:98:d5:00:0e:1e:
ce:e6:66:b9:85:1e:e6:bf:e2:73:0b:a3:53:85:9e:04:4e:93:
19:96:50:a1:c9:4f:aa:b9:6d:22:05:a0:08:d3:57:ed:85:cf:
c2:e5:e9:d8:b6:19:9a:43:49:11:d8:e4:c7:69:c7:6c:a4:d7:
4f:7b:5d:26:79:0e:e1:43:7b:6e:77:ba:28:aa:51:4a:9f:03:
37:ec:c0:ca:2d:69:ea:ff:be:bf:95:d2:0e:03:87:0d:9f:96:
74:4f:98:5b:ac:dc:a5:46:7d:62:5a:c3:1d:46:55:1a:2a:6c:
73:45:fa:e9:f4:5c:9e:f9:d9:d1:ca:1e:96:55:57:1b:d1:72:
c9:43:f9:79:58:c6:ce:19:41:ff:87:f5:a0:2b:87:fe:36:6e:
93:ed:9f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 15:57:54 2026 by rpki-client