Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/byETvkjb2MMN_EpFl0i58-_3Mdg.roa
File: byETvkjb2MMN_EpFl0i58-_3Mdg.roa (raw, json)
Hash identifier: LHQHGZa06r4Vuvc2lWg7nab+a60RBF0oROaIsQs5Pn4=
Subject key identifier: 6F:21:13:BE:48:DB:D8:C3:0D:FC:4A:45:97:48:B9:F3:EF:F7:31:D8
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 019F23690D6DEF8325EE9AD76F6741F92FEC
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/byETvkjb2MMN_EpFl0i58-_3Mdg.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203363
IP address blocks: 91.205.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0d:6d:ef:83:25:ee:9a:d7:6f:67:41:f9:2f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f2113be48dbd8c30dfc4a459748b9f3eff731d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4b:e1:3d:00:e5:5e:a5:f4:a2:af:69:41:15:
26:f9:45:62:e9:ec:07:ca:65:9b:85:66:00:7c:9d:
5c:f8:bd:be:67:13:54:86:5f:ab:3d:5f:89:c9:3e:
bd:4f:00:a9:f9:4c:d9:86:9c:fe:56:aa:46:bd:7b:
e4:a0:b9:f0:af:3e:3b:6c:06:4c:d2:7e:3a:6e:31:
52:ed:47:d9:07:e7:6b:57:ad:06:90:0e:3d:22:4a:
99:bf:27:24:4e:c7:e7:49:72:72:ca:25:29:58:ae:
08:bf:50:cf:21:fe:d3:69:b1:d3:dd:4d:dc:e5:64:
d4:31:a8:f1:e7:73:43:92:be:cc:7c:ad:f0:d7:fc:
22:0b:81:97:65:d5:58:0b:14:86:2f:d7:97:7e:36:
75:70:85:da:f9:d7:bc:72:93:45:c5:8e:23:97:b7:
81:f0:44:22:23:98:f5:e8:a1:1c:81:7e:a9:94:52:
05:5b:21:b8:45:13:6e:b4:51:ef:8a:01:bd:1f:50:
af:28:c9:39:89:79:0e:8e:21:b9:5e:aa:1d:ab:3c:
88:a2:86:4a:d4:7f:87:d9:40:33:be:b6:f4:84:3d:
a0:f5:c3:69:26:83:e7:73:c3:0d:03:78:9a:70:93:
ee:52:97:38:28:99:ad:ae:be:ae:dd:22:f5:0f:c0:
1a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:21:13:BE:48:DB:D8:C3:0D:FC:4A:45:97:48:B9:F3:EF:F7:31:D8
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/byETvkjb2MMN_EpFl0i58-_3Mdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.158.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:95:bf:8e:ec:b7:ed:ce:25:d6:85:36:a4:35:ec:a9:a1:6e:
7e:2c:03:49:13:78:86:0f:9d:38:10:8f:43:f1:5f:d5:43:47:
a8:80:d6:ca:a0:5c:17:cf:d9:6e:c3:a2:ba:6e:a4:1d:82:6e:
9d:84:56:df:54:03:2e:de:31:ce:fa:9b:12:7b:24:3c:30:4f:
0d:26:c5:3e:7d:74:a5:9d:9d:49:90:26:75:b3:21:03:37:b8:
b2:c5:58:26:ed:9c:74:ce:cc:49:df:bd:5b:5e:d0:88:99:4c:
48:08:f0:72:58:18:3c:fb:13:49:60:6d:dd:84:14:47:c2:f4:
c2:1a:77:10:73:bb:39:85:01:66:0a:85:03:fd:ae:b9:55:7a:
8b:10:d0:f1:98:2d:9e:ad:01:a1:c7:d1:9c:69:eb:94:d1:c6:
92:4e:49:f2:aa:86:33:11:8a:04:87:ff:dd:62:22:37:21:e0:
82:20:45:1d:bb:0d:40:1f:80:f2:66:9e:7c:6c:92:83:df:48:
87:ae:70:a3:55:79:a6:c6:62:66:29:91:f8:09:71:a5:b3:b9:
09:82:f8:9b:db:90:76:e1:e4:ff:81:95:52:79:d8:6a:f7:fe:
1c:9c:41:9e:a1:f9:a2:b6:88:3c:25:63:7f:8f:d7:20:d0:87:
5f:a9:b6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:09:10 2026 by rpki-client