Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/ByyvUnnUhIRaWy-So4VKoFmfTbo.roa
File: ByyvUnnUhIRaWy-So4VKoFmfTbo.roa (raw, json)
Hash identifier: ETlRbD1X+/k/tXOtdkZgNMAiDhMTVlA49n6GZWbkXaI=
Subject key identifier: 07:2C:AF:52:79:D4:84:84:5A:5B:2F:92:A3:85:4A:A0:59:9F:4D:BA
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A1891CD458EC293F8F3F021345E7F812DF
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/ByyvUnnUhIRaWy-So4VKoFmfTbo.roa
Signing time: Thu 29 Oct 2026 19:22:10 +0000
ROA not before: Thu 29 Oct 2026 19:22:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402671
IP address blocks: 147.136.88.0/24 maxlen: 24
168.199.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:1c:d4:58:ec:29:3f:8f:3f:02:13:45:e7:f8:12:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Oct 29 19:22:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=072caf5279d484845a5b2f92a3854aa0599f4dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:6c:27:da:41:33:07:fb:1b:0b:ad:13:84:
f0:59:a0:a9:5b:c8:1e:f0:bd:c3:46:9e:73:9e:19:
3b:49:0e:a8:69:3d:6a:c5:72:1e:ec:2c:2f:9c:f1:
25:f5:ca:5a:55:af:e4:5f:22:52:70:bf:53:06:a3:
73:1b:d9:01:11:7b:27:86:26:45:f9:29:53:b1:97:
ba:18:b3:9e:35:f1:b3:e5:9f:d3:c9:ba:ea:05:c7:
65:52:60:66:c8:fa:44:98:cb:4c:42:ba:9c:7a:da:
c5:3d:19:eb:11:9a:a3:c5:31:32:5a:07:58:d1:34:
39:71:3c:48:a3:20:24:5d:e0:8e:ee:84:80:d6:ed:
c8:0a:ec:13:b7:8a:05:0e:f3:71:2e:74:35:66:7c:
8b:73:12:ae:c0:b0:77:5b:aa:f6:5e:6b:ad:62:39:
eb:ca:d6:b3:6e:c9:b7:4d:5c:cb:a1:4c:bc:d5:2f:
45:91:da:30:08:9d:cb:2a:51:d4:74:b0:e3:2f:df:
dc:24:8f:ba:b3:53:71:a6:ad:39:ec:ec:a8:c4:7f:
1e:2d:a0:92:08:5a:bc:e7:03:6e:4f:19:00:d5:df:
b8:ff:f1:10:f6:27:91:fe:d4:fb:63:9b:20:d7:84:
41:f0:06:64:ea:78:12:a3:05:3d:eb:ad:54:00:56:
4d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2C:AF:52:79:D4:84:84:5A:5B:2F:92:A3:85:4A:A0:59:9F:4D:BA
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/ByyvUnnUhIRaWy-So4VKoFmfTbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.136.88.0/24
168.199.153.0/24
Signature Algorithm: sha256WithRSAEncryption
19:cf:55:2b:d4:55:1b:cc:57:d9:40:df:2d:df:69:94:3d:95:
7b:44:02:ac:4f:aa:f4:60:00:db:a8:93:71:41:0a:1c:45:98:
d5:85:1c:62:dd:99:64:19:8f:c2:9a:72:40:3b:76:c0:d0:0a:
0d:f2:b8:e2:62:eb:bb:f5:34:27:69:ac:93:22:cc:00:2e:cd:
40:cd:a2:6e:6d:fc:6a:e2:6c:9a:55:31:fc:5e:4c:33:42:2b:
3f:3e:d5:2b:6a:d2:41:75:1a:62:67:e6:cc:a2:64:a4:bd:9a:
1c:e4:9e:0b:80:42:12:95:a4:cc:1f:a5:6a:5f:88:a5:45:c4:
9c:b7:8a:2e:cf:ab:f0:a9:eb:ec:19:44:cf:10:d2:c6:73:3c:
60:96:c4:02:c1:8f:7c:ca:eb:7e:9e:d4:eb:a1:3f:fc:59:4e:
8e:19:82:0f:ad:01:cb:54:b2:58:e1:21:52:dc:34:74:b8:ec:
5e:66:d1:95:c8:13:78:2e:86:e6:04:e9:fe:47:cf:aa:4e:07:
9a:3f:f1:0e:6d:42:1c:22:3c:04:c6:81:2e:fb:d8:d1:2f:ac:
c6:6d:7c:a7:82:fe:20:b6:2a:12:0d:ee:67:ac:c0:07:85:e4:
67:fd:ec:46:3a:c8:c3:4a:cb:0d:dd:35:87:6f:b6:d6:f4:da:
67:08:0f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:37:34 2026 by rpki-client