Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_byycH8ifd6zxiTKn91qF7qxuak.roa
File: _byycH8ifd6zxiTKn91qF7qxuak.roa (raw, json)
Hash identifier: 5IvoQxl+59Wd7o9txxFoAEUWad22DYrhCmuPXgKXsmk=
Subject key identifier: FD:BC:B2:70:7F:22:7D:DE:B3:C6:24:CA:9F:DD:6A:17:BA:B1:B9:A9
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A0661D3556833B6AE7F851410E1B69E25F
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_byycH8ifd6zxiTKn91qF7qxuak.roa
Signing time: Thu 03 Sep 2026 07:13:05 +0000
ROA not before: Thu 03 Sep 2026 07:13:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22427
IP address blocks: 89.31.235.0/24 maxlen: 24
89.213.192.0/24 maxlen: 24
213.130.154.0/24 maxlen: 24
213.218.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 09:21:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:1d:35:56:83:3b:6a:e7:f8:51:41:0e:1b:69:e2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 3 07:13:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fdbcb2707f227ddeb3c624ca9fdd6a17bab1b9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:ad:6b:66:17:e1:6b:42:1c:07:5f:27:89:
8c:13:ec:be:46:e1:d0:4e:f8:85:bc:d2:ad:c8:31:
32:f4:d5:24:13:94:63:37:3c:78:76:e5:3f:8a:ab:
f5:8a:91:b4:8c:7e:4c:b1:b8:ab:9b:66:aa:91:bf:
0f:e4:bc:99:1a:1a:09:25:18:0b:84:13:00:42:a7:
3c:c0:82:c2:13:04:0c:7a:2c:30:08:fd:f9:35:18:
7a:80:dc:3c:76:ea:00:a9:3e:89:ba:f7:07:c2:70:
40:cf:a9:2e:d1:b4:02:0c:83:5a:08:62:86:55:10:
87:2b:36:da:45:15:04:a9:55:35:a2:3e:97:0f:fb:
5a:cc:d5:a7:76:d5:16:55:58:19:64:05:b5:9f:05:
a7:1c:a6:7c:f0:a1:28:38:4a:a9:26:d9:12:ad:59:
a8:7f:0e:8f:64:89:46:b1:39:a9:e8:83:84:65:d3:
b9:76:1b:cf:65:e2:14:04:b2:2d:b4:07:d9:39:0a:
89:ee:96:99:e4:5a:6f:8f:a1:a9:5b:ea:3c:01:b5:
d1:c2:ac:76:c8:be:b8:cc:5f:c2:19:05:f6:1e:39:
36:28:a4:d7:ba:e5:44:eb:5d:a9:ed:83:9b:24:64:
53:21:27:6a:c4:73:04:00:79:63:87:b2:e3:f5:bf:
70:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BC:B2:70:7F:22:7D:DE:B3:C6:24:CA:9F:DD:6A:17:BA:B1:B9:A9
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_byycH8ifd6zxiTKn91qF7qxuak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.235.0/24
89.213.192.0/24
213.130.154.0/24
213.218.226.0/24
Signature Algorithm: sha256WithRSAEncryption
55:5c:b0:de:66:f7:1c:7c:b6:2e:db:aa:eb:6d:c4:dc:6f:ce:
b3:7a:21:20:dd:a8:ad:da:07:c1:7c:7d:72:37:90:05:a9:88:
09:24:f0:cf:3b:4c:78:03:a0:0e:5c:88:47:6c:20:6a:d2:3b:
19:83:62:cb:0e:b5:98:a4:1b:02:71:f6:72:4f:b5:21:77:a1:
b4:d8:37:78:e1:ae:1d:ab:64:b2:c6:bc:14:44:5f:d9:39:c4:
da:eb:5b:1e:06:13:8e:a7:35:cd:c3:e3:dc:f4:8a:be:9c:83:
45:84:75:b4:c8:4d:91:4c:f7:b3:d1:07:a9:6a:52:5f:24:38:
8c:c1:96:c8:2c:fe:40:73:06:4d:e8:43:93:28:19:4f:d0:da:
89:ee:fe:20:29:df:31:cd:68:cd:27:c9:02:98:fc:81:de:95:
06:1b:6b:82:1c:39:ee:da:a0:65:3f:65:d3:50:50:b6:e8:de:
2e:cf:27:c5:e9:76:53:fa:57:17:6d:21:fc:97:89:87:05:46:
15:ce:40:08:c8:a8:ae:87:46:9d:89:50:dd:e4:1d:7e:46:b4:
6c:5c:97:ea:55:83:40:02:78:3d:06:95:82:4c:dd:44:76:f4:
6d:71:cd:ea:12:cf:d1:31:0d:0b:d8:ce:ab:05:5f:91:10:1e:
1d:63:b7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:51:06 2026 by rpki-client