Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/pyyCcwg28T8OCxDC7t4WlQvR1fE.roa
File: pyyCcwg28T8OCxDC7t4WlQvR1fE.roa (raw, json)
Hash identifier: vqMvGtxlsS/96gXfo87qGJea1tSQsd6SzOhgyD1guM0=
Subject key identifier: A7:2C:82:73:08:36:F1:3F:0E:0B:10:C2:EE:DE:16:95:0B:D1:D5:F1
Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial: 019F6B163A7527C84E854F18E5CDABCEB2AE
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/pyyCcwg28T8OCxDC7t4WlQvR1fE.roa
Signing time: Thu 16 Jul 2026 13:20:46 +0000
ROA not before: Thu 16 Jul 2026 13:20:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203759
IP address blocks: 45.142.7.0/24 maxlen: 32
185.86.188.0/22 maxlen: 32
185.124.192.0/22 maxlen: 32
193.19.128.0/22 maxlen: 32
193.148.160.0/19 maxlen: 32
2a05:b540::/29 maxlen: 48
2a06:b500::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:16:3a:75:27:c8:4e:85:4f:18:e5:cd:ab:ce:b2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Validity
Not Before: Jul 16 13:20:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a72c82730836f13f0e0b10c2eede16950bd1d5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:b6:46:48:7b:67:dc:d9:12:05:52:b5:1e:
47:b6:54:ae:52:c7:94:be:38:ce:b8:d0:a2:f7:01:
b5:62:67:97:0d:4a:30:06:77:06:7b:6a:07:81:66:
5a:34:44:f1:72:a5:a8:e3:53:61:56:7b:51:16:ef:
a3:35:e0:82:06:4c:b0:4b:52:70:23:4f:d2:cf:51:
27:d9:bc:41:06:fe:23:6f:b0:54:8e:a3:85:15:ae:
db:ee:69:c5:d8:4b:a2:d2:a9:bf:e4:59:5f:07:48:
41:09:20:98:f4:9e:b9:7f:1a:d3:82:9c:0a:20:40:
3b:05:48:2b:ea:00:95:91:44:66:16:28:7e:0f:22:
6a:98:9b:0d:c6:76:ed:df:19:3d:72:99:15:6e:4f:
43:7e:2f:0d:74:de:80:8e:78:97:81:bf:a2:2b:d3:
dd:f8:cf:c9:32:75:aa:33:cd:18:e2:2d:70:23:4b:
bf:44:c2:27:2c:ab:13:2d:a2:c8:51:83:96:5d:d6:
17:1c:4e:f5:16:a2:a8:42:7f:99:75:c8:b0:ad:02:
6c:9e:34:24:ae:2e:e7:82:be:e5:21:e5:0d:0f:f6:
25:52:b7:f1:cf:ac:45:0e:33:48:52:39:81:a0:56:
b1:a5:96:0f:c5:89:4d:cb:21:52:5c:6a:53:03:ff:
cb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2C:82:73:08:36:F1:3F:0E:0B:10:C2:EE:DE:16:95:0B:D1:D5:F1
X509v3 Authority Key Identifier:
keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/pyyCcwg28T8OCxDC7t4WlQvR1fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.7.0/24
185.86.188.0/22
185.124.192.0/22
193.19.128.0/22
193.148.160.0/19
IPv6:
2a05:b540::/29
2a06:b500::/29
Signature Algorithm: sha256WithRSAEncryption
4d:1c:a8:79:80:ff:a3:ec:e4:65:75:7c:f2:9a:d2:ff:58:d8:
a6:d5:df:b0:9b:38:37:6f:6b:fa:00:16:f5:99:cf:e7:7c:81:
9a:ef:29:7f:ba:79:b8:53:7a:cf:5f:e1:3a:c3:1c:4c:4c:89:
87:ef:ed:f1:cd:a6:45:66:e5:58:35:d0:f6:bd:a6:15:a0:73:
60:30:7a:95:96:5b:94:4c:cf:0b:a0:a7:06:59:5d:73:07:5a:
a3:e1:10:fa:96:9f:d0:2c:bd:dc:52:32:8b:90:cd:61:e0:bf:
4a:06:f6:d1:54:6d:cd:00:f7:9c:02:68:fa:c8:89:49:cc:07:
4e:96:52:6c:e4:5f:35:63:96:6a:5f:a3:18:64:14:2b:0c:0b:
f7:56:d3:78:04:b1:d8:b4:d1:a1:c8:5f:10:d3:ee:9c:ef:bc:
7b:a5:47:da:29:5d:dc:ad:d1:30:10:0e:91:ea:b4:d4:f9:90:
bf:59:e2:d6:86:d6:c8:15:7b:d8:38:99:c6:8c:e0:21:d2:e0:
28:f3:65:97:49:40:31:1e:db:7d:23:7c:f4:78:5c:67:7d:b3:
ae:9c:0d:5a:07:f4:14:0e:9f:d9:a5:bd:10:1b:6f:50:99:02:
07:3e:f7:ae:21:a5:6b:bc:00:f7:c3:9d:b0:2d:31:be:99:33:
63:f7:d1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:38:44 2026 by rpki-client