Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/BY4mDld_X8hCH3azNrIdkJUk3VU.roa
File: BY4mDld_X8hCH3azNrIdkJUk3VU.roa (raw, json)
Hash identifier: 5iaX0LN1ARLgnFxwOqzDQkkekYgRLU/QkxFUY+A4X4w=
Subject key identifier: 05:8E:26:0E:57:7F:5F:C8:42:1F:76:B3:36:B2:1D:90:95:24:DD:55
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 019F76A94CC7AF4BD3EE5365E29BF85F00B6
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/BY4mDld_X8hCH3azNrIdkJUk3VU.roa
Signing time: Sat 18 Jul 2026 19:17:14 +0000
ROA not before: Sat 18 Jul 2026 19:17:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197528
IP address blocks: 80.246.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:76:a9:4c:c7:af:4b:d3:ee:53:65:e2:9b:f8:5f:00:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jul 18 19:17:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=058e260e577f5fc8421f76b336b21d909524dd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:22:4a:98:51:35:8a:8e:a1:87:db:cc:77:
03:74:0b:d6:f3:46:7c:58:74:3d:5a:1d:e4:27:e9:
ee:4e:d3:76:b6:47:6c:95:9e:4f:40:98:0b:f1:dd:
c4:e4:c9:61:78:ae:37:c9:72:82:c0:1c:2b:40:5b:
78:ec:b3:dd:4c:64:22:9f:f3:39:b1:ba:9f:0a:a4:
57:3f:cb:08:95:32:99:70:a5:e0:16:31:45:a6:52:
61:dc:ff:50:80:03:4f:fb:87:ce:00:3f:6f:a4:65:
c9:aa:8c:f6:45:b6:10:74:73:c3:e5:1e:71:88:94:
b2:1b:ba:56:95:8b:e9:09:c8:1f:e8:b4:ec:e5:1c:
66:95:b6:4a:85:44:ed:08:04:71:c6:83:77:77:25:
80:01:83:47:d9:8f:77:57:49:d4:3a:a0:d0:03:1f:
03:8c:83:c5:a9:6e:81:1f:50:2e:4c:c2:a7:34:6a:
79:92:be:62:a9:28:6f:e5:af:d3:2b:d7:8f:71:56:
a1:41:44:8b:ca:4d:dc:65:28:94:47:91:73:7d:b1:
42:02:1f:3b:a8:35:34:55:bf:28:11:f4:11:d4:af:
9f:88:30:1e:73:ab:85:85:07:1c:02:e2:74:67:f6:
1b:52:58:56:f0:4c:1d:20:e0:99:d9:b8:34:28:d6:
ee:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8E:26:0E:57:7F:5F:C8:42:1F:76:B3:36:B2:1D:90:95:24:DD:55
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/BY4mDld_X8hCH3azNrIdkJUk3VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.226.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:d1:82:82:14:3c:3d:f6:b9:7f:8d:98:02:bd:8d:e5:4d:ee:
c5:bf:cd:59:68:99:f7:fc:b9:d2:5e:d9:d8:bb:9e:69:bd:c8:
25:b2:6c:5c:8a:7d:ce:10:0a:e0:0f:c3:5e:21:0e:93:85:59:
2d:1e:d8:28:af:8f:d9:7c:07:47:4e:cc:b1:83:14:e8:71:68:
48:86:54:f4:14:65:63:56:6c:20:42:06:1b:95:74:9b:20:6b:
86:54:a1:6f:e0:c0:91:46:26:6b:65:20:93:f7:c7:74:c9:71:
78:79:90:a7:db:83:33:27:38:ac:0c:25:14:d1:e3:fc:4e:85:
69:e5:98:2a:d1:33:2d:91:82:49:51:dd:c6:3d:fe:a0:be:ef:
bd:b1:b3:c3:fc:bd:5e:20:94:0f:5c:08:b1:b5:4c:02:2c:6a:
c0:d7:5c:0f:37:7d:13:1c:52:c8:dc:aa:5b:90:ae:15:46:ef:
99:e3:b3:1b:b1:e0:b1:ee:34:4d:72:76:ea:70:2e:93:97:0b:
e3:1a:57:ea:9b:7b:30:b8:49:07:a9:0e:66:29:59:87:95:4e:
8b:54:e1:f9:7c:55:1c:79:6e:ac:9e:ff:1d:45:25:15:77:2d:
b9:21:a5:76:9b:cd:c9:57:d1:73:0f:7b:2f:5d:d6:46:cd:ab:
cc:c9:9c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:17 2026 by rpki-client