Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/BYfDobbNo_m_w4crOMgDM9Ap1xU.roa
File: BYfDobbNo_m_w4crOMgDM9Ap1xU.roa (raw, json)
Hash identifier: dR/BNJMAt8zObcpN49bBOHDWT2wNzIa3cO7OLcillkk=
Subject key identifier: 05:87:C3:A1:B6:CD:A3:F9:BF:C3:87:2B:38:C8:03:33:D0:29:D7:15
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 01A00AD519B3ED15E0F73C434D8358352351
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/BYfDobbNo_m_w4crOMgDM9Ap1xU.roa
Signing time: Sun 16 Aug 2026 13:48:52 +0000
ROA not before: Sun 16 Aug 2026 13:48:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 193.176.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0a:d5:19:b3:ed:15:e0:f7:3c:43:4d:83:58:35:23:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Aug 16 13:48:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0587c3a1b6cda3f9bfc3872b38c80333d029d715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:64:87:d3:8c:ba:91:12:82:de:4e:a0:79:
08:57:12:b6:14:09:f3:59:77:22:55:f6:bc:56:6a:
4e:21:23:19:57:4a:b5:77:bf:ed:fb:15:f1:14:ab:
27:38:fa:45:9e:7c:62:18:93:1f:af:ef:05:ea:e2:
e6:0a:0c:1e:81:49:11:42:d4:e2:73:11:06:0c:a7:
67:c8:25:d0:e5:6d:f8:8f:72:4e:e9:10:80:99:c3:
0d:8b:cd:5d:d3:0a:e9:82:60:8c:b0:f7:bc:0b:1f:
35:fc:36:9d:31:f1:92:4b:8a:54:6f:dd:26:a7:fc:
17:09:a8:56:8e:51:ea:90:68:7b:80:bd:a7:d7:f6:
e6:7b:88:8b:26:01:7b:ce:a7:21:e5:9c:58:c1:4e:
cc:bf:89:63:04:b6:6e:00:dd:6d:9b:93:c4:1c:c3:
41:3e:b6:94:52:1a:b6:81:a8:40:45:e1:99:7c:71:
a4:71:db:5c:16:6d:10:2b:c3:15:44:ad:11:91:ed:
af:d2:7f:d1:4c:a6:6a:4e:1f:95:18:5a:2d:59:39:
72:c0:fa:56:59:4a:3b:e0:a9:ae:57:48:f0:8a:2e:
f4:b2:3e:ff:c8:77:65:26:78:3f:2e:53:12:2f:51:
36:6f:23:9b:af:cc:d8:d4:26:53:c4:3c:0f:00:19:
48:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:87:C3:A1:B6:CD:A3:F9:BF:C3:87:2B:38:C8:03:33:D0:29:D7:15
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/BYfDobbNo_m_w4crOMgDM9Ap1xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.179.0/24
Signature Algorithm: sha256WithRSAEncryption
99:76:2c:91:c4:e9:52:07:88:65:b5:99:a9:9d:00:2f:d9:f7:
26:91:26:d5:dc:2f:52:72:14:a3:05:01:6b:b6:3e:e0:b0:a4:
c8:4e:a3:04:41:f2:e9:6f:e5:b9:8c:23:c4:a2:c6:26:d4:09:
f2:97:22:57:00:22:96:3b:82:21:80:cc:ad:ed:6a:bb:b7:ca:
01:c4:fe:fd:6c:25:13:ce:c1:64:0e:70:0d:b9:c6:80:46:17:
64:4a:3d:14:94:6f:02:c8:62:47:3e:5d:16:20:97:b7:88:66:
04:c5:ae:4d:ed:5d:d8:f7:f6:34:f7:a9:ac:fc:07:d5:fa:fe:
7f:4f:95:e2:6b:27:da:5d:fc:20:c5:7d:c2:11:a4:e1:07:89:
5a:0b:b9:49:02:a2:17:b1:7f:d0:bd:0a:4f:18:e3:0c:77:86:
29:f9:bf:a1:45:db:56:61:95:d4:ed:fb:80:93:79:3b:76:f7:
ee:55:1c:67:42:10:c0:2e:6a:c8:05:01:84:b7:f9:f8:1d:20:
00:d3:60:49:f8:1a:18:20:f9:f5:d5:b7:c4:cc:b6:63:ad:7d:
cb:5d:29:28:8d:93:49:0b:80:4b:e5:e1:ac:1a:49:a9:4e:e4:
f5:c1:47:e4:03:51:58:03:40:b5:cc:42:7a:22:23:b6:11:88:
e7:dd:84:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:07 2026 by rpki-client