Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/BYYY0AEwc_aXGx-V7jYz6uSeRNk.roa
File: BYYY0AEwc_aXGx-V7jYz6uSeRNk.roa (raw, json)
Hash identifier: ye7rNcZkePulMqIfaLanWAuVu3/fvxHC0iahv/skFzQ=
Subject key identifier: 05:86:18:D0:01:30:73:F6:97:1B:1F:95:EE:36:33:EA:E4:9E:44:D9
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01A15AF565E17AD1EA4FD32C6277E327BE0B
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/BYYY0AEwc_aXGx-V7jYz6uSeRNk.roa
Signing time: Tue 20 Oct 2026 20:16:34 +0000
ROA not before: Tue 20 Oct 2026 20:16:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208763
IP address blocks: 153.76.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:f5:65:e1:7a:d1:ea:4f:d3:2c:62:77:e3:27:be:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 20 20:16:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=058618d0013073f6971b1f95ee3633eae49e44d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:25:bb:9c:b4:07:ec:0a:d8:72:4f:1c:85:b2:
8d:c7:f2:1e:1c:5a:ea:98:c9:cc:ff:9c:3c:0a:cd:
6b:d6:69:5c:73:20:c8:db:17:a6:2a:ee:dd:ee:da:
54:bd:b5:b3:c9:4d:83:f5:84:cf:3b:17:24:8c:d9:
d1:46:23:3a:ab:39:2b:65:77:35:90:f8:2a:e0:7e:
e7:78:90:32:c7:bc:2c:b7:89:d8:8d:23:54:de:a1:
22:df:66:3d:34:58:5e:6b:d1:9f:b9:8b:2e:2e:68:
91:c0:24:0b:a5:69:77:10:2c:1a:da:9d:ce:bf:e3:
62:bb:64:8b:ef:a6:2d:e1:97:51:66:e5:0e:77:33:
92:dc:d6:95:c2:56:b4:dc:26:e4:4c:69:2c:50:c0:
14:ed:4c:61:47:74:bd:86:27:85:15:84:5b:69:82:
2c:d1:54:93:a1:26:63:92:2e:a2:21:7c:f2:a6:64:
d7:6c:56:5e:44:52:b5:a2:a4:a3:af:e9:41:c3:ea:
5a:b3:71:0f:32:d9:94:e7:f2:14:9a:82:b8:70:bf:
62:9c:05:23:cd:26:c8:d1:2d:e4:e0:11:00:fb:94:
1f:a1:5b:f9:b9:f3:42:66:12:b5:e9:a1:79:54:12:
40:aa:4d:ca:0b:44:de:ee:98:0f:bc:ee:1c:51:1b:
dd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:86:18:D0:01:30:73:F6:97:1B:1F:95:EE:36:33:EA:E4:9E:44:D9
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/BYYY0AEwc_aXGx-V7jYz6uSeRNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.9.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ad:e1:bb:57:bc:07:65:fd:b8:bf:a7:76:34:2b:f2:b0:1f:
5d:ac:3d:cc:f0:f1:92:26:28:25:8f:f7:d9:69:50:c8:a2:5f:
68:14:9a:d3:58:51:ab:97:cd:1f:17:3d:01:a2:fd:04:26:38:
c5:a1:98:c7:f7:52:c4:93:b8:35:d4:79:88:20:d4:0b:9d:1e:
ba:00:9e:76:a2:df:ce:1d:4f:5a:10:df:ef:00:4d:14:4f:4a:
f0:e6:dd:19:ed:61:d6:9c:fe:7e:95:59:eb:eb:f5:9a:e3:53:
36:ca:9a:f2:cd:10:e1:8d:82:0c:8f:26:5e:35:ac:47:de:fc:
37:0e:f6:32:d1:05:54:9c:f4:f4:f0:5d:45:a0:62:5d:e8:3e:
77:7a:cf:95:de:f2:01:0d:17:3a:01:6d:b0:27:3f:6e:d2:cd:
b1:f2:15:4b:56:1f:aa:84:d8:02:83:fb:d1:3a:49:e9:76:cf:
6d:a1:5b:bf:6e:fb:73:c5:dd:53:9d:8b:e0:72:60:f2:90:7b:
7b:55:af:56:73:70:73:68:d8:6c:f7:9a:c6:64:ae:e1:f9:9d:
09:a2:84:db:61:66:d7:3f:65:6e:24:5c:3d:66:b1:d6:71:3e:
81:de:32:67:b7:f9:e3:6d:13:92:47:ba:39:2c:e3:6a:88:ea:
82:60:ca:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:51:52 2026 by rpki-client