Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/ryfib0lXewvNZFBchO55_-6Y1KE.roa
File: ryfib0lXewvNZFBchO55_-6Y1KE.roa (raw, json)
Hash identifier: qPruf8zclS3/1vXGUd6hnzB210l9PJQ4kPqTdEqN+KE=
Subject key identifier: AF:27:E2:6F:49:57:7B:0B:CD:64:50:5C:84:EE:79:FF:EE:98:D4:A1
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 01A0D7CF7D5DE90314E74A11296E5445632E
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/ryfib0lXewvNZFBchO55_-6Y1KE.roa
Signing time: Fri 25 Sep 2026 09:04:54 +0000
ROA not before: Fri 25 Sep 2026 09:04:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219284
IP address blocks: 132.243.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cf:7d:5d:e9:03:14:e7:4a:11:29:6e:54:45:63:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Sep 25 09:04:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af27e26f49577b0bcd64505c84ee79ffee98d4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9e:a7:3e:d8:bb:44:41:78:5c:ea:1e:8c:88:
e4:9e:3d:c2:01:68:68:48:2d:f7:97:7f:ac:1d:2e:
d6:15:8f:c0:fb:a4:4d:bc:d2:e6:33:5a:4b:20:56:
30:f1:70:22:8e:a7:b9:2e:41:f3:c6:b5:8f:d2:5f:
96:43:d1:13:fa:df:44:dc:b1:7a:41:20:41:50:22:
4a:d2:f0:ff:0f:d3:e7:5c:e1:df:a5:f4:b5:42:77:
43:a3:cb:36:4f:85:db:1f:b4:71:d0:59:ab:64:ce:
98:13:3f:ed:19:ba:ff:c5:10:fb:59:8b:7b:b2:82:
61:f5:d4:a1:9a:4c:eb:30:c1:e4:2b:ff:14:8d:6c:
03:45:83:93:d3:20:d5:67:29:ca:89:1a:46:cb:6c:
a7:43:fa:75:a0:5e:26:9e:ca:08:a4:3f:2e:f7:61:
6f:06:04:f8:3d:f4:fe:ad:fa:cf:81:34:ea:de:5c:
da:c7:38:8a:ac:ce:cf:81:b9:67:ec:d1:37:ea:3d:
5e:f2:82:10:19:fc:35:3f:c8:d3:3f:d8:36:01:17:
2d:65:1e:4d:7b:f9:1b:dd:fe:ba:f8:e4:2f:af:87:
1d:ca:28:ca:2c:c9:8f:74:68:4e:c9:58:b5:23:30:
2b:89:94:9d:70:1f:92:c9:17:b5:7b:25:3f:77:37:
7f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:27:E2:6F:49:57:7B:0B:CD:64:50:5C:84:EE:79:FF:EE:98:D4:A1
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/ryfib0lXewvNZFBchO55_-6Y1KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.245.0/24
Signature Algorithm: sha256WithRSAEncryption
68:86:ab:68:36:33:82:ac:9b:76:6e:fc:2b:f5:0c:e2:ac:dc:
2e:04:fd:c1:3b:06:dc:3b:2e:ac:d5:aa:50:d7:a6:ba:aa:ce:
10:53:69:50:b5:e7:ea:fd:53:e1:1a:c6:57:d8:53:9b:49:53:
4e:82:30:58:44:54:03:10:9c:53:ad:f9:b9:a9:ab:9f:86:7d:
96:07:4c:49:9e:f5:fc:f3:99:4b:85:d5:c8:77:11:23:71:45:
2e:25:1d:f9:79:e9:b0:5b:27:08:d4:81:de:2d:af:7f:e4:1f:
7f:1d:46:ea:6d:7a:41:60:fb:3f:0c:0f:19:55:80:c0:7a:aa:
c4:c0:b0:de:4d:41:81:f8:07:b0:e3:e2:9b:f1:10:81:88:92:
a9:40:1c:6c:85:5b:40:71:de:67:3d:41:1b:0e:3f:03:9e:43:
13:7c:c1:e4:93:71:b4:87:cd:10:e2:5b:67:a0:06:b3:a4:3c:
b2:be:58:84:b2:e2:40:4a:7b:fe:a0:6c:8e:12:eb:62:b5:31:
dc:e8:9b:b2:fc:d6:e5:34:cc:a3:55:a0:e4:98:60:d8:ef:6c:
eb:b9:09:f3:c6:e5:80:2e:dc:ac:9c:6f:61:31:8a:9a:26:62:
93:fc:c8:8f:1e:08:35:a6:20:36:83:c0:99:5c:3b:15:3d:47:
c5:4c:6d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:22:21 2026 by rpki-client