Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/PyBjXQZrLm_XoSes6Qp8-TYErJE.roa
File: PyBjXQZrLm_XoSes6Qp8-TYErJE.roa (raw, json)
Hash identifier: JNNn9PiNuypGKN/ipfjnvlB7BQDoZPs1ToLY5JVlOUM=
Subject key identifier: 3F:20:63:5D:06:6B:2E:6F:D7:A1:27:AC:E9:0A:7C:F9:36:04:AC:91
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 01A0D42C6628F4E91E4B2FACBE3E1AC2207B
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/PyBjXQZrLm_XoSes6Qp8-TYErJE.roa
Signing time: Thu 24 Sep 2026 16:07:54 +0000
ROA not before: Thu 24 Sep 2026 16:07:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218589
IP address blocks: 185.67.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:2c:66:28:f4:e9:1e:4b:2f:ac:be:3e:1a:c2:20:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Sep 24 16:07:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f20635d066b2e6fd7a127ace90a7cf93604ac91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:7c:8e:07:b1:bd:df:19:22:a7:06:e5:05:
b8:f3:e9:51:a0:b9:d6:e8:8e:08:c2:1a:c1:84:85:
06:4b:00:ec:aa:a6:9a:3d:7c:62:b2:0f:e6:48:50:
01:96:b8:cc:b7:1f:16:f9:39:bd:a6:72:fc:f8:09:
b1:16:a2:c6:5b:d6:4f:92:26:e9:ae:06:48:96:82:
95:62:96:03:b6:c0:ed:ba:8f:0b:7d:1f:d0:38:ee:
b4:77:39:e4:28:bc:d3:49:33:90:e1:f4:80:bb:e5:
54:e1:8d:ae:6d:c4:cf:3c:72:c4:bb:76:a0:b7:67:
26:dd:1b:11:a8:5f:0c:b0:f0:7e:f0:5c:11:15:c9:
17:b6:22:cb:62:c6:f3:0a:81:03:0d:ee:0b:13:48:
6b:72:45:ec:51:8c:e9:12:a3:02:5b:96:75:0c:53:
16:4f:0a:78:e6:44:cc:ff:d3:26:84:a3:2e:29:20:
a8:ce:82:aa:60:03:c0:4c:29:37:2a:de:63:89:8a:
f1:e7:2a:03:e2:ba:05:78:a0:f7:63:e3:ad:7e:ed:
cc:a7:fd:c9:58:24:70:bf:eb:2d:5b:fd:2e:0d:a5:
d2:69:12:2c:7b:30:ea:da:65:e7:47:86:6d:6d:87:
1a:4f:4a:6f:32:ec:af:4b:ef:e5:46:97:03:3a:57:
6f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:20:63:5D:06:6B:2E:6F:D7:A1:27:AC:E9:0A:7C:F9:36:04:AC:91
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/PyBjXQZrLm_XoSes6Qp8-TYErJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.23.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f2:ff:21:28:a1:a2:b7:53:b7:d6:f4:39:ee:6c:f9:53:ee:
49:cb:18:ee:81:67:95:9b:0c:fc:68:c2:44:b6:59:35:22:d8:
bb:bf:e9:d5:b3:16:6f:aa:41:b1:47:bc:a3:fa:2a:58:61:a1:
47:55:6a:6b:a8:a1:ba:ae:d4:1c:1f:51:b8:25:fc:90:ce:9e:
d2:5e:5c:36:57:2d:2a:2b:2b:26:65:fe:45:16:e3:7b:fc:69:
db:92:d6:f8:93:4b:72:d4:8b:4c:62:52:e8:49:02:75:97:7e:
47:6b:9b:87:29:f2:a0:0d:88:78:93:a7:cc:46:17:bd:2b:ff:
3d:2b:22:ca:17:b4:65:64:2e:38:8c:0a:b6:69:1d:2a:19:54:
ba:c4:4d:35:6f:ce:61:eb:86:aa:b4:74:0b:91:91:19:f6:e4:
45:f1:7b:93:14:28:08:78:6c:68:39:a6:d7:1f:78:03:03:63:
11:bf:4e:a7:41:05:45:bd:f8:75:db:ff:be:b9:e2:d2:84:a6:
16:5c:aa:4b:d3:e3:03:2f:e6:dd:b3:16:02:fa:e6:65:c2:2d:
b6:99:e6:de:54:ec:92:12:3b:b0:f1:27:11:15:96:7c:18:91:
ed:e1:9d:85:74:f0:c0:1f:3c:f9:8b:54:69:19:0d:08:d1:63:
f7:b0:fb:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDULGYo9OkeSy+svj4awiB7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NGRjZmE5NjM5OTcxNjY5MmQyNDVhODA0ODg3YzA5ZGE0
NTFmOGYwHhcNMjYwOTI0MTYwNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjIwNjM1ZDA2NmIyZTZmZDdhMTI3YWNlOTBhN2NmOTM2MDRhYzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs858jgexvd8ZIqcG5QW48+lRoLnW
6I4IwhrBhIUGSwDsqqaaPXxisg/mSFABlrjMtx8W+Tm9pnL8+AmxFqLGW9ZPkibp
rgZIloKVYpYDtsDtuo8LfR/QOO60dznkKLzTSTOQ4fSAu+VU4Y2ubcTPPHLEu3ag
t2cm3RsRqF8MsPB+8FwRFckXtiLLYsbzCoEDDe4LE0hrckXsUYzpEqMCW5Z1DFMW
Twp45kTM/9MmhKMuKSCozoKqYAPATCk3Kt5jiYrx5yoD4roFeKD3Y+Otfu3Mp/3J
WCRwv+stW/0uDaXSaRIsezDq2mXnR4ZtbYcaT0pvMuyvS+/lRpcDOldvcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD8gY10Gay5v16EnrOkKfPk2BKyRMB8GA1UdIwQY
MBaAFEZNz6ljmXFmktJFqASIfAnaRR+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82YmU1YTYtZWIwZS00NGI0LWI2YTct
YWYxZjM2ODExMDk4LzEvUHlCalhRWnJMbV9Yb1NlczZRcDgtVFlFckpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82YmU1YTYtZWIwZS00NGI0LWI2YTctYWYxZjM2ODExMDk4
LzEvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUMXMA0G
CSqGSIb3DQEBCwUAA4IBAQB38v8hKKGit1O31vQ57mz5U+5JyxjugWeVmwz8aMJE
tlk1Iti7v+nVsxZvqkGxR7yj+ipYYaFHVWprqKG6rtQcH1G4JfyQzp7SXlw2Vy0q
KysmZf5FFuN7/Gnbktb4k0ty1ItMYlLoSQJ1l35Ha5uHKfKgDYh4k6fMRhe9K/89
KyLKF7RlZC44jAq2aR0qGVS6xE01b85h64aqtHQLkZEZ9uRF8XuTFCgIeGxoOabX
H3gDA2MRv06nQQVFvfh12/++ueLShKYWXKpL0+MDL+bdsxYC+uZlwi22mebeVOyS
Ejuw8ScRFZZ8GJHt4Z2FdPDAHzz5i1RpGQ0I0WP3sPuY
-----END CERTIFICATE-----
Generated at Wed Sep 30 20:59:15 2026 by rpki-client