Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/bBYL7KQEDz7I_rLr_vDuaXti8hI.roa
File: bBYL7KQEDz7I_rLr_vDuaXti8hI.roa (raw, json)
Hash identifier: /dni5j5ZVVpaXhNq2Bwi5ZZOnC1Ci4dao9Sc20SRsmE=
Subject key identifier: 6C:16:0B:EC:A4:04:0F:3E:C8:FE:B2:EB:FE:F0:EE:69:7B:62:F2:12
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 01A0E862F56AE2B13E440F214D027544A4C7
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/bBYL7KQEDz7I_rLr_vDuaXti8hI.roa
Signing time: Mon 28 Sep 2026 14:19:54 +0000
ROA not before: Mon 28 Sep 2026 14:19:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39402
IP address blocks: 185.217.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:62:f5:6a:e2:b1:3e:44:0f:21:4d:02:75:44:a4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Sep 28 14:19:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c160beca4040f3ec8feb2ebfef0ee697b62f212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:72:29:45:3c:4e:4e:d8:c2:1c:a0:09:89:83:
58:86:0f:ff:d7:5a:d0:40:35:ef:f0:0f:12:64:1c:
1a:d1:36:71:ff:ad:bb:9c:74:5b:85:6c:4e:b0:8b:
a6:eb:f2:53:01:d6:ed:49:f4:78:51:fb:a9:9f:6f:
74:b3:70:06:98:2a:c0:8d:29:88:90:65:3a:e1:b1:
8a:ca:b3:fb:b8:fd:62:83:b7:77:a3:dc:e5:1f:f4:
68:ef:eb:7a:10:b7:5c:12:92:6f:d4:59:f1:79:f3:
d3:73:de:f5:d1:99:79:9b:05:42:9e:09:0e:c1:87:
9f:ff:43:9a:60:27:06:0f:3f:50:88:53:6e:6b:a9:
aa:74:a2:5b:44:73:a8:92:97:75:7b:d3:8a:34:2c:
d8:d8:76:8f:87:37:c6:6b:f4:6f:57:b2:d5:10:5c:
e4:84:8a:d5:48:27:34:40:e5:c5:61:3d:da:aa:7f:
e0:e4:6d:cc:0f:3c:bf:28:19:6d:7a:29:ed:fe:d7:
65:c2:e3:52:38:1a:23:c9:2b:ab:51:44:84:ff:01:
c0:bb:e5:1f:ed:d6:8c:ef:b9:eb:d1:dc:c7:19:a5:
73:cf:3c:c7:61:7e:8d:d4:9a:0f:f5:d6:56:30:7d:
c3:e4:56:ce:09:94:0b:01:74:ce:b2:a6:77:13:58:
31:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:16:0B:EC:A4:04:0F:3E:C8:FE:B2:EB:FE:F0:EE:69:7B:62:F2:12
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/bBYL7KQEDz7I_rLr_vDuaXti8hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.187.0/24
Signature Algorithm: sha256WithRSAEncryption
40:50:12:c5:c9:3c:51:7b:a9:4f:88:c4:74:fc:e8:40:be:52:
a9:51:b9:ca:10:1c:ff:ee:4c:e7:da:e4:b5:d7:7b:29:d8:13:
11:3d:0d:b3:8f:a5:d9:c1:20:34:7c:99:d4:1e:01:37:83:cc:
b0:1b:3c:83:66:ba:91:be:e3:5f:71:b5:f7:92:7d:f6:db:b2:
e9:67:24:58:a7:93:bd:58:68:80:aa:aa:bc:04:d0:72:f2:54:
7f:15:55:f2:ad:6c:0d:d0:46:99:29:87:0c:39:4e:22:9d:0c:
5e:56:53:46:f2:2b:1f:d7:0b:35:30:02:be:53:71:85:f5:6f:
40:b5:98:16:91:f2:0a:2a:7f:61:96:65:e1:64:56:45:2a:df:
8f:84:19:87:9a:88:77:f1:c4:63:a2:29:ad:2b:0a:3d:1a:ec:
7d:79:80:c0:cd:8d:91:0f:68:03:43:c4:de:7b:18:cb:9f:99:
a8:6a:b1:07:91:23:cb:b6:ab:5f:f6:21:2d:f4:ef:4d:29:8d:
e4:1d:07:f4:49:63:96:24:83:bf:91:b2:0b:f0:29:36:0f:22:
32:3a:93:be:fa:3f:37:36:82:3c:d0:25:4f:bb:32:7f:05:40:
a0:77:6b:83:06:2f:2f:a8:77:59:6a:b3:3d:4d:a1:3a:e4:0c:
8e:6d:84:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:37:30 2026 by rpki-client