Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/M-prBeByyaHD_pyfkqQluD7nE9w.roa
File: M-prBeByyaHD_pyfkqQluD7nE9w.roa (raw, json)
Hash identifier: OEBmzKkJ3PW2gsD3TzG7kZ2G8vxELxKRmuHcmbggp8g=
Subject key identifier: 33:EA:6B:05:E0:72:C9:A1:C3:FE:9C:9F:92:A4:25:B8:3E:E7:13:DC
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 019D6C84911C8B0B8326A0A3F0B64FEB774F
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/M-prBeByyaHD_pyfkqQluD7nE9w.roa
Signing time: Wed 08 Apr 2026 09:55:20 +0000
ROA not before: Wed 08 Apr 2026 09:55:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49592
IP address blocks: 83.143.119.0/24 maxlen: 24
188.137.158.0/24 maxlen: 24
2a07:cec0:4402::/48 maxlen: 48
2a07:cec0:4403::/48 maxlen: 48
2a07:cec0:4404::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6c:84:91:1c:8b:0b:83:26:a0:a3:f0:b6:4f:eb:77:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: Apr 8 09:55:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33ea6b05e072c9a1c3fe9c9f92a425b83ee713dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e0:8e:b8:f4:f2:d1:72:b6:c2:bc:10:74:bf:
f6:f4:bd:8f:03:5c:31:9b:d8:54:1e:23:d4:68:67:
dc:39:b8:05:02:62:8f:d1:97:b5:0d:6f:ed:17:49:
c5:10:f4:dd:2c:11:50:a2:2c:6a:36:da:8e:cb:87:
9d:c3:0b:f7:a6:ce:61:d4:e3:f7:45:42:d6:f9:a1:
ae:98:7c:2e:41:73:23:2a:b3:3c:13:3d:90:38:9f:
1a:2f:ce:7d:3a:f5:3c:38:06:c6:f0:28:05:96:f5:
f0:a2:c9:55:be:5f:46:20:79:5a:21:78:39:42:2b:
a8:26:d9:1a:ed:4b:11:7f:04:8d:c8:20:d2:dc:f1:
02:da:28:58:59:c8:9c:c4:0c:05:67:02:a9:9c:15:
69:9b:64:13:c9:44:ea:2f:ff:26:fe:30:20:9e:8a:
38:25:b0:18:d0:07:13:12:58:cb:c3:c5:77:b7:04:
1c:b4:63:2a:f4:16:91:dd:bd:09:70:1a:47:86:2a:
d8:01:ab:ed:49:ec:68:a5:bd:84:bd:e4:d3:4c:48:
90:98:33:e4:dc:f1:1b:35:9a:6e:8e:b3:48:36:69:
3b:f7:f7:60:9d:97:cd:09:b4:e1:13:ec:2f:5e:f2:
28:30:f5:bd:24:70:a3:c6:ee:28:40:7a:8e:40:96:
14:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EA:6B:05:E0:72:C9:A1:C3:FE:9C:9F:92:A4:25:B8:3E:E7:13:DC
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/M-prBeByyaHD_pyfkqQluD7nE9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.119.0/24
188.137.158.0/24
IPv6:
2a07:cec0:4402::-2a07:cec0:4404:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1e:4c:2f:55:e4:54:f3:a6:4f:a3:c2:95:9f:01:a0:1c:bf:65:
aa:75:d5:dc:20:15:f3:f7:2e:56:7e:9d:e9:c3:13:6f:d4:89:
1a:3f:80:46:c6:54:68:1e:36:94:c8:58:cd:1e:dd:f2:3b:b0:
d4:f1:80:6b:17:0e:65:7e:31:20:68:c3:08:d6:12:72:04:d1:
92:69:45:ff:71:7c:8f:01:e9:36:4a:8c:a4:ac:90:d8:cf:cd:
5c:25:7a:61:55:c6:d6:25:0c:02:cf:6c:75:8b:8b:a7:d5:a4:
fd:f5:be:d7:59:27:ea:c2:83:74:ea:8e:b8:56:a4:07:18:1b:
01:f6:1f:95:6a:8d:f2:51:ca:42:71:46:a5:c2:2c:29:a1:b1:
f6:cf:f6:50:ec:f4:83:9d:71:01:8f:c7:65:13:ba:df:e1:57:
86:ed:d1:08:89:c7:2e:13:d0:9a:84:ce:b6:7f:80:0d:f8:2f:
5d:2a:64:3d:2c:d1:ee:f0:f7:02:5c:e2:a6:b6:7f:1e:02:77:
a6:85:0d:9a:85:22:ea:d9:56:c8:09:e9:dd:93:f6:0a:15:ce:
39:16:f5:be:55:c5:32:a8:8c:41:18:2f:8d:13:fe:bb:06:66:
7a:4b:be:b7:40:ca:ba:68:d0:53:bc:14:16:9b:a8:8b:27:a3:
1a:24:5b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:50 2026 by rpki-client