Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/ByerbL1cP92btLeefAdWjxplA_M.roa
File: ByerbL1cP92btLeefAdWjxplA_M.roa (raw, json)
Hash identifier: 3qNra9qr45ihN8IX80AtcCk2qIs3ym8XI4zn77mcJi8=
Subject key identifier: 07:27:AB:6C:BD:5C:3F:DD:9B:B4:B7:9E:7C:07:56:8F:1A:65:03:F3
Certificate issuer: /CN=f480d79fa848bc30e7bcb53ef5ff2d04adbb4f26
Certificate serial: 019D9ABDC24A74475ECF1750A883E9EFE44A
Authority key identifier: F4:80:D7:9F:A8:48:BC:30:E7:BC:B5:3E:F5:FF:2D:04:AD:BB:4F:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/ByerbL1cP92btLeefAdWjxplA_M.roa
Signing time: Fri 17 Apr 2026 09:20:20 +0000
ROA not before: Fri 17 Apr 2026 09:20:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31736
IP address blocks: 185.82.60.0/22 maxlen: 22
2a09:c2c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:bd:c2:4a:74:47:5e:cf:17:50:a8:83:e9:ef:e4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f480d79fa848bc30e7bcb53ef5ff2d04adbb4f26
Validity
Not Before: Apr 17 09:20:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0727ab6cbd5c3fdd9bb4b79e7c07568f1a6503f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:65:c2:64:b1:45:24:a2:a0:af:e3:51:f7:
9f:7a:1d:4f:05:48:b6:72:a4:97:66:13:85:09:96:
93:60:7d:d8:de:de:b6:6d:90:ce:03:9e:60:e8:99:
2f:fc:19:ef:f4:23:96:4a:c8:4d:55:b5:73:8e:f8:
14:53:e2:d3:b0:37:58:5e:f7:07:48:5d:cf:73:46:
94:c7:1a:df:f5:38:40:b1:26:5d:fb:10:7e:e0:0b:
5d:ef:bc:a2:76:ef:44:be:b1:2b:65:e8:49:26:74:
1e:96:28:f0:13:b4:7b:66:0d:70:4e:51:8a:78:78:
9e:9d:20:c6:39:06:44:20:66:22:ff:ab:df:12:1e:
dc:13:a7:33:e5:11:4d:18:c8:85:9b:2b:e5:68:6c:
19:06:5d:e8:32:48:be:f2:aa:58:c3:9e:c3:1c:9e:
26:7a:12:9b:46:0d:19:2e:2f:58:01:3d:42:ea:5e:
82:7a:eb:82:ad:15:d7:c7:34:33:c7:3e:75:ce:aa:
b9:31:1c:5a:b9:64:cd:4e:f5:89:04:cb:e4:a8:10:
b4:e2:21:40:ca:c2:0e:ce:70:9e:1d:a2:8a:7d:74:
c5:65:b2:16:be:09:1e:8d:eb:7c:75:f0:55:fd:23:
95:2d:c4:ea:3a:d4:d3:cf:5a:57:15:19:7f:99:53:
cd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:27:AB:6C:BD:5C:3F:DD:9B:B4:B7:9E:7C:07:56:8F:1A:65:03:F3
X509v3 Authority Key Identifier:
keyid:F4:80:D7:9F:A8:48:BC:30:E7:BC:B5:3E:F5:FF:2D:04:AD:BB:4F:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/ByerbL1cP92btLeefAdWjxplA_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.60.0/22
IPv6:
2a09:c2c0::/29
Signature Algorithm: sha256WithRSAEncryption
51:7f:5b:de:70:3d:bd:97:78:21:ac:44:59:ce:e7:67:54:7c:
3c:51:e5:23:50:56:be:d1:cb:c9:5e:6f:35:bc:cc:ba:69:ef:
1c:cb:1f:d0:55:dd:27:e7:f2:5d:0b:5f:08:f6:7d:ac:d8:8b:
3c:c9:18:ca:17:0d:1e:22:c1:a7:1c:d1:67:12:52:1e:8e:73:
8d:15:60:01:cd:44:ff:64:61:51:bd:19:c5:01:b2:b3:e0:68:
03:4f:52:29:d4:74:46:4f:bb:a9:5f:c9:0f:45:66:33:8f:73:
d6:8d:d4:f3:22:ca:5b:5e:f1:5f:21:bc:da:cd:04:9e:21:a6:
44:72:cb:c0:b0:81:4c:9e:fd:af:d5:a7:84:10:a2:0a:7a:27:
44:0f:17:77:77:4c:1e:10:e3:f9:f5:30:5d:a1:42:e2:c1:b1:
d2:78:4c:ce:42:3a:d3:fa:fe:c7:01:d3:19:be:8b:47:39:85:
2a:09:6a:db:93:c2:4c:13:fb:c2:a0:40:18:9c:73:7e:c9:3e:
0c:79:c4:fd:4c:6c:37:9a:d8:21:8e:4d:88:e0:61:e1:d6:89:
bd:e6:80:0b:09:59:08:8b:6d:1f:c7:6b:f8:ae:44:0e:49:01:
df:35:ec:3d:8e:33:66:3d:6d:fd:e0:41:b2:0b:82:ef:d4:f5:
13:55:04:b4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ2avcJKdEdezxdQqIPp7+RKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ODBkNzlmYTg0OGJjMzBlN2JjYjUzZWY1ZmYyZDA0YWRi
YjRmMjYwHhcNMjYwNDE3MDkyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzI3YWI2Y2JkNWMzZmRkOWJiNGI3OWU3YzA3NTY4ZjFhNjUwM2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+RlwmSxRSSioK/jUfefeh1PBUi2
cqSXZhOFCZaTYH3Y3t62bZDOA55g6Jkv/Bnv9COWSshNVbVzjvgUU+LTsDdYXvcH
SF3Pc0aUxxrf9ThAsSZd+xB+4Atd77yidu9EvrErZehJJnQelijwE7R7Zg1wTlGK
eHienSDGOQZEIGYi/6vfEh7cE6cz5RFNGMiFmyvlaGwZBl3oMki+8qpYw57DHJ4m
ehKbRg0ZLi9YAT1C6l6CeuuCrRXXxzQzxz51zqq5MRxauWTNTvWJBMvkqBC04iFA
ysIOznCeHaKKfXTFZbIWvgkejet8dfBV/SOVLcTqOtTTz1pXFRl/mVPN+wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAcnq2y9XD/dm7S3nnwHVo8aZQPzMB8GA1UdIwQY
MBaAFPSA15+oSLww57y1PvX/LQStu08mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUlEWG42aEl2RERudkxVLTlmOHRCSzI3VHlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hNWE3YWItZDExNC00MzU0LWI5N2Et
MDIzOGIzYjY4OTViLzEvQnllcmJMMWNQOTJidExlZWZBZFdqeHBsQV9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9hNWE3YWItZDExNC00MzU0LWI5N2EtMDIzOGIzYjY4OTVi
LzEvOUlEWG42aEl2RERudkxVLTlmOHRCSzI3VHlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVI8MA0E
AgACMAcDBQMqCcLAMA0GCSqGSIb3DQEBCwUAA4IBAQBRf1vecD29l3ghrERZzudn
VHw8UeUjUFa+0cvJXm81vMy6ae8cyx/QVd0n5/JdC18I9n2s2Is8yRjKFw0eIsGn
HNFnElIejnONFWABzUT/ZGFRvRnFAbKz4GgDT1Ip1HRGT7upX8kPRWYzj3PWjdTz
IspbXvFfIbzazQSeIaZEcsvAsIFMnv2v1aeEEKIKeidEDxd3d0weEOP59TBdoULi
wbHSeEzOQjrT+v7HAdMZvotHOYUqCWrbk8JME/vCoEAYnHN+yT4MecT9TGw3mtgh
jk2I4GHh1om95oALCVkIi20fx2v4rkQOSQHfNew9jjNmPW394EGyC4Lv1PUTVQS0
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:56 2026 by rpki-client