Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/bY0US8PQsJwgwk4sBH5OxzcNIwA.roa
File: bY0US8PQsJwgwk4sBH5OxzcNIwA.roa (raw, json)
Hash identifier: J/0CXCG1xKhKkenaNTif5Fbq2gKs6zO5wkvBXdQkbs8=
Subject key identifier: 6D:8D:14:4B:C3:D0:B0:9C:20:C2:4E:2C:04:7E:4E:C7:37:0D:23:00
Certificate issuer: /CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Certificate serial: 019FFB436C9E428D9C174C9BA287839CF0DF
Authority key identifier: 9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/bY0US8PQsJwgwk4sBH5OxzcNIwA.roa
Signing time: Thu 13 Aug 2026 13:15:27 +0000
ROA not before: Thu 13 Aug 2026 13:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41273
IP address blocks: 83.171.216.0/22 maxlen: 24
2a09:2f00::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:43:6c:9e:42:8d:9c:17:4c:9b:a2:87:83:9c:f0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Validity
Not Before: Aug 13 13:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d8d144bc3d0b09c20c24e2c047e4ec7370d2300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:43:9b:42:0c:06:87:8b:da:07:96:92:d7:
d4:1a:eb:b8:07:8f:06:3e:20:9f:6a:4d:e3:c4:bc:
31:a4:07:bb:12:a2:e5:ae:11:c9:b5:93:7d:a9:9e:
6c:c1:e2:a2:16:dc:e7:bd:7f:e2:8e:ce:d9:ba:a0:
2a:f7:a5:bb:d1:a1:34:71:d5:50:a4:fa:27:0b:47:
71:00:e6:9b:96:00:31:e8:0f:d7:c6:4d:b7:a8:11:
f1:ca:b4:cc:42:22:6f:85:ea:6d:8b:bd:b5:56:94:
a0:86:d9:f0:14:b1:69:40:11:e5:d0:44:58:e0:b6:
32:cd:1f:e4:35:b9:01:02:3a:92:9d:27:55:cc:33:
2e:51:2a:28:22:33:bf:0e:8f:cf:a8:da:bc:df:b6:
f4:ec:3f:79:72:21:b9:7a:23:28:cc:b2:7f:c6:fe:
f8:bf:a6:08:d0:16:1d:2d:79:07:40:bb:e6:b1:04:
d4:18:e2:33:e7:2f:7d:3e:41:6b:62:4f:57:25:30:
a1:4d:57:64:b5:73:81:54:e7:44:66:e5:b6:40:47:
94:06:c8:db:19:55:54:c1:e2:78:9d:30:c7:a4:3a:
1d:a9:03:1f:06:98:bf:2f:f9:d9:ab:c4:46:e6:55:
73:bc:0e:3e:82:ec:aa:5f:b3:46:46:f2:1c:ba:0f:
dc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8D:14:4B:C3:D0:B0:9C:20:C2:4E:2C:04:7E:4E:C7:37:0D:23:00
X509v3 Authority Key Identifier:
keyid:9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/bY0US8PQsJwgwk4sBH5OxzcNIwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.216.0/22
IPv6:
2a09:2f00::/29
Signature Algorithm: sha256WithRSAEncryption
2e:8a:1c:ef:a7:08:40:cb:7f:de:2a:98:2d:fc:30:be:5a:38:
0b:98:d6:24:bb:37:02:76:4b:8b:fa:7e:40:29:a9:a6:06:b5:
80:20:64:2e:88:77:11:83:e6:a7:90:99:50:78:b1:61:8b:ad:
c9:92:b0:59:dd:4e:be:d8:6c:68:15:05:ed:bc:26:28:0c:bb:
f4:74:c7:56:e2:48:a2:88:2b:f4:05:03:61:58:1e:b4:b7:87:
06:ac:b5:d3:52:2f:fc:f5:aa:e0:94:e2:d8:de:e9:7e:15:7f:
71:b5:b4:4e:48:34:03:21:55:5b:37:b9:26:ef:d4:06:d5:d4:
c0:32:55:6b:ca:53:1d:a7:05:82:2e:03:db:a0:67:f0:ad:4b:
a3:64:0a:b0:8c:dd:9e:45:13:fb:88:b5:fe:24:b2:87:77:63:
8a:7c:cf:87:e9:b6:e7:c0:b3:2b:4e:e0:30:7e:8a:86:a0:91:
8a:3d:32:90:24:f3:5b:7d:3d:d6:de:08:34:df:4c:94:3c:f6:
f3:45:6e:ae:ff:f9:88:e8:47:3f:10:58:36:f7:a2:c0:0b:4a:
ee:b5:ee:30:74:5e:79:23:1d:d2:0c:e8:40:c9:d2:5c:f0:bc:
fa:57:ab:44:86:16:82:c6:82:a8:f6:de:04:ae:50:2a:6e:6f:
c0:b1:fd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:55:29 2026 by rpki-client