Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/BiY8FkJ6QhxFh-KpB3NsT2LpAnQ.roa
File: BiY8FkJ6QhxFh-KpB3NsT2LpAnQ.roa (raw, json)
Hash identifier: ube55hCllmSHhMFruM84ELj1ZKtITmMvONboq60emvo=
Subject key identifier: 06:26:3C:16:42:7A:42:1C:45:87:E2:A9:07:73:6C:4F:62:E9:02:74
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 019B7EA6A5697B4B2BDB522B287ED5648A05
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/BiY8FkJ6QhxFh-KpB3NsT2LpAnQ.roa
Signing time: Fri 02 Jan 2026 12:20:09 +0000
ROA not before: Fri 02 Jan 2026 12:20:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196944
IP address blocks: 193.105.142.0/24 maxlen: 24
2001:678:fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:a5:69:7b:4b:2b:db:52:2b:28:7e:d5:64:8a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Jan 2 12:20:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06263c16427a421c4587e2a907736c4f62e90274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4c:5c:d7:ec:dd:1e:dc:a8:1b:b1:cc:2c:98:
2d:8b:78:ea:4e:bb:ec:3c:17:9e:d4:0c:34:d8:d5:
e3:94:47:41:e3:56:3f:8d:4e:1d:a8:eb:c9:2c:b5:
38:9b:a5:cd:42:98:a9:77:a5:a8:ee:e5:7c:41:f4:
72:63:99:7e:bf:3f:1f:09:8b:78:bc:70:11:b5:61:
9a:c1:21:4f:1d:cc:78:d6:bd:56:bc:f6:6b:24:e2:
78:8e:9c:49:46:69:4b:bc:6d:38:94:a4:a3:43:5f:
e2:29:f3:a2:4b:43:44:fe:bc:db:85:e8:94:f0:99:
bc:65:b9:73:48:d4:1a:bf:71:20:76:a6:ab:55:84:
52:a0:09:de:a3:b3:e8:69:eb:60:6b:7e:e6:7c:5d:
b2:12:b3:9a:f7:83:e5:6d:6f:5f:4d:b6:be:4a:b0:
d0:26:e4:9b:db:c7:37:11:4c:e1:10:9a:89:bf:48:
89:65:d0:c9:45:a9:92:b6:13:cf:b2:4d:65:a1:64:
db:db:0b:9e:65:8e:6f:1d:76:83:ac:5c:bf:36:34:
ae:95:0f:1f:e4:9e:e7:b5:1b:e5:5d:94:9c:8c:46:
92:c3:23:a8:3c:3c:83:c2:63:65:94:04:23:1e:e0:
f6:a5:ad:54:a3:d4:52:cb:b4:5f:de:11:68:ed:13:
f5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:26:3C:16:42:7A:42:1C:45:87:E2:A9:07:73:6C:4F:62:E9:02:74
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/BiY8FkJ6QhxFh-KpB3NsT2LpAnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.142.0/24
IPv6:
2001:678:fc0::/48
Signature Algorithm: sha256WithRSAEncryption
45:2e:8e:c4:ac:bb:73:ed:8f:25:8a:ef:f9:77:1f:98:19:82:
62:fc:0c:90:a9:56:62:24:2b:06:31:61:dd:0a:65:e0:a7:97:
fd:02:29:51:dd:df:08:81:b2:97:6d:68:3f:2a:97:26:7b:92:
96:88:b1:83:8c:74:a8:19:bf:0c:a5:b2:99:fc:2e:28:86:74:
b8:37:2a:85:65:ef:8b:cf:36:8a:94:12:9d:c1:7e:e7:8d:a0:
14:1e:99:ca:10:8d:a2:1c:f4:38:e8:43:33:dd:ea:d5:01:59:
06:2f:ac:66:11:0b:6b:1f:14:bd:f7:53:04:5c:d7:5f:af:67:
a1:20:5b:95:03:70:ed:1c:ca:49:be:fb:3c:b9:60:39:91:ae:
5b:76:00:65:20:77:0c:ec:b9:38:f6:e8:31:7e:a4:40:17:f6:
71:c8:50:b7:43:4d:96:21:fb:b3:14:57:a1:76:f8:0d:a7:ed:
46:98:2b:8a:01:36:c0:9d:d8:08:28:de:4a:68:6b:bf:76:c3:
61:ec:87:e5:56:c8:45:af:5f:bc:50:83:b2:8b:cb:43:d8:f7:
0f:0b:2a:72:c9:76:b3:18:28:d3:16:45:7a:a6:9d:d4:e5:80:
35:c6:64:1a:8f:46:c6:3c:7a:49:12:72:a5:12:d0:a7:d7:19:
20:a0:1a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:10 2026 by rpki-client