Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/bYNpRaquHSovk5lYho2AUYJ1mrQ.roa
File: bYNpRaquHSovk5lYho2AUYJ1mrQ.roa (raw, json)
Hash identifier: W+ihxKNeVy26mVeLSajDuOcYh4LGfndjxzishww2N3E=
Subject key identifier: 6D:83:69:45:AA:AE:1D:2A:2F:93:99:58:86:8D:80:51:82:75:9A:B4
Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial: 01A0FC3695C4B48E11A2BDC91CC55EF13D1A
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/bYNpRaquHSovk5lYho2AUYJ1mrQ.roa
Signing time: Fri 02 Oct 2026 10:43:50 +0000
ROA not before: Fri 02 Oct 2026 10:43:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218523
IP address blocks: 89.208.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:36:95:c4:b4:8e:11:a2:bd:c9:1c:c5:5e:f1:3d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Validity
Not Before: Oct 2 10:43:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d836945aaae1d2a2f939958868d805182759ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:81:88:09:00:7d:c3:5b:e8:8b:96:d2:3f:
dd:38:33:10:fb:af:73:4b:92:1a:be:bc:e9:91:b0:
9c:bc:8e:cb:32:46:90:a3:f0:87:33:4c:88:30:1f:
87:72:de:52:fc:6a:14:5e:a2:00:f6:a7:89:d6:b4:
c5:12:30:10:9d:3c:5a:20:e4:67:cb:65:fc:7c:dc:
66:d9:c4:47:68:4e:d3:a5:16:23:55:05:a2:06:0c:
dc:d5:3b:e7:ed:4c:37:63:d2:69:22:e1:2e:2c:15:
d1:86:8f:1d:86:6a:ce:5b:0e:05:cd:36:e9:4e:6f:
80:cb:59:84:7a:8a:8f:0b:70:d0:0b:88:b5:33:21:
07:c6:b3:95:a1:16:e3:0b:82:e7:2b:22:bf:71:e7:
46:eb:49:1f:d8:b4:42:eb:d1:91:92:8b:1a:97:65:
21:1b:a3:60:d4:91:80:9b:20:45:8b:77:2f:ad:78:
6f:f2:85:fd:f2:db:ff:1a:55:ae:17:5c:7d:02:93:
68:2c:73:11:7e:24:a0:15:bf:09:fe:53:5a:6f:b2:
60:d8:c1:f2:55:f4:fc:0e:0b:be:66:34:3d:75:c5:
5d:b3:cc:f6:c4:c1:a4:5c:23:e8:93:e0:18:77:4c:
c2:02:57:94:1f:4c:2c:2d:a4:1c:55:dd:e4:bf:a5:
4f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:83:69:45:AA:AE:1D:2A:2F:93:99:58:86:8D:80:51:82:75:9A:B4
X509v3 Authority Key Identifier:
keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/bYNpRaquHSovk5lYho2AUYJ1mrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.208.119.0/24
Signature Algorithm: sha256WithRSAEncryption
06:c9:3c:02:25:2e:b1:5c:80:9c:17:ef:8f:f3:f5:20:92:26:
40:a2:5f:9c:ab:c2:eb:82:4b:dd:a0:9d:95:71:f4:5a:1d:8c:
cc:00:27:aa:fd:41:a9:dc:ea:d5:91:cc:ff:45:be:96:39:89:
e2:cb:54:23:f3:ad:ff:16:d7:e5:ac:89:f2:dc:79:f4:38:ec:
b9:08:84:a4:7e:e6:db:9b:b8:26:db:b2:6a:b1:56:b3:30:55:
62:db:28:95:00:23:27:6f:b5:ac:ea:c4:5b:e8:b8:10:bc:bb:
b2:65:3c:0c:16:a0:c1:12:2f:1b:2f:54:1c:66:5f:bb:0d:26:
8b:96:f6:c2:f7:fe:dc:d2:d3:17:a9:f1:99:c1:7f:14:75:34:
ba:ca:82:2f:65:c7:3d:83:b4:0c:e6:ca:59:e9:30:a0:42:38:
75:22:e0:30:87:8a:2a:d3:5b:e2:6e:f3:20:0d:a1:8f:f5:c8:
f7:82:e8:af:f7:4f:f1:6b:3c:8a:bc:95:d2:f1:4b:ae:52:b4:
03:b1:14:52:7d:13:d2:b8:2b:e3:54:87:80:31:59:16:33:57:
b7:90:91:2c:6b:8a:a5:54:bd:8c:19:d0:e9:2e:16:67:f6:7e:
96:da:43:1e:41:ec:3c:09:7b:5d:b0:f6:8f:9f:66:a1:fa:98:
33:03:91:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 11:46:19 2026 by rpki-client