Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/CIy_kJMqz8mBIQQR50VkGyhCLs8.roa
File: CIy_kJMqz8mBIQQR50VkGyhCLs8.roa (raw, json)
Hash identifier: FjW9B/CtLqxQimoB4lQ/xERYLB+RGA6TuNN2QpNxk/U=
Subject key identifier: 08:8C:BF:90:93:2A:CF:C9:81:21:04:11:E7:45:64:1B:28:42:2E:CF
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019D4E1C3DB7546010084D48AA0672E314E9
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/CIy_kJMqz8mBIQQR50VkGyhCLs8.roa
Signing time: Thu 02 Apr 2026 12:12:46 +0000
ROA not before: Thu 02 Apr 2026 12:12:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211270
IP address blocks: 92.119.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4e:1c:3d:b7:54:60:10:08:4d:48:aa:06:72:e3:14:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Apr 2 12:12:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=088cbf90932acfc981210411e745641b28422ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:43:25:d6:73:bd:92:aa:42:6d:8f:81:3b:4a:
9a:8e:4f:ce:2c:c6:1e:fa:60:f6:7e:92:96:48:09:
d1:94:ee:c8:c4:17:67:e2:49:de:e9:50:23:48:d6:
38:4f:61:34:96:9e:19:c4:49:ab:aa:a8:27:87:4c:
ac:84:09:00:ce:8f:f3:54:85:27:75:2c:91:8e:6a:
9a:40:62:8c:b2:75:dd:e0:0b:f1:0a:fb:78:25:8d:
5d:b7:cd:0d:69:ec:ca:6f:4e:5b:c5:c6:7b:a8:5a:
87:79:dd:8d:87:c8:e5:cf:45:e7:40:1d:7e:32:13:
1b:47:ae:5e:af:2d:af:36:a2:fd:4f:ee:60:17:83:
cc:b8:6b:00:1c:4d:f4:10:28:25:c7:57:55:82:91:
83:96:37:a9:0d:32:cd:c5:a5:18:16:30:ae:62:11:
12:4d:66:78:11:da:53:39:fe:6f:5e:98:ea:39:19:
e1:c8:1b:64:2b:c2:d6:42:41:4a:20:11:50:3c:35:
38:9d:eb:08:d1:d0:ac:57:ff:fa:e5:e8:fc:8f:04:
ac:b0:b7:08:4a:e1:15:4a:12:95:ed:7e:d1:ac:ef:
76:2c:e7:e3:b3:f3:d8:0b:88:6d:12:78:5d:53:32:
49:36:3a:0c:02:37:7d:bf:06:e2:a5:0f:a6:11:12:
d4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8C:BF:90:93:2A:CF:C9:81:21:04:11:E7:45:64:1B:28:42:2E:CF
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/CIy_kJMqz8mBIQQR50VkGyhCLs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.229.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:34:b9:27:d9:54:70:a8:7a:dd:58:81:51:0d:46:e4:ac:d4:
69:3b:54:d7:34:39:8b:06:a6:ea:96:c0:d4:55:fe:00:03:e4:
59:52:a9:bb:90:6f:2c:ee:4a:72:7f:8b:24:18:1b:58:8e:77:
61:93:fb:4b:62:3d:a4:f4:fd:3f:14:da:39:97:13:9e:a9:16:
92:13:61:c2:8c:fd:ab:71:05:34:43:f9:35:80:c7:25:ea:00:
46:db:22:2f:5e:57:07:4a:54:66:54:53:e6:60:d3:59:73:04:
66:6e:c8:8a:56:51:89:f1:f7:e9:8f:6e:a7:0e:1f:75:b3:13:
e7:87:93:7e:f8:2d:5e:2c:2b:dd:c2:c0:90:26:31:64:bd:b3:
ce:cb:56:d3:1d:3b:b9:fe:f1:59:b8:5d:ff:b6:56:5f:cd:ee:
c4:6e:20:f2:a5:fd:d2:43:8d:a7:8f:84:5b:40:34:be:9b:af:
39:07:c1:e8:ad:a5:ce:f3:79:1c:1f:fb:9d:87:00:3a:62:6f:
f3:e6:9e:a3:07:18:b6:f3:0f:da:eb:b2:f9:b3:04:9b:b5:3b:
e1:e1:f5:29:32:ee:48:84:6f:42:87:51:ff:99:aa:94:7e:a2:
a6:b0:59:bf:03:46:aa:bc:12:65:a9:22:af:bb:b7:f5:e9:5f:
5a:99:08:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:29:31 2026 by rpki-client