Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/rby-7T6x71cqSYYHPc0qiCSdUhE.roa
File: rby-7T6x71cqSYYHPc0qiCSdUhE.roa (raw, json)
Hash identifier: 1GDwq4DbLKxk7kZ1lvF4nxcYZWez0969XUelMmv2xlI=
Subject key identifier: AD:BC:BE:ED:3E:B1:EF:57:2A:49:86:07:3D:CD:2A:88:24:9D:52:11
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0A97059488CED59674312F10E852E5CC6
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/rby-7T6x71cqSYYHPc0qiCSdUhE.roa
Signing time: Wed 16 Sep 2026 08:58:27 +0000
ROA not before: Wed 16 Sep 2026 08:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154602
IP address blocks: 89.167.167.0/24 maxlen: 24
89.167.172.0/24 maxlen: 24
89.167.174.0/23 maxlen: 24
89.167.212.0/24 maxlen: 24
89.167.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:70:59:48:8c:ed:59:67:43:12:f1:0e:85:2e:5c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 16 08:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adbcbeed3eb1ef572a4986073dcd2a88249d5211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:74:f8:11:99:cb:4a:45:56:eb:fb:55:6a:
e3:8c:6c:d8:26:cf:39:78:eb:71:6e:af:6e:2f:36:
f5:d7:5d:b7:84:7b:f4:b1:88:1a:49:31:14:c9:8f:
26:a1:31:4d:d0:3e:ae:73:9d:94:d5:d0:72:a3:78:
07:0e:c9:6c:91:c7:5b:bb:66:1e:aa:17:bf:e0:f5:
1c:57:1b:75:cb:ba:b3:cf:7b:89:d5:fb:b0:e1:7a:
da:bc:7f:46:d5:08:7c:95:e8:a1:cb:be:6d:a1:be:
a5:52:77:85:13:48:e7:c2:21:18:f1:cf:c2:8e:66:
2a:6d:93:e7:13:e3:f9:f3:86:66:15:d6:bd:1f:05:
08:af:74:ae:42:10:3a:b6:5e:89:3a:16:6b:55:9f:
a0:f8:2b:ed:e2:7b:d7:fb:bc:b9:f2:15:56:8d:d1:
44:84:28:ad:de:99:eb:ad:64:4a:1d:2f:4d:ae:df:
73:09:16:e5:00:3c:a9:35:2c:1d:3c:4b:cb:04:4b:
c0:2f:b7:f9:5a:cc:31:15:60:73:de:3a:6c:ab:71:
4f:a1:85:bd:e9:b1:6a:45:d4:21:ec:77:8e:1a:bf:
e1:60:1c:fc:69:ea:d8:ba:b9:ac:dc:b0:7a:5b:7e:
00:0a:3d:e0:ea:07:98:ab:11:8c:67:82:0f:9b:b4:
ff:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BC:BE:ED:3E:B1:EF:57:2A:49:86:07:3D:CD:2A:88:24:9D:52:11
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/rby-7T6x71cqSYYHPc0qiCSdUhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.167.0/24
89.167.172.0/24
89.167.174.0/23
89.167.212.0/24
89.167.221.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:b3:a8:0a:69:a9:17:ba:54:60:a6:2d:0a:60:8d:69:9e:b8:
6c:67:5a:6d:4b:9e:03:3f:10:d9:21:22:1d:a7:73:73:a1:d2:
80:19:72:27:70:af:de:3a:f1:87:e9:b1:41:fe:37:ab:e0:ca:
68:7f:4e:d9:5f:16:f8:aa:88:11:64:fc:0f:0b:3a:bb:f7:91:
4e:db:62:c4:99:a5:28:10:5b:de:88:58:d5:5f:2e:ad:82:f2:
3e:4b:89:aa:1c:fd:04:c7:13:52:96:40:b8:50:af:42:44:36:
56:5d:01:0f:76:13:07:c7:6f:6d:c8:71:99:d8:f7:a0:b7:ce:
9e:2d:b4:78:50:39:b9:35:6a:9a:89:55:50:e8:af:28:14:4e:
32:01:e5:80:bf:49:92:d2:ce:37:69:d5:71:15:57:4f:8e:c2:
27:03:21:da:39:2f:0c:62:ac:bc:35:42:b1:9f:ba:46:f7:8d:
c5:8d:5b:b3:0f:a5:e7:70:d2:6f:83:d2:e1:a2:3b:0e:98:d3:
1f:ef:93:88:ae:c9:ea:1e:9f:3b:0b:ee:ae:0e:e1:1d:aa:d4:
d4:73:d9:dc:6a:a9:26:ec:6e:2f:99:c8:c6:15:c7:37:bc:29:
46:89:2e:c9:d8:6d:03:90:9b:00:bc:46:db:7b:2a:b1:13:de:
4e:91:02:8a
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaCpcFlIjO1ZZ0MS8Q6FLlzGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0
MDdhODAwHhcNMjYwOTE2MDg1ODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGJjYmVlZDNlYjFlZjU3MmE0OTg2MDczZGNkMmE4ODI0OWQ1MjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBl0+BGZy0pFVuv7VWrjjGzYJs85
eOtxbq9uLzb11123hHv0sYgaSTEUyY8moTFN0D6uc52U1dByo3gHDslskcdbu2Ye
qhe/4PUcVxt1y7qzz3uJ1fuw4XravH9G1Qh8leihy75tob6lUneFE0jnwiEY8c/C
jmYqbZPnE+P584ZmFda9HwUIr3SuQhA6tl6JOhZrVZ+g+Cvt4nvX+7y58hVWjdFE
hCit3pnrrWRKHS9Nrt9zCRblADypNSwdPEvLBEvAL7f5WswxFWBz3jpsq3FPoYW9
6bFqRdQh7HeOGr/hYBz8aerYurms3LB6W34ACj3g6geYqxGMZ4IPm7T/DQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFK28vu0+se9XKkmGBz3NKogknVIRMB8GA1UdIwQY
MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt
NWQ1NjA5ODljZjdiLzEvcmJ5LTdUNng3MWNxU1lZSFBjMHFpQ1NkVWhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi
LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWaenAwQA
WaesAwQBWaeuAwQAWafUAwQAWafdMA0GCSqGSIb3DQEBCwUAA4IBAQA9s6gKaakX
ulRgpi0KYI1pnrhsZ1ptS54DPxDZISIdp3NzodKAGXIncK/eOvGH6bFB/jer4Mpo
f07ZXxb4qogRZPwPCzq795FO22LEmaUoEFveiFjVXy6tgvI+S4mqHP0ExxNSlkC4
UK9CRDZWXQEPdhMHx29tyHGZ2Pegt86eLbR4UDm5NWqaiVVQ6K8oFE4yAeWAv0mS
0s43adVxFVdPjsInAyHaOS8MYqy8NUKxn7pG943FjVuzD6XncNJvg9LhojsOmNMf
75OIrsnqHp87C+6uDuEdqtTUc9ncaqkm7G4vmcjGFcc3vClGiS7J2G0DkJsAvEbb
eyqxE95OkQKK
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:13:49 2026 by rpki-client