Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/bYCtLYzBySJNoKpxnFmScmzmpsY.roa
File: bYCtLYzBySJNoKpxnFmScmzmpsY.roa (raw, json)
Hash identifier: p7kLbweRJeR5sNDyxh8p+Ss1NfbU2U84GbzNNcrIG70=
Subject key identifier: 6D:80:AD:2D:8C:C1:C9:22:4D:A0:AA:71:9C:59:92:72:6C:E6:A6:C6
Certificate issuer: /CN=2d61dd95259c268cd6e36e55bcb2cbcc535b0a88
Certificate serial: 01A10ACA4532FB61674E19F7711856644FD0
Authority key identifier: 2D:61:DD:95:25:9C:26:8C:D6:E3:6E:55:BC:B2:CB:CC:53:5B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWHdlSWcJozW425VvLLLzFNbCog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/bYCtLYzBySJNoKpxnFmScmzmpsY.roa
Signing time: Mon 05 Oct 2026 06:39:50 +0000
ROA not before: Mon 05 Oct 2026 06:39:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 128.86.128.0/17 maxlen: 17
137.253.0.0/16 maxlen: 16
192.12.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWHdlSWcJozW425VvLLLzFNbCog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:ca:45:32:fb:61:67:4e:19:f7:71:18:56:64:4f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d61dd95259c268cd6e36e55bcb2cbcc535b0a88
Validity
Not Before: Oct 5 06:39:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d80ad2d8cc1c9224da0aa719c5992726ce6a6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f8:11:9c:e3:35:5a:7a:35:ed:6c:6a:4d:e9:
14:4c:93:35:c9:83:b4:e4:22:3e:d9:f6:07:ff:52:
8e:4c:6c:57:7d:26:98:06:68:4c:22:03:6a:f8:a6:
4d:4f:38:07:25:f8:f7:8f:ba:94:1c:37:5c:7d:63:
27:da:c9:d4:28:92:f8:c9:53:39:c5:e8:76:1d:69:
e5:c0:65:d9:ce:93:a4:94:0e:ec:a5:0e:10:5b:c6:
2f:6f:b9:c2:5c:64:e1:9a:14:55:ff:17:fc:5c:63:
17:3a:b2:f1:94:71:a5:25:bc:41:bd:60:28:62:06:
e8:ed:87:ea:ac:89:a7:1a:50:ff:99:b7:88:ee:2b:
99:93:87:75:60:57:5d:8b:49:97:2a:ae:30:e2:7a:
4a:6a:7b:68:b0:03:4b:48:f9:f2:b4:b6:1f:10:b7:
4b:2b:f7:84:86:1b:cf:fa:10:96:21:ad:4f:af:09:
0a:ac:fe:bf:8b:1b:9a:b1:e2:a6:c1:34:90:8a:a7:
e1:a0:5c:b5:86:a4:1d:0c:3c:4c:8f:b2:a6:a5:06:
c5:3a:19:fa:3c:13:fd:0b:da:bf:01:b3:e9:2b:24:
8b:c6:e0:40:d0:3c:2a:5f:fe:c9:a4:f6:f6:22:44:
d6:ab:1c:d1:02:bc:85:c7:7d:b0:28:94:41:53:5c:
86:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:80:AD:2D:8C:C1:C9:22:4D:A0:AA:71:9C:59:92:72:6C:E6:A6:C6
X509v3 Authority Key Identifier:
keyid:2D:61:DD:95:25:9C:26:8C:D6:E3:6E:55:BC:B2:CB:CC:53:5B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWHdlSWcJozW425VvLLLzFNbCog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/bYCtLYzBySJNoKpxnFmScmzmpsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.86.128.0/17
137.253.0.0/16
192.12.72.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:1e:c1:04:95:61:2b:7e:45:a9:a6:b5:02:2d:1c:5c:5d:6f:
4e:4f:87:5c:38:ae:82:bd:4d:94:6a:f8:83:de:50:ce:0b:69:
b4:b9:40:29:14:4d:de:e4:a6:66:0d:f8:e5:a8:8b:02:c5:cb:
39:bf:a5:4b:da:7c:23:58:95:fa:58:5b:43:0a:25:e2:c1:a5:
c8:45:cb:23:47:be:1c:95:ef:7d:ff:69:0e:57:23:8d:bc:0b:
6c:79:b4:fc:ee:ff:df:c8:70:c3:64:26:63:bc:ca:d6:cb:f8:
82:c4:32:24:9d:1f:36:cb:43:be:f1:7a:d7:d0:aa:d6:6f:b8:
b0:0a:7f:b6:6e:74:26:89:78:d8:88:98:f4:c2:ca:a0:84:a5:
fd:a3:8d:b6:fd:eb:d5:8e:44:d1:bf:d6:b9:68:da:65:21:73:
fa:5a:1d:c4:ee:bb:76:bb:c4:dd:65:62:ca:5a:cc:26:a5:4c:
b7:4a:54:86:84:13:4d:a9:1e:d6:c7:fa:d0:25:d8:ca:29:87:
af:5e:75:95:b5:0e:b7:32:fd:88:cf:df:82:e5:32:a7:8d:4a:
2f:bd:3d:96:c3:6d:99:45:dc:91:17:cb:1c:e4:47:fa:87:27:
9e:f0:cc:33:8a:8f:62:c5:28:ee:3d:9a:7e:79:6f:11:8e:29:
40:62:7e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:46:51 2026 by rpki-client