Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/bYZq4TaUHpJH78CY-aNtis3oyQA.roa
File: bYZq4TaUHpJH78CY-aNtis3oyQA.roa (raw, json)
Hash identifier: e1hGUZzRDWnDlq/geNvyZ9Kpq+do52E/VJ2otYkzaF4=
Subject key identifier: 6D:86:6A:E1:36:94:1E:92:47:EF:C0:98:F9:A3:6D:8A:CD:E8:C9:00
Certificate issuer: /CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
Certificate serial: 019D49444E0D2210AAC3E3658433F178D26A
Authority key identifier: ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/bYZq4TaUHpJH78CY-aNtis3oyQA.roa
Signing time: Wed 01 Apr 2026 13:38:26 +0000
ROA not before: Wed 01 Apr 2026 13:38:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208681
IP address blocks: 45.89.128.0/22 maxlen: 22
2a0b:a200::/48 maxlen: 48
2a0b:a200:1::/48 maxlen: 48
2a0b:a200:2::/48 maxlen: 48
2a0b:a200:3::/48 maxlen: 48
2a0b:a200:4::/48 maxlen: 48
2a0b:a200:5::/48 maxlen: 48
2a0b:a200:6::/48 maxlen: 48
2a0b:a200:7::/48 maxlen: 48
2a0b:a200:8::/48 maxlen: 48
2a0b:a200:9::/48 maxlen: 48
2a0b:a200:a::/48 maxlen: 48
2a0b:a200:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:44:4e:0d:22:10:aa:c3:e3:65:84:33:f1:78:d2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
Validity
Not Before: Apr 1 13:38:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d866ae136941e9247efc098f9a36d8acde8c900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5b:08:9c:2e:87:95:83:63:a5:9b:ab:60:30:
86:27:18:c0:d2:c4:73:e3:38:83:1d:52:17:65:f5:
5c:a8:87:de:be:10:8b:dc:bd:4d:bb:7c:f2:91:2e:
62:7d:26:46:2a:b8:0c:2a:55:c7:03:c3:5c:f3:13:
c4:ff:5f:16:8f:ac:10:c9:c4:10:2f:02:51:7d:bd:
4a:e8:5f:b4:9d:61:8e:ff:cc:4e:a0:c9:bf:e4:93:
cb:23:8b:01:6e:f2:30:e9:fb:d7:32:d9:c9:b4:3e:
d9:03:9c:47:05:b6:76:20:01:ad:85:1b:38:99:a6:
f4:62:f2:77:89:5d:60:bb:87:7d:cc:19:64:6d:57:
3e:76:1b:8e:22:96:04:1d:93:02:91:32:8d:8b:c2:
25:a7:b0:b0:fd:53:04:2c:77:2d:5d:9c:95:45:62:
b5:e4:67:ba:8b:86:a9:af:f5:7c:c1:bb:29:b0:77:
3f:be:7d:dc:f0:4d:ff:ce:ff:84:18:08:fd:8e:fd:
27:28:60:f6:59:9a:37:ea:08:dc:4b:ad:20:35:da:
95:f9:43:58:45:3b:81:74:60:85:19:03:0e:9e:3d:
57:e5:06:7c:2c:fc:5f:fb:b8:b7:36:54:00:31:8f:
87:7e:4c:e2:4b:41:92:34:98:b8:07:e3:75:3f:a6:
c7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:86:6A:E1:36:94:1E:92:47:EF:C0:98:F9:A3:6D:8A:CD:E8:C9:00
X509v3 Authority Key Identifier:
keyid:ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/bYZq4TaUHpJH78CY-aNtis3oyQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.128.0/22
IPv6:
2a0b:a200::-2a0b:a200:b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
bc:da:2e:0c:9d:65:c7:26:03:7e:dc:7b:d5:c8:c8:99:17:1e:
ee:18:2a:76:81:49:55:3d:f2:27:82:82:9d:8a:57:0e:23:4d:
70:1e:fd:aa:34:2a:5d:c2:6f:79:f0:00:30:f9:91:53:9a:7f:
65:56:fc:c4:20:2a:29:20:6a:95:2a:28:64:e4:44:fb:c8:e5:
95:f1:97:88:0c:f8:fd:06:82:a1:ff:05:12:2f:cd:b7:53:fd:
64:21:52:7a:f0:cf:9e:98:85:7e:a4:c1:3c:37:8b:f0:87:bd:
97:47:55:6f:8b:e1:68:b5:12:d7:b8:c1:04:7e:8d:55:13:a3:
fd:75:7c:7c:36:38:1b:53:c5:db:99:21:c3:0f:d4:74:0e:ce:
66:a8:f4:ba:fd:e5:a7:15:77:eb:81:b1:0a:9c:10:de:09:8a:
53:43:a9:9f:f2:a4:28:44:77:ba:81:70:b1:7f:34:88:07:77:
20:9b:3b:ce:98:28:fe:62:30:8b:56:9e:31:50:59:b2:81:4c:
a6:51:8c:cd:b1:08:b1:a0:ad:7e:6f:79:9a:e8:b6:02:15:5e:
c1:5c:fa:c7:5b:fe:93:76:04:a7:9c:d8:30:07:6a:06:4e:00:
3e:40:ce:50:c4:6a:70:5e:6e:71:3e:0c:d1:95:27:b2:3a:0b:
44:92:ba:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:48 2026 by rpki-client