Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/RyTo54Gn4GlIatASiJIGEZImFMs.roa
File: RyTo54Gn4GlIatASiJIGEZImFMs.roa (raw, json)
Hash identifier: f8+0VDhHPJqJ9ImqYRQ61bWQ1EOJmhQHqA1aWAVq45E=
Subject key identifier: 47:24:E8:E7:81:A7:E0:69:48:6A:D0:12:88:92:06:11:92:26:14:CB
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 019DD961F97739D7E47E1860D574F7F966F4
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/RyTo54Gn4GlIatASiJIGEZImFMs.roa
Signing time: Wed 29 Apr 2026 13:16:09 +0000
ROA not before: Wed 29 Apr 2026 13:16:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208890
IP address blocks: 193.228.162.0/24 maxlen: 24
193.228.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:61:f9:77:39:d7:e4:7e:18:60:d5:74:f7:f9:66:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Apr 29 13:16:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4724e8e781a7e069486ad01288920611922614cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:c9:95:22:ad:46:f6:6b:ee:a3:63:72:f5:
af:36:c7:c8:64:b0:6d:61:a1:49:97:1a:7d:f2:70:
1f:47:b3:c2:b0:56:15:f1:d2:fe:09:fc:7b:1a:2a:
e9:1e:4b:d3:d9:59:67:46:61:bf:dd:c5:37:72:ce:
20:1b:e6:0c:86:ef:b9:dc:f6:15:c7:1a:dc:5f:71:
64:35:fe:8b:7f:cc:d9:fe:92:9f:3b:24:3e:9b:eb:
37:3b:0f:51:e2:fa:96:63:6d:86:d9:b5:16:b8:84:
0e:b3:7e:b1:fd:3e:7e:d0:77:41:d6:10:5b:b0:0c:
10:d8:6b:cf:39:1f:97:ac:7e:9b:4a:1e:7f:81:3e:
94:8d:c5:2b:6e:ea:23:6a:25:30:48:61:56:0b:37:
e9:33:49:e3:58:5e:75:50:71:00:4f:9d:83:42:78:
21:76:0a:71:91:01:ce:c9:73:ef:9a:87:14:0d:f6:
6d:3c:3d:31:60:e9:b1:3c:74:50:48:4f:1e:e1:c9:
3c:89:57:4c:2c:a5:7c:f9:8a:93:83:9d:3e:40:fa:
63:fc:8f:9e:09:96:ba:97:86:82:20:a8:25:02:35:
f9:9f:f1:8d:78:17:bd:9f:c1:71:d8:14:90:58:f0:
05:f7:dd:bb:42:15:63:d0:1a:47:b0:cb:bf:53:09:
16:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:24:E8:E7:81:A7:E0:69:48:6A:D0:12:88:92:06:11:92:26:14:CB
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/RyTo54Gn4GlIatASiJIGEZImFMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.162.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:bf:51:11:6d:e0:15:04:ab:a1:43:84:42:4e:58:af:91:b9:
c3:e6:8a:00:0b:1c:6c:40:0f:11:00:a7:18:39:df:34:f7:60:
df:7d:65:dc:71:a3:e7:ce:59:a7:15:4e:98:36:ac:f2:b6:3f:
41:e9:fe:a8:fd:58:a5:ca:a5:b1:07:ab:44:33:93:8e:59:06:
57:72:fb:5a:6d:23:60:24:b1:46:8d:97:b8:6a:59:1d:8c:f0:
ce:48:85:de:28:3e:bd:6b:2c:dd:6e:48:d5:39:1c:84:2e:90:
64:da:67:5d:04:f6:92:be:ae:2f:67:9d:93:c9:a6:42:23:87:
de:92:a3:03:44:7a:e3:e5:7c:45:ec:7f:ed:52:bf:0c:36:78:
c3:7e:49:7f:84:f2:42:07:51:4a:68:d6:da:b8:52:9a:d9:0a:
21:f1:56:dd:95:03:9b:97:4b:e3:28:93:ba:8d:72:0e:af:12:
5c:88:b5:34:de:70:2b:d5:00:78:d9:18:49:92:62:28:60:3b:
a9:b7:f6:22:2c:30:90:90:39:08:3d:03:16:23:b9:e4:71:6a:
96:23:90:20:38:76:a1:1b:a1:c6:70:56:d4:47:26:b8:af:75:
1c:e3:77:66:95:18:e4:00:e8:aa:ae:d0:2c:9b:53:84:36:f0:
51:60:04:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:43 2026 by rpki-client