Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/CMby5TZcz8wJssXc79aUUhtBUYI.roa
File: CMby5TZcz8wJssXc79aUUhtBUYI.roa (raw, json)
Hash identifier: TvV4JGUUPT6lyV1Vum9UKRCqV75Oi8Ug7Yz/kSOewW0=
Subject key identifier: 08:C6:F2:E5:36:5C:CF:CC:09:B2:C5:DC:EF:D6:94:52:1B:41:51:82
Certificate issuer: /CN=de8058831605aa86a6d6b6e3c3b2b016dafbdca6
Certificate serial: 019F2368A794EBE91CA859D54689B54FBD83
Authority key identifier: DE:80:58:83:16:05:AA:86:A6:D6:B6:E3:C3:B2:B0:16:DA:FB:DC:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oBYgxYFqoam1rbjw7KwFtr73KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/CMby5TZcz8wJssXc79aUUhtBUYI.roa
Signing time: Thu 02 Jul 2026 15:18:08 +0000
ROA not before: Thu 02 Jul 2026 15:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199788
IP address blocks: 185.57.40.0/22 maxlen: 22
2a01:5ba0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/3oBYgxYFqoam1rbjw7KwFtr73KY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/3oBYgxYFqoam1rbjw7KwFtr73KY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3oBYgxYFqoam1rbjw7KwFtr73KY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a7:94:eb:e9:1c:a8:59:d5:46:89:b5:4f:bd:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8058831605aa86a6d6b6e3c3b2b016dafbdca6
Validity
Not Before: Jul 2 15:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08c6f2e5365ccfcc09b2c5dcefd694521b415182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:51:d2:d7:8c:11:af:c5:90:16:70:ff:98:eb:
5c:97:00:d5:67:d5:8d:d0:4a:ad:8c:21:ef:ca:3a:
75:6e:13:b5:20:b3:b7:26:9a:cc:94:9e:3c:7a:42:
0f:9a:ec:f3:85:de:20:9c:ba:15:b2:93:31:e2:07:
77:79:14:6e:a4:01:fa:36:06:ef:27:d1:e0:00:01:
09:85:f8:84:83:02:c1:3c:72:00:6f:8c:fb:36:7e:
11:d8:54:fb:dd:23:9a:3c:51:eb:1e:b8:4d:70:ff:
4a:2f:6a:a2:00:90:19:72:cb:d2:05:44:dd:ea:6c:
71:1c:a8:3b:ab:76:ac:bb:37:6e:89:9c:87:da:fa:
0b:1a:f4:5f:b1:bb:0d:3a:21:6d:e7:99:0f:ac:46:
47:d3:2c:de:f5:79:22:f4:22:42:36:cb:9d:80:68:
c3:e8:0c:3a:99:13:e5:b0:df:61:6f:83:10:ce:27:
b4:f0:b0:06:a2:1e:b1:54:a8:9b:45:1c:e7:ee:62:
cd:9f:e7:59:17:4f:fd:9f:6f:be:71:59:e4:15:56:
6c:25:f8:43:5f:9c:5a:d0:76:0d:a2:10:b3:05:81:
98:bc:59:c2:6a:f9:82:96:6d:fb:10:47:75:4c:1d:
49:bb:37:8d:91:3c:9b:0c:da:ad:97:b4:47:b9:2f:
80:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C6:F2:E5:36:5C:CF:CC:09:B2:C5:DC:EF:D6:94:52:1B:41:51:82
X509v3 Authority Key Identifier:
keyid:DE:80:58:83:16:05:AA:86:A6:D6:B6:E3:C3:B2:B0:16:DA:FB:DC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oBYgxYFqoam1rbjw7KwFtr73KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/CMby5TZcz8wJssXc79aUUhtBUYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/3oBYgxYFqoam1rbjw7KwFtr73KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.40.0/22
IPv6:
2a01:5ba0::/32
Signature Algorithm: sha256WithRSAEncryption
1a:f8:64:73:09:36:bc:ce:43:b8:ef:d5:17:29:61:68:a2:6d:
e4:3a:60:c9:3a:f2:55:16:cc:c6:25:c6:b8:bd:89:e4:ae:2d:
eb:71:75:55:46:ed:63:44:f9:3c:b6:ba:18:16:04:3f:e4:2a:
92:2b:e4:57:d0:71:ab:24:a4:b5:bf:15:02:ae:8a:65:6a:de:
93:7f:99:7e:84:f6:70:d5:12:85:01:fc:bb:df:41:9b:c9:1f:
d9:87:f5:ff:8e:1d:96:cb:2f:1e:02:99:a3:b4:fc:08:fa:69:
a4:f9:b6:a0:55:03:3b:66:09:54:bb:a8:e7:62:26:0f:8d:43:
e1:a1:06:e4:4a:4e:dd:71:a0:cd:d3:7e:29:c8:a1:6d:1f:10:
9f:9c:46:f5:94:ec:95:1d:74:97:26:0a:7b:4b:9f:1b:0e:cd:
4e:0d:59:fa:b8:ae:4f:4f:4b:e3:55:6e:a4:2e:b3:9f:8f:bb:
1e:9c:4d:d3:e4:95:cc:45:e5:05:a4:02:5f:01:86:f3:a6:fa:
e0:39:8b:c7:78:93:05:20:dd:b4:5c:fb:0f:53:69:b8:17:be:
5a:b6:21:f5:b5:70:b9:18:52:5c:96:e8:d3:a3:2f:f2:14:0c:
be:41:93:ec:de:2f:70:9e:b5:35:6b:d8:6e:d2:36:aa:4e:ba:
c0:b0:c4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:09 2026 by rpki-client