Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/bnyewlBl2rNg_sE2Xed_Qzb7YTk.roa
File: bnyewlBl2rNg_sE2Xed_Qzb7YTk.roa (raw, json)
Hash identifier: rQigy+jl1LrGUPH3pHiRChWTBL0WnXymta07qKb9Rbw=
Subject key identifier: 6E:7C:9E:C2:50:65:DA:B3:60:FE:C1:36:5D:E7:7F:43:36:FB:61:39
Certificate issuer: /CN=13e19aef683969eb982f2ddb219b4652af26b96d
Certificate serial: 019FB01500A0845118CDAEF7476876D0B3AA
Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/bnyewlBl2rNg_sE2Xed_Qzb7YTk.roa
Signing time: Wed 29 Jul 2026 22:53:14 +0000
ROA not before: Wed 29 Jul 2026 22:53:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59778
IP address blocks: 185.72.92.0/22 maxlen: 22
185.72.94.0/24 maxlen: 24
185.166.68.0/22 maxlen: 22
185.166.68.0/24 maxlen: 24
185.166.69.0/24 maxlen: 24
185.166.70.0/24 maxlen: 24
185.166.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b0:15:00:a0:84:51:18:cd:ae:f7:47:68:76:d0:b3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d
Validity
Not Before: Jul 29 22:53:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e7c9ec25065dab360fec1365de77f4336fb6139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:97:77:0c:12:f9:ad:9e:f0:ea:06:25:67:
11:12:bc:3e:0d:3a:03:d8:4e:6c:27:91:99:e8:2b:
a5:75:ad:40:8b:2a:3b:08:fe:10:13:7f:29:46:35:
3d:5c:50:e4:2f:aa:b6:b9:03:60:f4:96:91:35:8a:
f0:41:78:a0:3e:89:6a:ee:74:cc:55:07:f1:c1:ab:
93:83:f4:29:0b:d3:98:cc:e8:67:e6:99:a2:62:17:
80:69:0c:13:6c:e3:c1:fc:69:cb:f9:08:2e:72:a8:
65:93:15:8e:8e:50:6a:a3:17:f3:5b:8d:e6:ea:42:
29:b0:88:99:56:a8:8d:a4:3a:43:6c:18:a2:9a:67:
e4:a5:a6:85:ac:f6:e3:d6:e6:a2:80:de:bd:26:c8:
f8:12:aa:8d:80:88:74:20:ed:03:86:9e:f6:9c:01:
d8:4b:7d:e9:39:a2:0a:9a:3b:28:fb:4f:0a:fc:a2:
e8:d5:17:53:24:b7:e7:b9:fe:80:a0:5f:cf:18:81:
22:cb:35:df:a6:3f:05:5d:41:c3:fd:bb:da:e9:ba:
bd:ba:d5:79:fc:5c:b1:96:c4:14:60:51:29:4f:38:
ff:b3:90:03:9a:0a:3c:7f:e0:f2:1e:7d:da:0e:27:
56:06:1e:9a:a3:15:67:9c:d6:e5:f0:cd:98:04:7b:
ff:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7C:9E:C2:50:65:DA:B3:60:FE:C1:36:5D:E7:7F:43:36:FB:61:39
X509v3 Authority Key Identifier:
keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/bnyewlBl2rNg_sE2Xed_Qzb7YTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.92.0/22
185.166.68.0/22
Signature Algorithm: sha256WithRSAEncryption
71:4e:81:7c:5d:9f:3a:02:5c:d8:51:00:7f:c6:cf:6e:ea:ec:
9a:e5:4f:08:14:a5:a6:f8:a3:4e:64:c3:17:da:56:06:52:8a:
3f:be:89:91:d3:40:e5:75:54:a2:d3:ca:6d:06:96:9f:64:e3:
82:59:e3:9a:65:d7:0f:bb:7a:21:13:1a:7d:24:5a:38:a1:26:
43:59:70:1d:a1:0e:f4:88:87:d7:e6:ea:da:f2:f7:56:e3:b1:
0f:37:a1:a3:30:64:d0:2d:44:d7:96:19:47:be:69:be:89:be:
39:1c:73:06:9d:4d:48:8e:ae:f6:2d:13:1b:e7:f7:94:72:bc:
e8:8b:7e:0a:ef:9e:25:33:4f:36:d6:3e:88:72:a7:93:f7:91:
f4:25:8c:4d:95:df:88:37:8e:22:01:3e:66:09:2d:80:b8:bb:
e1:06:82:7d:40:ac:70:80:81:45:6f:fc:4d:5f:2a:07:94:8b:
8f:2a:ad:3e:d5:77:73:bb:f4:64:27:43:7f:a3:9c:d4:7b:f0:
26:0d:62:c2:a5:87:01:b4:85:d7:60:68:81:94:29:d7:e6:89:
5a:dd:ec:a2:70:a7:a7:95:66:d1:23:b7:a8:9e:c0:94:4b:09:
05:00:c6:98:fb:6a:40:a5:2d:a2:0a:76:c1:19:d0:e4:bc:8f:
51:bd:df:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:41:17 2026 by rpki-client