Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/vYbe5i0abM5OKc80hhLHQSxkx6I.roa
File: vYbe5i0abM5OKc80hhLHQSxkx6I.roa (raw, json)
Hash identifier: 11dpUJpj4Md28m8DN1pCtjlW/06S3TdKsIGJmsfc4nI=
Subject key identifier: BD:86:DE:E6:2D:1A:6C:CE:4E:29:CF:34:86:12:C7:41:2C:64:C7:A2
Certificate issuer: /CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
Certificate serial: 019B7F83C1DE41989A7FAC5A845794E8426B
Authority key identifier: 03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/vYbe5i0abM5OKc80hhLHQSxkx6I.roa
Signing time: Fri 02 Jan 2026 16:21:39 +0000
ROA not before: Fri 02 Jan 2026 16:21:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216227
IP address blocks: 217.65.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:c1:de:41:98:9a:7f:ac:5a:84:57:94:e8:42:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
Validity
Not Before: Jan 2 16:21:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd86dee62d1a6cce4e29cf348612c7412c64c7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:68:d2:4e:83:0e:cb:51:b5:c5:73:42:a8:
e5:3b:b7:41:df:93:15:26:85:c0:31:be:02:5f:17:
4c:d9:0c:3e:e5:d5:4d:3a:fa:8a:a6:2d:d9:dd:e7:
ad:45:5f:88:00:96:db:b8:5f:b2:6f:fb:9f:6d:cc:
aa:23:fa:14:ed:ed:aa:a0:7b:bc:d3:e9:ce:36:5f:
ff:c0:db:c9:99:ac:ef:7f:46:17:fc:4c:55:0d:1f:
95:c6:40:de:4e:d0:f7:a0:d0:b8:85:d7:21:ec:fd:
a4:2e:2e:78:16:a2:3f:4c:8b:8f:a8:40:1f:d5:34:
07:47:45:d0:ab:94:71:16:ac:16:8e:a7:02:db:66:
dd:59:fa:cf:31:35:f7:7f:d2:1d:9c:37:bc:54:f6:
cb:07:6e:a7:41:3e:52:d4:89:05:4a:57:77:70:08:
fa:ac:28:5d:2e:62:43:d2:23:b6:90:c9:da:59:d5:
1c:dd:5c:24:b0:8a:c8:33:74:e3:20:73:b4:e1:19:
02:02:2c:b2:e9:56:1a:8f:f1:cf:b1:f1:54:ba:5d:
5e:ec:5d:f6:24:b9:1c:26:02:63:7e:52:9f:40:8c:
7e:ff:ef:78:61:24:a2:af:11:c1:f7:cb:10:cb:be:
06:d2:36:2e:a1:f3:da:e0:02:17:ed:eb:25:94:17:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:86:DE:E6:2D:1A:6C:CE:4E:29:CF:34:86:12:C7:41:2C:64:C7:A2
X509v3 Authority Key Identifier:
keyid:03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/vYbe5i0abM5OKc80hhLHQSxkx6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.65.68.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:5f:7e:ac:bc:cd:72:4b:f3:05:df:26:23:9d:91:49:71:95:
a2:3a:79:72:26:84:d7:3f:c4:df:83:10:ed:8e:c6:88:32:1e:
a9:f9:70:ad:87:08:7d:b9:1e:ef:2b:3d:c9:7e:46:01:44:af:
62:f0:eb:2a:d3:a8:97:3e:44:a8:5d:b8:a9:71:02:8a:98:9a:
a8:04:f7:73:87:d7:e8:cf:26:a2:d8:93:cb:f1:27:89:2f:a4:
3e:c2:c1:c0:6a:bc:e4:2b:8e:c2:fb:36:aa:00:19:a0:7f:e7:
11:e6:08:03:6f:c0:f9:fb:02:ac:b5:c3:e8:c8:d4:22:68:9d:
2d:2b:44:f4:11:c2:3a:4c:a0:66:59:69:1c:a4:7c:fa:8e:1f:
82:01:c0:66:07:db:b5:cc:e0:89:ba:2f:a3:16:c6:e3:5c:83:
3c:0a:78:e1:62:14:3a:7e:95:9b:69:b8:e8:c7:09:1c:9f:ff:
f3:3d:a4:0b:05:55:f9:97:67:35:42:c9:ee:e1:82:7d:95:5b:
87:d7:1a:f2:0e:85:3e:b7:32:99:95:9e:1b:ef:ae:63:0a:31:
f1:88:f6:0d:d9:b2:5e:83:c5:58:36:09:84:92:7c:57:e1:36:
71:30:4c:93:61:a2:b1:be:79:85:2f:c9:0c:fa:69:5f:8d:8d:
61:52:ed:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:18:33 2026 by rpki-client