Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/bya_A4puBY8ZcMoQu4n_j-KniIA.roa
File: bya_A4puBY8ZcMoQu4n_j-KniIA.roa (raw, json)
Hash identifier: Qnp+qZ0rKbMVjnECifAEcvAP55imofsc5AlVKksg0kc=
Subject key identifier: 6F:26:BF:03:8A:6E:05:8F:19:70:CA:10:BB:89:FF:8F:E2:A7:88:80
Certificate issuer: /CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Certificate serial: 019F867E55CC060BF7376D630C65A25785E4
Authority key identifier: F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/bya_A4puBY8ZcMoQu4n_j-KniIA.roa
Signing time: Tue 21 Jul 2026 21:04:14 +0000
ROA not before: Tue 21 Jul 2026 21:04:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10753
IP address blocks: 45.155.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:7e:55:cc:06:0b:f7:37:6d:63:0c:65:a2:57:85:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Validity
Not Before: Jul 21 21:04:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f26bf038a6e058f1970ca10bb89ff8fe2a78880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:d0:dd:cc:66:bc:ad:ec:25:14:b9:55:ed:
bc:83:a7:2e:a2:82:20:50:a5:07:93:4c:96:ef:e8:
d9:61:7f:13:3a:de:e5:52:86:de:87:fe:1d:44:22:
ea:28:ed:85:bc:f6:d8:f8:e3:5c:6a:ea:e3:95:41:
1d:8c:73:49:31:c5:d0:7d:3a:80:32:4a:d4:66:81:
bc:0c:b5:1a:c0:55:6d:22:14:87:93:d1:d3:3b:28:
31:5f:1c:5d:95:ac:4a:c3:cf:48:67:fa:1b:56:93:
29:b8:9a:ee:f5:5c:a8:fa:c6:4c:54:68:b7:31:97:
f6:db:b9:4a:2b:9c:e8:49:63:42:4e:ce:01:72:27:
a5:38:b3:fd:d8:77:da:80:ce:52:2c:f5:d3:eb:d3:
03:4e:72:56:0c:8a:28:7b:46:04:f8:58:ad:bb:6a:
ea:07:77:e1:13:bc:7f:69:62:ec:3b:11:1d:67:ed:
09:3f:20:b5:00:3f:bc:93:8e:0d:b4:05:2e:43:16:
19:b6:38:53:bd:7c:90:cf:f9:1c:b8:7c:64:fd:22:
c8:88:59:63:fc:5b:cf:7c:ad:21:5b:eb:0c:e5:a1:
f9:b6:e0:39:1c:ce:18:1d:41:6f:1e:66:6b:b5:05:
6e:c7:ee:08:c2:55:b0:91:a3:b2:a6:7a:73:59:98:
ec:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:26:BF:03:8A:6E:05:8F:19:70:CA:10:BB:89:FF:8F:E2:A7:88:80
X509v3 Authority Key Identifier:
keyid:F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/bya_A4puBY8ZcMoQu4n_j-KniIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.196.0/22
Signature Algorithm: sha256WithRSAEncryption
84:ed:12:df:0a:28:cc:5c:4b:c5:19:e5:a5:ed:12:e0:14:b5:
ed:cd:2a:a0:3f:16:cd:19:5d:7b:8e:78:49:76:c4:b2:37:74:
42:2a:a2:b2:75:a1:fd:bf:b4:82:a7:d2:e3:8c:e8:ce:2e:ed:
44:d7:cb:35:ad:f7:c0:0e:6c:38:85:94:0b:aa:15:9b:1f:57:
80:4f:90:c0:9e:29:4c:88:65:96:f0:c0:23:fb:37:a3:fc:12:
a4:06:43:cb:e6:b6:bd:52:3b:a5:6a:a6:3e:d3:88:2d:ab:7e:
00:d8:4e:6f:b0:ff:53:ee:5c:2e:bd:d2:fb:e1:32:0b:eb:b3:
1c:da:9b:48:03:fe:74:99:a3:79:d3:75:4c:1a:90:93:e4:0d:
45:26:94:7e:8c:0c:61:90:7d:b7:02:69:5f:bb:83:a0:0b:5f:
a6:40:e9:11:34:cb:13:1e:12:13:70:d3:45:b0:e5:a8:9c:65:
f6:2d:53:9e:14:94:5c:38:e9:0c:4e:38:e9:fe:3e:16:ff:ce:
76:5b:44:91:5b:14:b6:f3:84:81:20:64:6c:37:4f:7c:ba:6c:
37:61:eb:a2:c7:70:a0:5b:1c:10:14:7c:d0:71:6a:a1:8a:a6:
a3:c7:46:a2:91:f8:5e:61:45:dd:69:c7:2c:94:81:d4:bf:c6:
aa:87:55:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:44 2026 by rpki-client