Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/LI1tX22BcDxktbmkqhqFR6e0Mts.roa
File: LI1tX22BcDxktbmkqhqFR6e0Mts.roa (raw, json)
Hash identifier: qrRR4vq3243C50903BtN3UwqSDkuzKi1BjOGRxDP228=
Subject key identifier: 2C:8D:6D:5F:6D:81:70:3C:64:B5:B9:A4:AA:1A:85:47:A7:B4:32:DB
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A0D4C0B7DDB78F4821D2C8C43C2EA98BEC
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/LI1tX22BcDxktbmkqhqFR6e0Mts.roa
Signing time: Thu 24 Sep 2026 18:49:54 +0000
ROA not before: Thu 24 Sep 2026 18:49:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53730
IP address blocks: 45.148.165.0/24 maxlen: 24
185.210.137.0/24 maxlen: 24
193.148.61.0/24 maxlen: 24
193.148.63.0/24 maxlen: 24
194.32.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 19:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:c0:b7:dd:b7:8f:48:21:d2:c8:c4:3c:2e:a9:8b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Sep 24 18:49:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c8d6d5f6d81703c64b5b9a4aa1a8547a7b432db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c9:ed:1e:0f:38:1c:da:3f:dd:96:2b:c1:50:
00:cf:44:a6:95:e6:90:f3:35:ab:1d:57:13:02:07:
85:1c:8a:40:89:23:3f:41:ef:c9:20:f2:6d:c7:fb:
fc:2f:bb:9b:07:37:26:f3:a3:2b:45:e4:a8:fe:e2:
37:f2:c8:06:8f:f7:0a:cf:ad:ce:e4:04:34:c2:2d:
96:bf:2d:b2:b7:b1:9d:cb:b1:6f:62:ac:f4:62:0e:
7d:b8:25:1a:3b:2b:4b:06:ce:03:d5:b0:83:66:f5:
52:52:fb:9b:3d:cc:42:42:15:c9:09:b2:f4:75:03:
28:ff:18:46:2e:cb:c1:1c:fc:dd:bc:30:33:b2:e1:
e1:41:d1:c2:09:be:84:e1:78:82:14:f4:a3:88:44:
b2:17:cf:9a:52:89:bd:13:ee:e7:fd:09:a5:e8:86:
8e:ff:50:bf:27:d5:56:cb:91:1b:f6:4d:fd:b5:48:
91:36:49:f2:bc:0f:a8:2d:37:2f:15:48:cf:35:f2:
5e:db:9f:4a:84:02:16:3a:0c:ab:1e:aa:a0:7e:36:
74:e9:1a:a5:9e:80:1a:01:f4:c2:a3:d8:23:3f:b9:
4b:6d:20:5e:db:15:91:ca:20:d0:e1:bb:31:c7:f9:
17:58:0a:87:ca:a6:00:6e:ef:fa:c2:2f:e8:d3:0a:
b9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8D:6D:5F:6D:81:70:3C:64:B5:B9:A4:AA:1A:85:47:A7:B4:32:DB
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/LI1tX22BcDxktbmkqhqFR6e0Mts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.165.0/24
185.210.137.0/24
193.148.61.0/24
193.148.63.0/24
194.32.127.0/24
Signature Algorithm: sha256WithRSAEncryption
81:59:25:27:5e:24:7a:04:d5:5a:9f:ee:03:bb:b8:ca:33:08:
c6:08:52:aa:f5:ac:13:47:4b:93:23:2c:02:00:2b:d7:02:fe:
89:27:12:c1:6a:33:64:18:c0:a1:85:ad:00:55:c6:a8:49:9f:
cb:f3:94:48:ae:99:36:7b:05:3d:9a:91:c3:09:b4:d9:c4:54:
35:4e:08:eb:b1:16:92:15:dd:f9:fb:a8:db:3a:df:a8:c9:04:
80:3b:f9:e5:a8:e9:c0:6b:c7:f8:dc:73:33:83:d8:be:8c:31:
96:f6:79:73:18:dc:65:98:f4:3e:57:f2:0f:85:53:45:ad:14:
58:0e:97:20:8e:2e:8c:1f:17:68:10:71:1d:96:6e:10:b5:da:
b5:9a:3a:8c:8b:76:98:59:10:5c:5d:33:6b:ca:ef:ec:8e:85:
dc:9b:94:1a:3b:71:a3:5f:d1:14:62:26:1e:ba:ab:41:66:7e:
c3:d0:31:d2:60:10:43:b8:6d:25:38:ec:5c:79:47:9c:04:5c:
fa:50:05:ba:16:da:35:26:7f:56:26:b3:a6:9b:54:2f:b4:2e:
15:f6:9b:ec:9e:8c:97:4c:fb:3e:cc:50:fc:6d:43:91:97:60:
d4:e9:98:83:30:5d:ba:9a:38:fe:3e:13:69:8c:42:6b:4a:5d:
37:4e:d6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:40:07 2026 by rpki-client