Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/f2D3Bw3pxN8JTeuNEO3Rt5lhDo8.roa
File: f2D3Bw3pxN8JTeuNEO3Rt5lhDo8.roa (raw, json)
Hash identifier: DkXmHOL52P/30rViWVn8qmLEYIXC6956b8biVL/XhPQ=
Subject key identifier: 7F:60:F7:07:0D:E9:C4:DF:09:4D:EB:8D:10:ED:D1:B7:99:61:0E:8F
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A0C92594D64B91A47CEBF4BE5E626621D9
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/f2D3Bw3pxN8JTeuNEO3Rt5lhDo8.roa
Signing time: Tue 22 Sep 2026 12:44:38 +0000
ROA not before: Tue 22 Sep 2026 12:44:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 45.15.75.0/24 maxlen: 24
77.83.95.0/24 maxlen: 24
92.119.128.0/24 maxlen: 24
92.119.130.0/24 maxlen: 24
93.157.105.0/24 maxlen: 24
194.169.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 03:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:25:94:d6:4b:91:a4:7c:eb:f4:be:5e:62:66:21:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Sep 22 12:44:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f60f7070de9c4df094deb8d10edd1b799610e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:84:8e:ca:3c:a2:e9:d4:79:9f:03:c0:af:c1:
cd:04:51:c7:bf:5d:02:b3:53:ca:10:1e:f6:1d:ac:
1d:08:41:29:1c:cd:4f:6f:cc:f3:7d:e7:b1:ed:c4:
0c:1e:3d:e6:8d:f2:04:31:12:e6:a0:a5:7d:84:c5:
52:3f:99:e1:b9:51:ef:8c:e0:89:bd:a6:50:b9:4b:
6b:96:6d:b7:39:45:ac:ca:1d:6f:15:6f:36:a7:ea:
e6:c2:82:3f:aa:fe:12:de:c1:e6:bd:4d:7f:7b:99:
6e:9c:fd:0d:d7:23:dc:b8:bd:70:2f:f9:14:c8:1d:
34:e0:fd:17:a3:8a:8c:e3:32:86:04:a0:9f:58:f2:
cd:a3:cf:81:11:af:40:90:b0:73:f0:4b:5f:06:ba:
e3:3f:a4:b9:fb:9d:81:5e:eb:6c:8d:6e:56:fd:8e:
7d:b5:1f:3b:5f:26:cb:f2:e7:3e:06:bf:34:b3:8f:
b7:4c:b9:84:f4:17:f6:22:4d:b0:15:2c:ff:88:04:
c1:54:74:ae:03:78:46:96:bf:86:df:cc:23:83:de:
f5:08:40:dc:df:f5:62:05:fe:48:4c:06:01:7a:05:
d0:44:6f:e5:15:07:59:e4:a0:4a:d8:76:ff:99:9d:
09:ea:12:58:cf:d0:cc:2e:ba:85:2d:a2:76:e7:ab:
b7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:60:F7:07:0D:E9:C4:DF:09:4D:EB:8D:10:ED:D1:B7:99:61:0E:8F
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/f2D3Bw3pxN8JTeuNEO3Rt5lhDo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.75.0/24
77.83.95.0/24
92.119.128.0/24
92.119.130.0/24
93.157.105.0/24
194.169.161.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:75:9a:39:8f:0c:22:9e:f9:b2:43:70:90:1c:0e:36:61:9e:
7f:e4:68:83:8a:69:21:fb:c8:ca:79:76:c5:65:6d:62:33:b8:
02:33:7f:cc:6e:6c:f4:77:bf:12:f7:2c:66:52:5c:f9:fb:c8:
d7:44:35:bf:51:11:2a:a1:f2:75:d3:86:e9:63:58:06:0b:1f:
af:c4:8f:dd:19:56:01:15:50:c5:be:5b:06:bf:a4:0a:1c:b8:
98:13:b8:2c:b4:93:6a:99:38:8e:8d:0d:99:78:42:ef:3b:95:
97:06:6d:b9:66:65:44:9a:34:9d:d1:e8:97:87:7e:93:15:cd:
77:12:fc:df:49:e7:bb:eb:87:d5:88:52:b4:26:12:02:89:eb:
19:6d:f6:c0:f2:fb:4f:69:50:e3:35:96:ad:56:f8:3d:a9:a5:
32:40:67:47:b9:0a:19:0c:1b:d3:31:69:42:78:19:9c:6c:73:
83:5a:d7:32:fa:22:ac:70:19:8a:3f:f4:d2:5f:be:1e:47:c7:
42:10:17:77:27:49:22:0b:e2:3b:bf:89:75:da:d4:53:c9:15:
bf:e0:55:b1:de:30:3e:f7:97:92:ba:1f:ab:d9:65:b0:8c:92:
52:4c:db:fa:75:f7:1d:25:f0:f8:ee:7f:45:94:6f:19:86:e8:
5c:47:97:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:48:57 2026 by rpki-client