Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/BLbEGnHlodnp79q9soB7X47HKdw.roa
File: BLbEGnHlodnp79q9soB7X47HKdw.roa (raw, json)
Hash identifier: YLxcybOGPbSncNQUcEA27OYyYsdtahC0bwUM37mtR0U=
Subject key identifier: 04:B6:C4:1A:71:E5:A1:D9:E9:EF:DA:BD:B2:80:7B:5F:8E:C7:29:DC
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019E07E87B4F1C08D254EB4AD8CEBDF28C87
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/BLbEGnHlodnp79q9soB7X47HKdw.roa
Signing time: Fri 08 May 2026 14:05:36 +0000
ROA not before: Fri 08 May 2026 14:05:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 77.111.117.0/24 maxlen: 24
77.111.123.0/24 maxlen: 24
92.61.106.0/24 maxlen: 24
92.61.109.0/24 maxlen: 24
185.112.241.0/24 maxlen: 24
185.112.242.0/24 maxlen: 24
185.112.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:07:e8:7b:4f:1c:08:d2:54:eb:4a:d8:ce:bd:f2:8c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: May 8 14:05:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04b6c41a71e5a1d9e9efdabdb2807b5f8ec729dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:44:f5:ac:fa:d1:2d:2e:8f:8f:b5:88:ef:
72:70:2b:81:06:90:ed:33:f0:20:fe:7d:7f:9d:61:
d4:f8:09:53:82:06:2f:6c:fc:cf:15:06:ce:05:ae:
cd:f5:95:a5:c4:d4:a8:28:b3:d0:a8:11:3f:76:b9:
a0:f1:24:cb:2e:bd:a8:70:e7:e2:b0:27:70:dc:6c:
40:68:11:f4:16:e1:c0:06:a3:8e:40:b1:ca:4a:53:
75:e0:1f:a7:41:ac:2f:f5:49:19:3c:ca:78:7d:7b:
74:fc:9b:2c:98:41:e1:9b:b2:66:84:2b:19:7d:62:
17:5e:f7:72:66:cd:78:c0:36:d3:5a:54:95:24:4d:
c7:a8:39:3b:04:1c:7e:22:43:1a:39:95:a2:b1:dc:
34:e5:4b:08:8d:62:97:35:9d:ba:0f:0a:65:07:e8:
bb:f6:52:8e:5f:f4:76:f0:1e:1e:a9:6c:93:f1:1d:
e6:5c:6f:24:20:58:e9:41:0a:65:39:2f:1d:ea:e6:
63:f1:fc:6d:7b:e4:2c:96:78:03:db:03:ba:5c:52:
43:71:e4:09:2a:f9:a7:03:24:fa:5c:fa:b8:e7:e0:
35:4a:00:12:86:8a:6b:31:e7:65:c4:71:1a:b7:b1:
0c:d5:b8:c0:89:1f:c7:03:37:ba:c6:72:0e:4a:98:
0d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B6:C4:1A:71:E5:A1:D9:E9:EF:DA:BD:B2:80:7B:5F:8E:C7:29:DC
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/BLbEGnHlodnp79q9soB7X47HKdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.117.0/24
77.111.123.0/24
92.61.106.0/24
92.61.109.0/24
185.112.241.0-185.112.243.255
Signature Algorithm: sha256WithRSAEncryption
2c:52:ba:88:69:f9:b4:cd:ca:c3:43:50:38:ec:25:bb:25:30:
f9:26:a4:c5:13:03:9e:a4:ba:5c:34:45:eb:b9:53:ec:e2:62:
9c:7b:4a:1e:36:67:c6:ce:3c:e6:16:e7:35:ea:aa:95:a2:cf:
a4:02:e5:2b:21:3a:71:91:70:5c:0d:68:7d:a4:ea:23:06:b6:
65:80:42:d0:8b:6d:65:ed:14:a7:b3:98:09:20:1b:81:5f:a9:
aa:87:58:8d:cf:bc:4f:f8:d8:25:e3:a0:1f:02:04:8e:1d:15:
27:b9:ad:0a:9e:cc:2c:0e:be:e7:a7:89:4f:88:18:16:e1:a7:
34:80:10:da:c0:9b:b4:a9:1d:13:72:ad:b9:9f:2d:66:85:76:
b4:e6:25:0a:6f:d1:9d:1d:15:86:41:c2:af:be:2d:22:76:17:
5e:d5:53:a4:f0:ae:64:a4:49:c2:84:97:16:1b:2c:7c:75:2f:
2b:21:3f:89:0a:64:67:0a:47:a0:0a:a6:3e:bb:d0:9b:81:59:
fc:55:76:59:7f:16:79:8f:f3:4e:3e:c5:88:8b:a5:75:73:23:
d3:cf:d3:7e:0d:91:20:27:af:3d:34:7d:9a:2a:d4:19:82:3d:
f5:86:87:70:51:b8:8c:8d:fd:5a:a5:d2:c6:7c:ba:87:49:4e:
a6:f8:d7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:02:50 2026 by rpki-client