Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/61gBZtcgKDDV5EWmXlyfCZpD_K8.roa
File: 61gBZtcgKDDV5EWmXlyfCZpD_K8.roa (raw, json)
Hash identifier: KB8SkftlgYXLwrct6KuaJs6UYkFovP49MJZLPbx5lOc=
Subject key identifier: EB:58:01:66:D7:20:28:30:D5:E4:45:A6:5E:5C:9F:09:9A:43:FC:AF
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019F19117D8D2E1CB7CA8DCA3DE4FA5E6F93
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/61gBZtcgKDDV5EWmXlyfCZpD_K8.roa
Signing time: Tue 30 Jun 2026 15:06:44 +0000
ROA not before: Tue 30 Jun 2026 15:06:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34872
IP address blocks: 45.154.97.0/24 maxlen: 32
45.154.99.0/24 maxlen: 32
62.3.50.0/24 maxlen: 32
194.28.96.0/24 maxlen: 32
194.28.98.0/23 maxlen: 32
2a0c:b640::/32 maxlen: 128
2a0c:b641::/44 maxlen: 128
2a0c:b641:10::/44 maxlen: 128
2a0c:b641:50::/44 maxlen: 128
2a0c:b641:60::/44 maxlen: 128
2a0c:b641:530::/44 maxlen: 128
2a0c:b641:5e0::/44 maxlen: 48
2a0c:b641:660::/44 maxlen: 44
2a0c:b641:6d0::/44 maxlen: 128
2a0c:b641:70f::/48 maxlen: 128
2a0c:b641:730::/44 maxlen: 128
2a0c:b641:820::/44 maxlen: 128
2a0c:b641:910::/44 maxlen: 128
2a0f:8400::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:11:7d:8d:2e:1c:b7:ca:8d:ca:3d:e4:fa:5e:6f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jun 30 15:06:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb580166d7202830d5e445a65e5c9f099a43fcaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:b4:1a:3a:b4:96:95:3a:a9:15:f3:64:41:
b6:6d:d8:3e:f8:1f:5e:82:d3:be:7b:82:4b:b2:0a:
94:36:b7:aa:b3:ae:3a:09:c1:d5:e5:69:c2:29:14:
99:82:bb:f5:ea:24:d6:57:1c:f1:a8:de:77:66:d7:
9e:e9:47:06:4a:0d:e1:82:3c:ab:26:76:65:d6:ab:
bc:21:ac:c6:de:ce:d4:f4:49:3c:dc:96:5a:07:28:
54:2e:0a:4e:3e:b7:49:f2:95:fe:d0:b8:fc:fb:9d:
fa:58:18:82:43:03:01:cc:16:f7:19:b8:1a:5e:c9:
44:f2:70:eb:6e:09:ab:76:2f:75:12:e5:68:c7:c5:
f2:c6:ba:89:92:6e:d0:c7:d6:01:8c:9d:0f:14:ba:
2e:b0:5e:b8:a3:ec:db:54:dc:dc:08:19:09:b5:70:
00:5a:0d:f7:7b:fb:94:a6:35:6f:a8:fa:fa:20:7c:
b5:e9:4e:a7:10:05:ad:2e:ba:86:14:7c:4a:17:c2:
0e:5d:7b:4a:33:fe:4f:71:28:12:98:2a:bb:b7:92:
73:5c:04:8f:31:d3:02:dc:80:d4:01:d6:e7:fc:df:
2b:33:90:55:d6:6e:9a:26:c3:89:d8:db:19:48:d8:
9b:86:3a:d5:24:07:d9:99:db:f0:1d:f6:fb:e6:07:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:58:01:66:D7:20:28:30:D5:E4:45:A6:5E:5C:9F:09:9A:43:FC:AF
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/61gBZtcgKDDV5EWmXlyfCZpD_K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.97.0/24
45.154.99.0/24
62.3.50.0/24
194.28.96.0/24
194.28.98.0/23
IPv6:
2a0c:b640::-2a0c:b641:1f:ffff:ffff:ffff:ffff:ffff
2a0c:b641:50::-2a0c:b641:6f:ffff:ffff:ffff:ffff:ffff
2a0c:b641:530::/44
2a0c:b641:5e0::/44
2a0c:b641:660::/44
2a0c:b641:6d0::/44
2a0c:b641:70f::/48
2a0c:b641:730::/44
2a0c:b641:820::/44
2a0c:b641:910::/44
2a0f:8400::/32
Signature Algorithm: sha256WithRSAEncryption
19:30:04:9e:bd:a1:db:34:f3:1c:2f:7f:bd:f0:bc:7d:66:1b:
26:ed:db:b3:75:8a:7d:07:10:aa:76:fe:8e:77:f9:04:79:d9:
34:63:a8:13:4f:8f:29:57:8d:25:3b:d7:31:56:18:e6:69:5d:
d7:c6:98:45:6e:47:ad:cd:8d:2c:a3:16:c0:bb:41:65:00:78:
85:0c:89:ee:44:e3:b2:1c:16:e1:42:b1:a0:ef:57:62:f2:f3:
ef:29:91:f9:d6:3a:cf:b0:59:19:87:7d:0f:a8:5a:3a:5e:11:
11:84:08:4b:ff:f4:65:5e:9e:5f:51:c5:06:7b:15:cd:54:69:
33:96:6c:29:52:99:04:2e:6b:5e:b1:88:ae:89:f9:3e:40:2c:
5d:09:73:f4:68:4f:c9:13:77:f1:db:85:16:13:3e:85:8c:98:
7a:02:8e:fb:aa:05:e5:0d:ab:56:6e:60:5c:be:86:0f:5d:18:
28:98:3a:de:f6:04:a7:d7:1c:76:ab:df:53:74:3e:9f:a6:36:
f7:b2:c4:f8:76:9c:67:25:63:e1:42:c3:b4:73:01:12:dc:c4:
d8:dc:b8:09:d6:8b:a2:f1:b5:fe:60:e1:01:69:3b:20:a8:8d:
67:12:28:03:b1:78:89:43:6c:99:3b:94:34:85:cb:d9:3d:e4:
af:12:ea:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:37:06 2026 by rpki-client