Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/1-4jIYGlMyH4IfVeZCjrS8RoIymI.roa
File: 1-4jIYGlMyH4IfVeZCjrS8RoIymI.roa (raw, json)
Hash identifier: 9vLCfOVym6ONC73dgIHovyVc8T8ocAbNlOXEmg5WygY=
Subject key identifier: FB:88:C8:60:69:4C:C8:7E:08:7D:57:99:0A:3A:D2:F1:1A:08:CA:62
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A0581D07FE39C48FA5DDACAF451DA61E8F
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/1-4jIYGlMyH4IfVeZCjrS8RoIymI.roa
Signing time: Mon 31 Aug 2026 13:58:12 +0000
ROA not before: Mon 31 Aug 2026 13:58:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 2.56.139.0/24 maxlen: 24
45.140.16.0/24 maxlen: 24
77.83.83.0/24 maxlen: 24
92.119.229.0/24 maxlen: 24
194.93.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:1d:07:fe:39:c4:8f:a5:dd:ac:af:45:1d:a6:1e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Aug 31 13:58:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb88c860694cc87e087d57990a3ad2f11a08ca62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cb:44:b6:de:42:37:8f:6e:c0:1b:46:b4:a0:
0c:e7:c6:75:3b:c2:f6:df:e0:7a:50:b8:36:01:92:
08:19:0f:7d:5c:4e:16:bb:9a:3f:f1:ea:83:41:c5:
6b:1c:66:1f:bf:de:58:d5:7b:3a:f4:0c:cf:a6:ce:
db:ad:ad:79:3f:08:d4:ad:ff:70:d5:a1:df:41:ec:
f9:fd:36:76:10:5a:64:9f:b9:95:be:b7:45:ca:eb:
78:f2:d9:64:80:05:4a:65:5f:cd:2b:dc:fc:a4:6e:
ba:82:75:c7:21:46:cd:10:ff:e9:c8:f0:20:4d:ed:
84:67:9b:45:ee:6f:71:36:f6:49:13:37:27:f9:4a:
c9:42:18:4d:30:8c:18:5f:8f:42:0e:b6:8a:a3:4d:
e3:7e:c8:f8:ff:56:59:3a:e4:8c:03:42:f7:04:99:
a1:75:d9:48:ee:68:ca:25:6f:91:9f:77:77:41:31:
52:88:b6:37:74:77:ea:4f:1e:2c:d3:f4:b2:11:d8:
55:68:85:c7:42:fd:f7:e3:ae:a5:8c:fe:1a:ea:43:
7c:6b:36:ab:13:30:81:ef:6c:17:7e:a8:8f:41:a4:
33:b3:bb:87:b5:9d:8b:8c:7e:43:81:a3:5d:81:76:
79:da:36:30:16:a7:fe:c2:9c:5c:32:3d:99:aa:25:
4b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:88:C8:60:69:4C:C8:7E:08:7D:57:99:0A:3A:D2:F1:1A:08:CA:62
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/1-4jIYGlMyH4IfVeZCjrS8RoIymI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.139.0/24
45.140.16.0/24
77.83.83.0/24
92.119.229.0/24
194.93.1.0/24
Signature Algorithm: sha256WithRSAEncryption
17:20:34:dd:98:a0:eb:99:92:4d:43:f4:4b:d3:fa:76:62:7e:
d5:90:05:b0:8e:41:8e:a0:84:a3:6f:43:74:c8:86:8d:3c:37:
9b:37:77:09:7f:a5:5b:de:14:c6:04:2f:be:73:a1:81:17:49:
e0:d4:9d:29:66:f6:bd:51:81:4a:74:0d:04:7f:65:e8:9e:1d:
4d:e3:7f:f4:dd:a4:c7:a9:50:db:bc:be:7f:f4:7d:96:3a:49:
dc:eb:b3:20:f7:bd:ef:02:33:e4:e8:25:ca:89:ae:08:11:ad:
98:bf:11:5e:57:30:45:01:d9:69:5d:60:6c:9d:89:ef:57:3d:
1a:f5:b1:20:1f:7e:37:30:91:75:77:c7:26:78:67:18:a9:e8:
59:ae:91:2c:54:e3:ff:de:e7:8e:7b:70:32:32:bf:1f:50:e2:
8c:c3:1e:34:6c:4e:9e:b4:b5:eb:38:be:fe:95:3a:13:41:30:
e4:45:96:05:e2:f6:7c:68:94:90:ac:62:52:d5:c6:78:6c:6c:
f7:55:27:32:11:d3:06:e7:60:2f:85:4f:13:2c:5e:d5:cd:b5:
7e:d6:f3:0e:b8:98:d2:a9:77:26:cd:2e:52:7c:a4:91:39:4e:
47:b3:d8:b3:00:82:ab:27:2c:b5:39:60:98:98:fa:31:4b:18:
cc:cd:bd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:44 2026 by rpki-client