Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/AzMTcTdd9JWNLuTXOjHMPyV78S4.roa
File: AzMTcTdd9JWNLuTXOjHMPyV78S4.roa (raw, json)
Hash identifier: W2D/I/+bms3TzVYxIeBfxKxT2oNYJQhdzN/5yhApOxU=
Subject key identifier: 03:33:13:71:37:5D:F4:95:8D:2E:E4:D7:3A:31:CC:3F:25:7B:F1:2E
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A116C75C66E79EEADFBC8E864FBE5388C5
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/AzMTcTdd9JWNLuTXOjHMPyV78S4.roa
Signing time: Wed 07 Oct 2026 14:32:06 +0000
ROA not before: Wed 07 Oct 2026 14:32:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 45.148.165.0/24 maxlen: 24
193.148.61.0/24 maxlen: 24
193.148.63.0/24 maxlen: 24
194.32.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:c7:5c:66:e7:9e:ea:df:bc:8e:86:4f:be:53:88:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Oct 7 14:32:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03331371375df4958d2ee4d73a31cc3f257bf12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:58:02:eb:99:52:ee:b6:d5:2e:eb:5e:c0:
2b:e6:cc:39:7a:71:4e:c0:1a:f5:a6:e7:88:11:99:
38:04:32:ac:dd:59:c8:4d:f3:7a:a1:df:fe:78:72:
1d:39:31:11:3f:7a:1d:13:0a:6f:78:e3:b5:9a:09:
cf:d6:03:03:8a:85:5c:76:cf:94:70:94:0a:e4:c9:
c9:de:92:04:7d:7f:f1:b7:b1:b1:67:a9:00:6f:b2:
b9:61:30:04:a7:0d:2b:1d:14:7c:dc:7c:68:30:e9:
41:5d:54:46:0c:5c:63:ec:76:3f:c6:86:ed:1c:5a:
82:0f:81:d8:40:f9:fb:75:04:ee:12:86:73:eb:09:
94:dc:29:82:e6:4f:41:dd:4e:3f:6d:0b:c2:b7:09:
56:2a:29:35:54:dd:93:ea:3f:ff:e9:46:88:ff:92:
66:bb:01:ff:e6:5f:52:14:fb:48:65:29:c8:35:88:
f6:d9:62:f8:c1:ee:f6:c3:18:5f:3f:20:2c:34:44:
4b:32:1e:ba:d4:e2:24:bc:41:d4:1d:12:f2:03:f5:
4f:9b:35:ba:31:5b:26:55:58:f4:4a:25:4c:c2:9c:
cc:0a:cb:0e:87:9d:fd:cd:85:70:9a:87:a2:2d:01:
c1:4f:36:5e:93:24:68:a6:81:57:05:3e:70:e7:a2:
59:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:33:13:71:37:5D:F4:95:8D:2E:E4:D7:3A:31:CC:3F:25:7B:F1:2E
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/AzMTcTdd9JWNLuTXOjHMPyV78S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.165.0/24
193.148.61.0/24
193.148.63.0/24
194.32.127.0/24
Signature Algorithm: sha256WithRSAEncryption
63:8a:15:af:f0:0c:f4:ef:ec:ac:e2:6a:2c:3d:ce:03:38:50:
b6:43:c3:46:de:08:b9:ec:7d:3a:b1:5f:f1:cc:60:a8:3c:6b:
5e:80:c6:aa:f6:c3:1d:0c:17:95:cc:fc:ae:0e:42:4c:d1:17:
a0:4c:ed:60:36:1a:55:b0:ef:14:c0:f1:03:ad:0f:b1:86:7d:
b9:8a:8b:e0:dc:70:29:19:71:0a:d2:67:f0:f1:61:8b:68:7f:
a4:d2:07:66:90:39:d7:40:5e:ac:ba:88:5a:83:0b:ec:4f:52:
28:38:c6:4c:cd:33:a1:91:27:4d:1f:8b:54:5b:d9:19:03:3c:
40:8d:ac:e7:ec:eb:dd:1b:5d:2c:e1:a6:51:04:1d:e6:0c:13:
94:d6:9a:5c:ef:e2:7d:2a:c2:8a:a7:3f:6c:21:2e:57:c0:ea:
f9:40:8b:4a:df:f5:42:32:9b:ab:17:69:6c:b6:91:dd:34:4a:
9f:84:e4:a2:6f:f7:ac:73:81:a1:49:75:4e:39:65:e4:57:b7:
63:57:bb:e0:3c:16:6c:67:58:a3:a4:7e:55:f3:3d:0e:26:f0:
28:49:46:7f:7b:a0:90:34:3e:31:e0:8f:02:66:a3:a0:1b:8c:
89:c9:a2:88:54:de:b5:66:97:17:5a:d5:7c:c9:26:e4:c0:46:
2d:2e:f7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 16:18:28 2026 by rpki-client