Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/QD2dvPdWfK0O2jnmQm1o8BFTC1U.roa
File: QD2dvPdWfK0O2jnmQm1o8BFTC1U.roa (raw, json)
Hash identifier: wIuVvJa+v7tYb0infXnJ+5hXCooL4P5fibEI5ilHCno=
Subject key identifier: 40:3D:9D:BC:F7:56:7C:AD:0E:DA:39:E6:42:6D:68:F0:11:53:0B:55
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A0580BA2D98F85B540B943189B4FAB3BCE
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/QD2dvPdWfK0O2jnmQm1o8BFTC1U.roa
Signing time: Mon 31 Aug 2026 13:39:12 +0000
ROA not before: Mon 31 Aug 2026 13:39:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 45.15.75.0/24 maxlen: 24
45.140.17.0/24 maxlen: 24
77.83.95.0/24 maxlen: 24
92.119.128.0/24 maxlen: 24
92.119.130.0/24 maxlen: 24
93.157.105.0/24 maxlen: 24
194.169.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:0b:a2:d9:8f:85:b5:40:b9:43:18:9b:4f:ab:3b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Aug 31 13:39:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=403d9dbcf7567cad0eda39e6426d68f011530b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:ad:58:de:fd:ed:38:74:f1:90:ef:89:b8:
f3:5f:25:fc:c9:bf:5c:46:99:37:b1:8f:e2:02:36:
ae:b2:9a:df:41:01:e3:e1:e2:43:a7:ac:4c:1b:dd:
8f:ae:4a:ec:d4:b3:93:8d:c7:dc:8f:96:93:f1:36:
40:65:2e:7d:d7:12:59:40:bd:52:cb:98:36:92:f2:
8c:2e:d8:41:f0:1d:93:31:93:48:84:d9:dd:87:67:
00:59:f6:b9:9b:52:7c:b0:12:d6:15:29:6d:6b:f0:
8b:fd:a7:2b:11:3a:33:e4:25:52:d7:c6:40:71:a4:
86:dc:d3:bb:e8:e7:2a:9d:40:74:95:92:81:86:c8:
d7:79:40:37:c8:ce:3b:e2:3b:e6:b0:5a:7c:4b:d9:
c7:f6:d3:58:ec:94:92:5e:63:96:ac:37:04:10:16:
f1:54:62:1f:49:02:89:97:6a:96:b4:84:dd:cd:8b:
10:64:68:26:dc:73:8a:ef:54:39:89:1f:0e:e8:5c:
22:6c:da:b8:1f:77:1e:67:41:d1:1a:2f:cc:fb:d1:
ff:a7:f0:66:14:b5:85:19:2d:a2:fd:e7:55:86:7c:
db:bf:22:81:29:21:9e:f8:02:a7:57:26:d0:cf:b8:
6c:d5:cd:5d:06:78:db:7e:ac:b4:f7:92:7c:3e:b6:
f7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3D:9D:BC:F7:56:7C:AD:0E:DA:39:E6:42:6D:68:F0:11:53:0B:55
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/QD2dvPdWfK0O2jnmQm1o8BFTC1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.75.0/24
45.140.17.0/24
77.83.95.0/24
92.119.128.0/24
92.119.130.0/24
93.157.105.0/24
194.169.161.0/24
Signature Algorithm: sha256WithRSAEncryption
37:44:af:12:f7:c9:49:a1:9b:99:16:d2:cc:e4:bf:42:09:9a:
28:88:69:dc:f4:7d:9a:92:e6:c0:a8:92:4a:3e:90:8b:39:fe:
b3:e3:8d:28:42:ff:7f:69:bf:92:da:0e:3c:80:26:e7:44:84:
23:5a:01:95:b8:7b:c0:41:80:e7:19:09:ed:35:f2:79:16:d4:
68:f3:c7:65:1c:88:80:b3:21:41:fa:3e:de:94:9c:40:11:57:
81:18:b2:fd:cf:bb:3f:22:65:8f:6e:66:f1:b2:60:8c:a9:19:
3c:93:9b:75:74:a5:37:04:e4:a6:bd:74:a8:11:35:bd:47:7a:
aa:85:2e:76:4a:6b:86:60:32:17:a1:05:bc:81:39:f1:67:3e:
c4:ae:83:72:24:88:a7:ce:2f:ba:c1:32:9d:64:19:09:01:48:
f7:23:34:f1:2c:e5:3e:70:ff:13:f3:fb:8b:ec:ff:bb:98:9d:
cc:b5:08:03:d9:1b:6f:90:cd:7f:19:89:23:ea:e9:1d:74:6d:
f8:9b:98:b2:f5:dc:8a:56:7a:b7:0c:dc:a5:3a:1f:8f:7d:42:
97:ed:bd:18:39:59:cd:fe:e8:05:0c:98:3a:44:02:db:1a:c0:
30:c4:d5:e9:78:16:31:8b:3a:d0:23:30:ae:f7:fc:56:eb:2a:
49:10:fa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:34 2026 by rpki-client