Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/i1BXlIEe_jFRkBA9I0Zsn18Gcio.roa
File: i1BXlIEe_jFRkBA9I0Zsn18Gcio.roa (raw, json)
Hash identifier: wmTHl7mVXQ8Oz7ME+o6UUeZF4XOz4I2g5Qr8uQ6hhUI=
Subject key identifier: 8B:50:57:94:81:1E:FE:31:51:90:10:3D:23:46:6C:9F:5F:06:72:2A
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A136E358D0FA09309E4C89AE410448A1A4
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/i1BXlIEe_jFRkBA9I0Zsn18Gcio.roa
Signing time: Tue 13 Oct 2026 20:10:31 +0000
ROA not before: Tue 13 Oct 2026 20:10:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214822
IP address blocks: 45.153.230.0/24 maxlen: 24
194.35.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:e3:58:d0:fa:09:30:9e:4c:89:ae:41:04:48:a1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Oct 13 20:10:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b505794811efe315190103d23466c9f5f06722a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:04:bf:43:42:61:c0:67:ef:9b:49:dc:d3:6f:
f4:3f:fa:e5:fe:b6:8f:b0:b4:b4:03:1d:cc:02:61:
43:f2:7b:25:14:48:18:a5:c4:81:2e:8c:94:af:2f:
b6:e2:86:98:f3:cb:ea:4e:3e:6b:ca:88:f1:1b:16:
a1:8b:2d:4c:12:d7:3e:7c:43:d8:db:5b:f1:be:96:
69:28:86:7e:ff:d0:ff:05:5b:a2:d4:38:77:d8:8f:
4f:88:8c:29:4b:ab:04:82:34:a0:e8:9b:00:41:e3:
ab:e7:3e:31:fb:86:c6:ea:78:bf:42:be:6e:c0:cb:
b9:12:2e:cd:ae:2b:91:82:c6:db:67:7f:45:e6:c8:
0d:c7:6d:e9:17:e2:83:35:ce:d2:7d:84:81:53:bf:
3c:28:c7:bc:90:92:2a:2a:65:1e:fc:b1:3a:91:79:
fc:44:16:9a:6c:93:af:53:19:0f:45:e1:d0:d8:ea:
fa:88:d8:f2:c8:6b:0b:a5:49:82:43:6d:c1:4d:41:
21:20:51:8c:41:74:3f:fb:5b:dd:aa:13:cd:9a:46:
e3:4a:1c:81:aa:c5:80:45:36:6b:6e:bf:49:fc:0f:
1a:02:75:8c:ef:88:2f:23:4e:98:c0:82:8d:3c:c7:
69:e2:38:91:bd:5b:6b:9c:9e:c4:9e:45:ee:8d:ac:
65:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:50:57:94:81:1E:FE:31:51:90:10:3D:23:46:6C:9F:5F:06:72:2A
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/i1BXlIEe_jFRkBA9I0Zsn18Gcio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.230.0/24
194.35.112.0/24
Signature Algorithm: sha256WithRSAEncryption
26:df:5c:c6:0d:ab:65:99:e7:6f:5e:4b:b5:fd:01:59:2d:04:
69:3a:10:1f:64:b6:6b:9c:be:e9:3a:19:18:f6:35:5b:be:09:
52:18:84:96:c7:f8:e6:57:6e:9f:e3:6f:75:e2:f6:3e:60:dc:
7b:3b:91:f4:55:ab:d8:95:52:d1:13:29:e8:4f:b4:77:68:57:
49:99:2d:23:de:d0:80:32:00:ce:5d:d4:e5:c7:d9:3b:a5:d5:
d2:32:3b:f3:36:00:eb:c1:b4:85:a2:66:a4:11:d5:db:25:45:
cb:a3:70:0b:4f:9f:2a:43:b7:59:94:e1:6e:57:f1:69:e0:bc:
b2:c1:9d:6e:eb:31:b1:11:5c:75:30:1b:7f:a1:ed:92:a6:e0:
2f:33:00:32:7a:b1:61:e9:f2:67:12:dc:fb:c8:91:4d:c6:d8:
d4:a3:a2:a1:99:7b:13:98:d9:5e:32:e0:30:73:f5:83:62:7b:
cd:98:9c:a7:e8:8a:6e:36:e1:6d:06:2a:7f:fd:75:17:68:bb:
9a:46:be:31:08:0f:4d:1d:e4:12:d7:ec:19:a3:8d:4b:0d:c0:
9d:03:8c:a8:f4:7c:fc:7f:7a:fe:7a:aa:cd:62:7e:c2:b0:73:
78:61:98:79:11:42:c2:cb:01:e9:5e:f4:a3:9a:2b:28:b2:b2:
d1:33:b5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:35:11 2026 by rpki-client