Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/mWLBjCvgKHfdV-77ANeHoL6j3n0.roa
File: mWLBjCvgKHfdV-77ANeHoL6j3n0.roa (raw, json)
Hash identifier: ciuMbS9okNToV3Bup9QAN/peBqHp/iVl/wSDeU59T0g=
Subject key identifier: 99:62:C1:8C:2B:E0:28:77:DD:57:EE:FB:00:D7:87:A0:BE:A3:DE:7D
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019FEDCBE8CA9566AB4E932096FC8ECDA662
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/mWLBjCvgKHfdV-77ANeHoL6j3n0.roa
Signing time: Mon 10 Aug 2026 22:29:51 +0000
ROA not before: Mon 10 Aug 2026 22:29:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 45.15.74.0/24 maxlen: 24
45.80.221.0/24 maxlen: 24
45.80.222.0/24 maxlen: 24
45.80.223.0/24 maxlen: 24
45.135.132.0/24 maxlen: 24
45.136.68.0/24 maxlen: 24
45.153.231.0/24 maxlen: 24
178.23.185.0/24 maxlen: 24
193.47.32.0/24 maxlen: 24
194.62.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ed:cb:e8:ca:95:66:ab:4e:93:20:96:fc:8e:cd:a6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Aug 10 22:29:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9962c18c2be02877dd57eefb00d787a0bea3de7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ab:b0:30:46:47:64:59:b3:4f:6c:2f:ec:f1:
a2:2c:7b:fa:93:18:aa:0c:cd:54:ce:d4:9b:db:c5:
f0:2e:bc:95:f9:73:2e:63:6a:1e:c9:50:46:f3:6f:
75:c2:e0:1d:d2:ee:ed:bb:8e:7e:49:c2:f8:21:92:
1c:0c:4f:3f:cc:cd:2b:13:7b:a0:15:13:48:ee:e8:
b4:06:20:a2:c6:2c:33:0b:53:dc:20:2b:f5:15:37:
7a:b6:bd:bc:bd:76:26:c3:62:73:8d:5e:50:82:27:
f8:f5:04:b0:1b:0c:b5:76:84:43:83:e6:58:94:88:
05:0e:b1:cd:89:c4:8c:90:50:b0:d0:fe:39:b6:c9:
91:42:9e:88:a4:2c:5c:5f:7e:d5:67:38:b9:52:c5:
2b:fc:32:2c:14:ed:4a:be:cf:e4:c7:1a:97:4f:9d:
dd:0a:b3:6b:cb:ca:2d:38:92:f6:5d:6e:56:ac:9b:
ce:8e:24:57:38:65:ea:8c:af:15:ca:1f:db:c0:e0:
f0:f7:a3:7d:ea:e3:4f:a9:d6:43:cf:21:5e:d7:96:
a8:12:c0:2a:ef:a7:cd:90:a1:17:d7:18:72:22:6d:
e6:e8:b3:a3:52:63:e1:e2:6b:d7:e9:85:fd:7c:6b:
5b:d4:cd:9b:93:ee:ba:5d:38:49:78:85:8d:ae:06:
b3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:62:C1:8C:2B:E0:28:77:DD:57:EE:FB:00:D7:87:A0:BE:A3:DE:7D
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/mWLBjCvgKHfdV-77ANeHoL6j3n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.74.0/24
45.80.221.0-45.80.223.255
45.135.132.0/24
45.136.68.0/24
45.153.231.0/24
178.23.185.0/24
193.47.32.0/24
194.62.18.0/24
Signature Algorithm: sha256WithRSAEncryption
84:e9:73:32:29:5a:a5:a0:12:77:ec:7b:0e:50:58:95:e0:f7:
a3:d4:d9:99:9d:9d:8c:8c:15:93:1a:a0:a6:11:1e:27:83:c4:
0a:a0:4a:ff:1a:b4:b3:8e:d0:73:82:d8:8e:55:0a:b8:13:e9:
4c:f7:30:1b:66:79:5a:8a:6a:94:e4:85:a9:3c:50:86:1b:ef:
39:f4:fb:82:11:85:6b:b4:7b:7d:91:27:40:2d:1a:81:94:71:
1b:a2:cc:3a:06:ac:91:b1:d2:d8:26:2f:31:b4:69:1d:46:9c:
14:54:e9:8c:fa:2b:31:6e:17:a2:74:da:dd:e7:f9:24:f7:5c:
1c:a0:49:16:a9:01:a0:37:40:2a:95:87:48:7e:4a:63:7b:b1:
06:01:f5:b9:6d:dc:3d:cc:48:23:16:ef:23:78:e7:b2:e6:01:
77:1d:e5:93:6d:74:a6:5d:c2:4c:b7:68:9b:cc:fc:bb:bd:8c:
6c:5e:4c:12:de:76:42:67:0c:ce:dc:3b:92:1f:dd:26:8e:dc:
56:09:1f:89:6f:24:55:d1:4f:f2:cb:52:de:a7:5a:33:11:4f:
8e:d5:c1:a0:bc:10:d9:02:41:aa:15:8e:3f:a1:fa:6d:d2:c6:
f5:00:c6:0d:4b:cd:70:fc:ac:58:3d:be:d7:0e:17:f5:ed:c0:
84:35:f7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 14:09:47 2026 by rpki-client