Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/n8OxfeHEyP4reU5nL7CDcZylsOw.roa
File: n8OxfeHEyP4reU5nL7CDcZylsOw.roa (raw, json)
Hash identifier: 6DMOG6p0fOnrMF6MiP1HWdgagl4+xJYbz8g7Q287Eh0=
Subject key identifier: 9F:C3:B1:7D:E1:C4:C8:FE:2B:79:4E:67:2F:B0:83:71:9C:A5:B0:EC
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019F394C37F9A6CBA8F0C1524F243CE2319D
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/n8OxfeHEyP4reU5nL7CDcZylsOw.roa
Signing time: Mon 06 Jul 2026 21:18:44 +0000
ROA not before: Mon 06 Jul 2026 21:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 45.140.16.0/24 maxlen: 24
77.83.83.0/24 maxlen: 24
92.119.229.0/24 maxlen: 24
194.93.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:4c:37:f9:a6:cb:a8:f0:c1:52:4f:24:3c:e2:31:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jul 6 21:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fc3b17de1c4c8fe2b794e672fb083719ca5b0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d0:bb:36:73:e7:99:3d:72:87:7a:27:8e:03:
77:0e:da:76:08:7c:4f:0d:c3:5a:bb:b5:49:9e:5d:
68:72:13:d8:ee:eb:f0:b1:3f:99:20:75:db:f8:8b:
da:00:38:c7:59:a2:0e:0f:72:a5:c9:3c:27:21:71:
83:ac:c0:fb:f8:a3:23:49:94:60:97:88:56:0a:57:
c6:5f:14:95:37:c1:2f:6c:53:b8:06:db:3f:8e:22:
4a:6c:67:09:77:20:af:d1:27:5a:cc:6f:8a:fe:d4:
17:b6:c1:96:db:ce:c6:d1:47:1a:59:af:cf:ce:dd:
da:1c:59:47:ff:13:45:4c:7e:bc:de:60:87:c3:e3:
4c:f7:e4:b5:3f:fd:86:22:e3:54:ad:0c:36:2c:c3:
b3:3a:85:3e:57:60:52:9d:c1:3c:a4:d3:31:48:37:
ec:a3:25:a8:8b:c5:c5:d6:c5:e9:e3:22:19:59:ac:
e8:f7:00:90:8a:af:a3:10:d5:16:7e:24:6c:f0:82:
9b:a4:2e:58:6e:b4:ef:d2:45:c4:22:26:43:1d:4f:
38:f0:dd:63:ee:e5:e0:f3:26:df:53:bb:1f:5d:56:
cd:ac:4f:21:fc:99:5b:76:99:bd:85:da:d2:a2:31:
ac:e5:14:dc:fc:24:05:2f:18:07:91:70:cb:cd:4d:
9b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C3:B1:7D:E1:C4:C8:FE:2B:79:4E:67:2F:B0:83:71:9C:A5:B0:EC
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/n8OxfeHEyP4reU5nL7CDcZylsOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.16.0/24
77.83.83.0/24
92.119.229.0/24
194.93.1.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f2:5a:f6:2e:c7:4f:65:f2:d7:e3:8b:09:7a:66:b9:ed:40:
b3:d7:e0:a3:b0:0c:a7:fb:d0:b1:9d:64:3d:df:44:6d:39:3a:
23:35:4d:80:7c:0f:16:27:f6:58:04:a8:b1:5f:ee:c4:ab:60:
61:91:d9:30:b1:c7:4b:22:0d:80:bb:58:66:3b:44:82:c0:8b:
b0:a6:3a:60:58:39:5c:ae:59:87:f3:3d:ce:b0:a6:c8:cc:e6:
17:79:b4:ea:30:34:d2:1a:82:a0:2f:f1:50:69:30:73:df:12:
76:bd:48:b9:e8:93:07:fe:33:74:40:fe:6c:16:e3:3f:63:97:
db:f9:24:77:cf:6e:92:58:dc:cf:45:b0:f7:07:40:32:1f:78:
65:a4:40:39:a0:d2:b8:c5:3b:10:64:89:29:f3:ac:b5:37:f0:
b6:a7:f9:27:1e:66:0c:1b:89:e4:00:a6:70:9d:77:aa:00:28:
12:fe:68:61:ac:6d:c2:5b:1b:8b:61:85:40:8b:3d:d7:2b:bd:
43:a6:45:3f:aa:60:7d:3f:5b:02:36:a2:10:68:b3:2c:e8:ce:
42:c9:82:2b:09:ac:cb:71:3c:56:82:b4:d6:dc:9e:89:b8:51:
ae:82:d0:03:b3:10:3b:47:85:28:2f:d2:b8:63:84:10:2a:8d:
2f:d8:90:f1
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ85TDf5psuo8MFSTyQ84jGdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjYwNzA2MjExODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmMzYjE3ZGUxYzRjOGZlMmI3OTRlNjcyZmIwODM3MTljYTViMGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntC7NnPnmT1yh3onjgN3Dtp2CHxP
DcNau7VJnl1ochPY7uvwsT+ZIHXb+IvaADjHWaIOD3KlyTwnIXGDrMD7+KMjSZRg
l4hWClfGXxSVN8EvbFO4Bts/jiJKbGcJdyCv0SdazG+K/tQXtsGW287G0UcaWa/P
zt3aHFlH/xNFTH683mCHw+NM9+S1P/2GIuNUrQw2LMOzOoU+V2BSncE8pNMxSDfs
oyWoi8XF1sXp4yIZWazo9wCQiq+jENUWfiRs8IKbpC5YbrTv0kXEIiZDHU848N1j
7uXg8ybfU7sfXVbNrE8h/Jlbdpm9hdrSojGs5RTc/CQFLxgHkXDLzU2biwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJ/DsX3hxMj+K3lOZy+wg3GcpbDsMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvbjhPeGZlSEV5UDRyZVU1bkw3Q0RjWnlsc093LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYwQAwQA
TVNTAwQAXHflAwQAwl0BMA0GCSqGSIb3DQEBCwUAA4IBAQBX8lr2LsdPZfLX44sJ
ema57UCz1+CjsAyn+9CxnWQ930RtOTojNU2AfA8WJ/ZYBKixX+7Eq2BhkdkwscdL
Ig2Au1hmO0SCwIuwpjpgWDlcrlmH8z3OsKbIzOYXebTqMDTSGoKgL/FQaTBz3xJ2
vUi56JMH/jN0QP5sFuM/Y5fb+SR3z26SWNzPRbD3B0AyH3hlpEA5oNK4xTsQZIkp
86y1N/C2p/knHmYMG4nkAKZwnXeqACgS/mhhrG3CWxuLYYVAiz3XK71DpkU/qmB9
P1sCNqIQaLMs6M5CyYIrCazLcTxWgrTW3J6JuFGugtADsxA7R4UoL9K4Y4QQKo0v
2JDx
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:25 2026 by rpki-client