Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/qtm5J7UOBXZa5j_Fq1dYEsOhTmo.roa
File: qtm5J7UOBXZa5j_Fq1dYEsOhTmo.roa (raw, json)
Hash identifier: VwHfQtVTjGYRKy2pNuLlyC3elUsuKFlUgE8LNcO9Jy8=
Subject key identifier: AA:D9:B9:27:B5:0E:05:76:5A:E6:3F:C5:AB:57:58:12:C3:A1:4E:6A
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019E991F0B4568E0DA0C00ECBF5363960836
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/qtm5J7UOBXZa5j_Fq1dYEsOhTmo.roa
Signing time: Fri 05 Jun 2026 18:50:08 +0000
ROA not before: Fri 05 Jun 2026 18:50:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 45.15.75.0/24 maxlen: 24
45.140.17.0/24 maxlen: 24
77.83.95.0/24 maxlen: 24
92.119.128.0/24 maxlen: 24
92.119.130.0/24 maxlen: 24
93.157.105.0/24 maxlen: 24
194.93.3.0/24 maxlen: 24
194.169.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 11:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:99:1f:0b:45:68:e0:da:0c:00:ec:bf:53:63:96:08:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jun 5 18:50:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aad9b927b50e05765ae63fc5ab575812c3a14e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7e:32:de:d3:d2:19:6b:6f:2a:08:b7:6c:ab:
e8:05:ff:e0:ae:68:b9:fa:51:40:7c:25:cc:9c:6e:
4b:de:52:e0:ca:ab:94:c9:60:be:37:61:ca:25:de:
04:cc:83:7c:2d:c2:9e:9c:b2:e2:bf:90:ec:73:52:
07:6e:c3:dc:fb:54:08:8d:11:11:57:4d:64:05:37:
d0:65:f7:b1:ca:0f:02:00:03:eb:fa:4e:80:11:41:
e1:78:2f:03:3f:d0:eb:ca:64:81:13:ea:ba:d6:4a:
59:5a:8f:9a:a0:09:85:59:61:ca:c2:20:0b:68:f2:
46:6c:8d:15:9e:b4:ed:8e:92:57:2d:57:95:ef:11:
17:a0:21:f6:38:2d:64:6c:2a:fb:c8:5c:07:92:c2:
e7:5a:fe:6d:bb:f7:ad:de:f5:b3:b2:59:a8:4c:c3:
81:cd:98:2e:70:b4:4d:a9:42:82:a5:27:0a:75:25:
cb:48:5c:f6:b8:d9:38:98:ad:af:44:d2:1e:0d:cc:
bb:3d:17:0e:4f:48:7f:1b:76:fd:e2:17:5f:7b:56:
6f:75:7b:95:ed:42:e1:2d:bd:61:54:c5:10:64:36:
be:04:d1:f2:36:60:a2:09:2f:37:77:35:43:6d:aa:
da:46:70:13:16:a9:bc:de:24:dc:8a:99:a0:ea:c9:
40:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D9:B9:27:B5:0E:05:76:5A:E6:3F:C5:AB:57:58:12:C3:A1:4E:6A
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/qtm5J7UOBXZa5j_Fq1dYEsOhTmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.75.0/24
45.140.17.0/24
77.83.95.0/24
92.119.128.0/24
92.119.130.0/24
93.157.105.0/24
194.93.3.0/24
194.169.161.0/24
Signature Algorithm: sha256WithRSAEncryption
29:74:b6:b5:7b:42:c7:4d:8a:91:07:c8:54:6c:76:53:c2:d5:
70:2b:01:38:52:54:05:9a:42:02:06:ce:2c:e3:44:35:03:a0:
97:ca:6b:72:81:2b:d5:84:43:8f:0f:0f:75:d0:7a:71:db:10:
b5:5e:2b:5e:f3:f1:20:8d:65:46:6b:5b:24:da:d7:7a:4d:24:
83:ec:12:0c:e0:1f:9f:85:f3:61:0e:b0:88:98:52:41:f9:ef:
43:71:d3:ec:98:18:e3:bd:da:cd:50:77:f4:f5:44:c3:22:aa:
af:4c:53:f4:cd:9e:69:ea:ce:75:df:e5:f1:35:fd:d1:00:6c:
5a:b9:25:63:74:c6:b4:be:53:67:ba:ee:1b:d4:54:c9:3a:32:
bf:42:3a:4d:9d:e5:95:8d:09:5e:a1:78:90:1b:20:19:eb:38:
b0:ce:b5:a0:c8:cc:73:3b:c4:6c:12:0d:04:d7:fa:b4:2d:cd:
c0:e6:cc:ed:8c:06:f8:ce:dd:f2:22:f5:39:e1:fc:af:1b:23:
18:27:c0:48:ca:60:76:5a:f7:10:ec:0a:da:eb:24:9c:bc:c3:
3b:fb:df:91:76:75:d1:d5:05:fa:ef:08:6e:1c:bd:69:9e:1d:
01:97:37:d4:6c:ed:4a:87:8c:4a:c1:50:ea:9d:30:fd:cc:02:
97:03:4d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 15:00:59 2026 by rpki-client