Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/eaLbwwzc82R8oCNxtWIfNUYoLGQ.roa
File: eaLbwwzc82R8oCNxtWIfNUYoLGQ.roa (raw, json)
Hash identifier: KSJGc4KRUjAcNRpLCmUGp2p+izb6oI+U4je9958xW8k=
Subject key identifier: 79:A2:DB:C3:0C:DC:F3:64:7C:A0:23:71:B5:62:1F:35:46:28:2C:64
Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Certificate serial: 019C1DBB7546D4829728F3C02BBF93F13B78
Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/eaLbwwzc82R8oCNxtWIfNUYoLGQ.roa
Signing time: Mon 02 Feb 2026 09:42:30 +0000
ROA not before: Mon 02 Feb 2026 09:42:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42868
IP address blocks: 77.245.144.0/24 maxlen: 24
77.245.145.0/24 maxlen: 24
77.245.146.0/24 maxlen: 24
77.245.147.0/24 maxlen: 24
77.245.148.0/24 maxlen: 24
77.245.149.0/24 maxlen: 24
77.245.150.0/24 maxlen: 24
77.245.151.0/24 maxlen: 24
77.245.152.0/24 maxlen: 24
77.245.153.0/24 maxlen: 24
77.245.154.0/24 maxlen: 24
77.245.155.0/24 maxlen: 24
77.245.156.0/24 maxlen: 24
77.245.158.0/24 maxlen: 24
77.245.159.0/24 maxlen: 24
178.210.161.0/24 maxlen: 24
185.87.252.0/24 maxlen: 24
185.87.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1d:bb:75:46:d4:82:97:28:f3:c0:2b:bf:93:f1:3b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Validity
Not Before: Feb 2 09:42:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79a2dbc30cdcf3647ca02371b5621f3546282c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:03:05:44:8e:69:45:45:5c:14:0a:93:aa:
08:28:29:c4:da:6f:e3:c5:f9:04:72:a0:24:d5:1e:
61:23:69:f6:8f:1d:38:94:a5:53:9f:8d:68:81:bb:
4e:57:e3:65:cd:ab:cc:8e:21:6c:72:8f:a8:13:24:
b4:a1:47:25:dc:b7:ad:cd:55:f8:d6:6d:07:35:30:
5a:e3:b2:49:fe:95:e8:e1:06:9c:3e:8e:2f:1f:19:
18:6b:d1:b1:92:62:da:71:3c:b4:c6:72:70:62:33:
aa:a1:bd:9d:b4:cc:42:b0:b5:32:e2:6b:ee:ee:f9:
c9:b0:5a:db:2b:95:0f:f8:b5:f7:4e:be:b1:bf:13:
e0:a0:8c:79:58:8a:fb:b5:93:e8:24:d2:ba:67:ae:
42:5f:20:0a:ed:58:74:c8:94:e7:16:1f:24:4a:6b:
c7:d1:99:8f:b3:ea:50:77:3d:4f:56:40:b8:c6:47:
71:5d:db:5d:65:cb:a4:22:e7:63:6c:a6:a4:43:29:
dd:a0:dc:53:b1:6f:e3:18:8c:a6:86:be:3d:e5:62:
93:a7:9f:bd:aa:6c:51:e1:67:85:a9:73:66:9c:db:
0e:10:e0:d8:14:30:0c:86:14:9b:33:aa:e1:d1:b6:
da:9d:4a:f0:b5:89:23:5b:59:03:cf:c8:11:3b:88:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A2:DB:C3:0C:DC:F3:64:7C:A0:23:71:B5:62:1F:35:46:28:2C:64
X509v3 Authority Key Identifier:
keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/eaLbwwzc82R8oCNxtWIfNUYoLGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.245.144.0-77.245.156.255
77.245.158.0/23
178.210.161.0/24
185.87.252.0/23
Signature Algorithm: sha256WithRSAEncryption
29:13:07:d1:72:06:06:46:2e:a1:94:e5:42:79:28:86:1f:03:
51:d2:35:40:89:91:b5:bf:d8:74:12:c9:5a:04:4b:53:42:ee:
71:54:09:d9:15:14:f7:50:11:4d:2d:78:82:f1:4c:e5:b0:77:
04:58:f4:14:d3:16:7d:d8:37:c7:0a:be:df:43:7d:f3:4b:48:
47:84:37:58:c3:d2:55:c0:56:f7:42:7c:fd:be:04:2a:44:12:
13:b4:09:ae:69:91:64:a2:3d:94:a0:d3:ed:7f:1e:27:96:a3:
33:84:15:4d:72:e5:30:ce:a9:05:96:5e:62:ed:39:c5:73:90:
88:54:25:37:9b:8e:e6:9c:bd:b9:00:5d:ad:07:6a:8a:d4:1d:
0a:a1:a2:2c:62:46:73:45:d4:61:78:fb:2b:d8:59:50:9e:a6:
0a:67:9c:33:70:e5:7e:6f:99:5c:5a:93:1e:ce:33:40:fa:75:
3a:c4:91:43:d9:d4:56:cb:39:53:c5:26:90:fe:ef:3f:35:75:
36:48:95:a4:76:ce:d7:74:5c:d8:d8:6a:a9:c2:c1:fb:38:49:
bd:f8:59:97:10:54:9e:9f:98:86:79:9d:31:78:df:86:d9:fe:
46:1f:80:29:ee:2a:6c:30:11:39:e0:2d:20:f6:88:9b:d9:41:
52:7d:da:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:36:19 2026 by rpki-client