Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/DYLF4IPo2kx-iD61fN8h5idyTko.roa
File: DYLF4IPo2kx-iD61fN8h5idyTko.roa (raw, json)
Hash identifier: y/iQ4IEeINZe+yeGzP28dvU8iywIeyjviCxv/DjxCtU=
Subject key identifier: 0D:82:C5:E0:83:E8:DA:4C:7E:88:3E:B5:7C:DF:21:E6:27:72:4E:4A
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019FA8DC8F05CA871EB26736B93BA032FEB1
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/DYLF4IPo2kx-iD61fN8h5idyTko.roa
Signing time: Tue 28 Jul 2026 13:14:14 +0000
ROA not before: Tue 28 Jul 2026 13:14:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49505
IP address blocks: 2.56.138.0/24 maxlen: 24
45.10.108.0/24 maxlen: 24
45.89.231.0/24 maxlen: 24
45.130.144.0/24 maxlen: 24
45.131.47.0/24 maxlen: 24
45.133.31.0/24 maxlen: 24
45.133.32.0/22 maxlen: 22
45.134.24.0/24 maxlen: 24
45.134.25.0/24 maxlen: 24
45.153.224.0/24 maxlen: 24
45.153.225.0/24 maxlen: 24
45.153.226.0/24 maxlen: 24
77.83.2.0/24 maxlen: 24
77.83.80.0/24 maxlen: 24
185.235.247.0/24 maxlen: 24
193.9.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:dc:8f:05:ca:87:1e:b2:67:36:b9:3b:a0:32:fe:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jul 28 13:14:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d82c5e083e8da4c7e883eb57cdf21e627724e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:a7:db:8f:05:7e:b0:d1:73:49:ef:a3:27:
8c:94:42:d1:d2:ff:58:9a:cc:af:02:90:4b:10:d5:
84:d8:42:bb:77:90:28:1f:a2:e9:f9:d4:b8:ac:aa:
c6:85:c8:b9:82:59:0a:28:1e:56:ef:c1:41:8c:8e:
71:b1:47:11:50:bf:05:9e:bb:bc:1a:e9:67:5e:58:
fa:be:08:53:1c:6b:00:b7:8d:0f:79:b3:f1:6d:5d:
db:75:d9:1c:44:e7:d2:73:97:1f:c0:c3:8e:77:df:
6a:99:9c:c7:80:c0:16:d3:6c:4f:d9:ea:93:05:20:
5a:2c:ad:3f:0d:c7:3f:78:2a:dc:e8:ef:c5:aa:be:
dd:cd:dc:80:aa:07:59:11:18:68:47:75:e2:3d:04:
45:a5:fd:51:88:aa:3c:eb:9e:ef:65:68:25:46:69:
31:1e:af:fc:5c:af:ea:0a:5d:1c:5a:a8:b3:b8:52:
f9:c4:61:01:3e:2e:85:73:66:13:6f:f2:4b:76:95:
cd:18:2d:3e:d4:27:61:1d:64:a4:0f:04:57:01:32:
1b:a4:17:20:75:c0:41:71:51:33:c7:d7:76:95:77:
8d:6f:f9:c0:71:1e:59:96:f6:d6:43:7e:f8:29:3a:
69:bf:3e:48:95:9b:3b:cf:99:3b:80:19:9e:6c:d7:
9c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:82:C5:E0:83:E8:DA:4C:7E:88:3E:B5:7C:DF:21:E6:27:72:4E:4A
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/DYLF4IPo2kx-iD61fN8h5idyTko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.138.0/24
45.10.108.0/24
45.89.231.0/24
45.130.144.0/24
45.131.47.0/24
45.133.31.0-45.133.35.255
45.134.24.0/23
45.153.224.0-45.153.226.255
77.83.2.0/24
77.83.80.0/24
185.235.247.0/24
193.9.126.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c4:b1:5d:45:63:23:2c:06:9c:5b:6f:9d:3c:c0:93:4d:e1:
dc:4a:8e:84:e5:30:da:0f:51:bc:81:7a:67:c7:06:59:a7:d9:
ec:64:be:a1:41:23:c6:ee:cf:ce:8e:f7:83:84:70:0b:a1:5e:
9b:ef:91:74:74:a9:ef:c3:c3:17:53:d5:17:ce:e9:f7:b5:05:
7d:59:73:fc:48:f3:2a:7e:2e:a8:29:c0:5a:09:9a:c4:8c:72:
07:be:bf:c6:a6:ea:e7:63:b8:21:ce:7f:14:f1:30:a3:b6:3d:
dc:76:99:b8:92:49:89:cf:bb:50:c2:a3:e7:f5:b3:08:d3:16:
61:0a:a2:7b:29:c9:e6:a7:e6:c1:e4:a1:d7:fc:e0:54:5a:88:
9b:18:e4:a9:c9:e3:22:4a:c3:a2:a6:a1:9c:42:0a:5c:89:79:
15:4c:1f:30:dd:c7:7a:40:e9:6a:ab:ce:b2:25:ae:0f:e8:e2:
4b:ad:68:2a:52:6f:b9:f6:16:44:67:74:e5:f9:2c:b2:80:16:
6a:2c:eb:ef:8e:27:21:9c:99:2b:bc:41:81:81:f3:34:be:c7:
b0:ae:27:97:34:4b:58:03:db:34:cd:d1:02:b0:ef:19:4a:7b:
8b:b6:97:8d:08:e8:1b:bb:5e:d9:96:38:b7:1c:0d:a4:0b:af:
bb:b9:5d:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgISAZ+o3I8Fyocesmc2uTugMv6xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjYwNzI4MTMxNDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDgyYzVlMDgzZThkYTRjN2U4ODNlYjU3Y2RmMjFlNjI3NzI0ZTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIKn248FfrDRc0nvoyeMlELR0v9Y
msyvApBLENWE2EK7d5AoH6Lp+dS4rKrGhci5glkKKB5W78FBjI5xsUcRUL8Fnru8
GulnXlj6vghTHGsAt40PebPxbV3bddkcROfSc5cfwMOOd99qmZzHgMAW02xP2eqT
BSBaLK0/Dcc/eCrc6O/Fqr7dzdyAqgdZERhoR3XiPQRFpf1RiKo8657vZWglRmkx
Hq/8XK/qCl0cWqizuFL5xGEBPi6Fc2YTb/JLdpXNGC0+1CdhHWSkDwRXATIbpBcg
dcBBcVEzx9d2lXeNb/nAcR5ZlvbWQ374KTppvz5IlZs7z5k7gBmebNecDQIDAQAB
o4ICWzCCAlcwHQYDVR0OBBYEFA2CxeCD6NpMfog+tXzfIeYnck5KMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvRFlMRjRJUG8ya3gtaUQ2MWZOOGg1aWR5VGtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYAwQAAjiKAwQA
LQpsAwQALVnnAwQALYKQAwQALYMvMAwDBAAthR8DBAIthSADBAEthhgwDAMEBS2Z
4AMEAC2Z4gMEAE1TAgMEAE1TUAMEALnr9wMEAMEJfjANBgkqhkiG9w0BAQsFAAOC
AQEAT8SxXUVjIywGnFtvnTzAk03h3EqOhOUw2g9RvIF6Z8cGWafZ7GS+oUEjxu7P
zo73g4RwC6Fem++RdHSp78PDF1PVF87p97UFfVlz/EjzKn4uqCnAWgmaxIxyB76/
xqbq52O4Ic5/FPEwo7Y93HaZuJJJic+7UMKj5/WzCNMWYQqieynJ5qfmweSh1/zg
VFqImxjkqcnjIkrDoqahnEIKXIl5FUwfMN3HekDpaqvOsiWuD+jiS61oKlJvufYW
RGd05fkssoAWaizr744nIZyZK7xBgYHzNL7HsK4nlzRLWAPbNM3RArDvGUp7i7aX
jQjoG7te2ZY4txwNpAuvu7ldww==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:59:16 2026 by rpki-client