Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ExP5iUmruZ-4vzRDXYpTN7PhVsE.roa
File: ExP5iUmruZ-4vzRDXYpTN7PhVsE.roa (raw, json)
Hash identifier: ptTZAEBVR+Zeg33yTXky1w4oYFJN0k4yGT8laLe/mGg=
Subject key identifier: 13:13:F9:89:49:AB:B9:9F:B8:BF:34:43:5D:8A:53:37:B3:E1:56:C1
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019D4EAABEC448CEDC66C52C97C12D66279F
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ExP5iUmruZ-4vzRDXYpTN7PhVsE.roa
Signing time: Thu 02 Apr 2026 14:48:25 +0000
ROA not before: Thu 02 Apr 2026 14:48:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 45.142.46.0/24 maxlen: 24
45.142.47.0/24 maxlen: 24
45.153.229.0/24 maxlen: 24
80.64.30.0/24 maxlen: 24
92.119.228.0/24 maxlen: 24
188.119.66.0/24 maxlen: 24
213.139.202.0/24 maxlen: 24
213.139.203.0/24 maxlen: 24
213.166.80.0/24 maxlen: 24
2a0d:1ac3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4e:aa:be:c4:48:ce:dc:66:c5:2c:97:c1:2d:66:27:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Apr 2 14:48:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1313f98949abb99fb8bf34435d8a5337b3e156c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:0f:d0:d7:73:ab:d3:a8:53:23:a9:21:3e:
95:13:82:52:09:c3:f7:43:22:d5:eb:ac:e6:22:ca:
3d:a5:65:85:dd:d5:99:ad:bd:78:23:f0:a7:bf:37:
58:a2:32:64:f4:21:23:fe:21:3a:b5:d9:25:d4:e1:
75:d1:4c:47:32:7d:78:ef:09:d1:5a:56:61:ee:1a:
cc:8b:d6:d9:55:e4:78:d9:7d:23:50:bd:00:00:a0:
e5:cf:2b:e8:31:d6:86:bf:4a:18:1d:e9:61:5f:e5:
24:d5:53:bd:4f:29:e0:e6:24:f1:21:41:f7:10:7a:
f9:8c:bc:93:b4:da:46:6c:f4:59:2d:7a:5c:f2:51:
ac:90:69:99:aa:51:f6:d0:c9:e3:6b:ee:2d:16:dc:
fd:a9:cd:72:10:ec:dc:9b:21:0f:b4:6d:ed:2d:b9:
36:9f:17:31:08:80:96:e2:c5:10:1b:fd:a0:d7:c3:
05:b3:44:76:f0:7f:98:48:de:00:b0:c9:a4:50:df:
57:b5:09:22:91:14:1d:66:b1:f3:cf:4a:9f:1f:0d:
ea:b1:2e:5c:bf:53:28:29:81:d5:be:61:8a:5a:a4:
98:04:af:98:6c:bc:5d:4d:d8:4c:5f:6b:7a:e7:64:
68:d1:94:ff:dd:56:db:11:9c:36:6d:c8:c2:5d:ed:
9b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:13:F9:89:49:AB:B9:9F:B8:BF:34:43:5D:8A:53:37:B3:E1:56:C1
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ExP5iUmruZ-4vzRDXYpTN7PhVsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.46.0/23
45.153.229.0/24
80.64.30.0/24
92.119.228.0/24
188.119.66.0/24
213.139.202.0/23
213.166.80.0/24
IPv6:
2a0d:1ac3::/32
Signature Algorithm: sha256WithRSAEncryption
03:ba:84:9f:7f:ac:1e:8b:00:9f:fe:c9:20:2a:2d:b2:fa:d0:
e3:51:00:4f:7e:0b:aa:13:5b:f8:dd:ee:58:b6:e7:74:95:3f:
4f:e2:20:ab:e9:c9:4c:0d:65:13:96:ba:44:8c:fb:0b:42:b9:
4e:73:7f:76:a6:25:c9:71:5c:62:67:00:84:80:ed:3d:53:35:
88:be:f9:fb:0c:8a:b5:b5:2a:89:02:4d:b8:47:f3:d7:bd:02:
5d:12:d6:c9:e5:c1:11:82:33:24:a4:d3:73:58:53:c7:bb:b3:
9b:22:e1:2a:9b:45:61:51:f7:51:c1:e5:ef:4b:16:2e:57:12:
57:e8:5e:62:25:93:79:58:4d:a3:a9:5c:ff:e5:14:ad:a6:42:
bd:bf:a5:49:d4:ba:5c:d3:57:be:3b:c7:6a:47:df:5d:cc:6a:
90:ec:27:90:2f:0f:1e:f1:3a:4e:b0:3b:1a:26:8e:91:50:6a:
e3:99:c4:5c:60:43:8b:70:2f:e1:d9:00:78:cc:6a:ac:2a:90:
5c:93:c7:0b:44:b1:89:27:47:4f:64:ed:5a:59:a1:04:6d:da:
3f:1f:94:cf:65:7e:7f:b7:d8:38:b7:f6:d5:d8:ca:18:4b:a5:
d9:24:16:ee:87:0e:b5:e6:0c:6a:d7:30:d9:be:31:04:4d:4a:
4f:63:0e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:53 2026 by rpki-client