Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/F-aim45A_W2ynh_19DsKEBlA2J4.roa
File: F-aim45A_W2ynh_19DsKEBlA2J4.roa (raw, json)
Hash identifier: O6zTXklT99vVoYcNB/gJagr/0juYTBU7XJ2JdjsGsz4=
Subject key identifier: 17:E6:A2:9B:8E:40:FD:6D:B2:9E:1F:F5:F4:3B:0A:10:19:40:D8:9E
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019FA8A94B12450CB9E80DD95ECF323E2312
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/F-aim45A_W2ynh_19DsKEBlA2J4.roa
Signing time: Tue 28 Jul 2026 12:18:14 +0000
ROA not before: Tue 28 Jul 2026 12:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 2.56.136.0/24 maxlen: 24
45.89.231.0/24 maxlen: 24
185.235.247.0/24 maxlen: 24
193.9.126.0/24 maxlen: 24
194.32.228.0/24 maxlen: 24
213.5.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:a9:4b:12:45:0c:b9:e8:0d:d9:5e:cf:32:3e:23:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jul 28 12:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17e6a29b8e40fd6db29e1ff5f43b0a101940d89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5c:5c:0d:81:19:8b:c2:10:24:28:d2:16:c6:
ed:44:c0:34:9b:06:45:a8:cc:2a:47:e9:4e:ac:f1:
0d:80:da:f3:a4:43:13:1f:2b:73:66:7e:e5:bf:13:
0f:a4:3f:d2:cf:02:c2:c4:35:46:d4:8c:b9:9a:d0:
3b:70:7a:4f:44:5f:d3:91:a6:c9:53:5d:d4:4d:98:
fa:37:1e:89:d6:a1:e4:b3:d3:00:0c:46:b2:dc:a3:
3f:65:87:7f:cf:56:a2:cb:f3:de:15:0f:a4:0e:91:
95:11:8d:b2:da:db:b7:b1:66:ef:51:bb:80:0f:66:
20:a1:87:20:9d:c7:8b:23:56:05:4e:47:52:70:f8:
84:bf:79:93:1e:48:f8:b7:92:54:8f:a4:04:c1:df:
27:96:32:20:8e:71:8f:11:77:0b:f5:62:71:24:97:
ef:fb:b4:4f:ef:d9:c7:99:bd:82:8f:02:04:02:31:
0a:8c:22:c1:4c:a6:e1:64:0a:a8:b7:eb:03:01:78:
21:a8:f8:f8:47:1f:1e:49:a3:81:86:18:c7:59:17:
e2:94:e5:7a:a1:34:93:e9:c6:a7:55:56:84:39:df:
6b:55:da:8b:3e:4d:71:1e:15:24:da:0c:b6:21:c0:
b8:dc:e7:ac:7d:67:27:c9:d2:8a:89:b5:9b:88:44:
dc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E6:A2:9B:8E:40:FD:6D:B2:9E:1F:F5:F4:3B:0A:10:19:40:D8:9E
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/F-aim45A_W2ynh_19DsKEBlA2J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.136.0/24
45.89.231.0/24
185.235.247.0/24
193.9.126.0/24
194.32.228.0/24
213.5.131.0/24
Signature Algorithm: sha256WithRSAEncryption
89:25:d8:c7:0b:c2:bd:1f:e6:2a:97:85:cf:81:62:ce:b7:ba:
51:e1:ab:28:0d:ac:0b:ca:71:4d:b0:b3:40:67:74:30:c5:5d:
17:23:1c:a0:62:45:f7:71:56:57:da:8b:26:6d:b6:1b:b4:e0:
11:17:91:af:95:fe:58:2e:40:49:87:60:68:4d:87:e4:f3:61:
25:3b:94:3a:75:19:12:d2:df:3e:94:bc:9f:16:36:84:07:7b:
1c:90:f8:1b:fc:e8:43:9c:8a:5b:44:c8:2e:36:ba:ee:c9:53:
db:b1:08:0c:d0:65:54:ca:39:63:83:3f:9b:9f:65:ec:bb:da:
a8:bf:30:f9:4e:cf:95:3f:6e:74:c0:dd:c3:c2:35:7a:ed:fa:
ff:9b:06:4b:7d:0f:aa:0d:21:7a:ef:fa:a8:8a:c8:11:60:7b:
bf:c6:85:c6:68:65:4b:fe:e6:30:af:74:42:dd:28:79:6d:93:
bc:73:15:65:78:43:55:7e:98:a7:d5:b2:78:64:11:cb:52:09:
4c:39:16:ab:b6:2f:ec:66:7d:72:e3:2a:b2:77:14:7a:ed:6c:
5f:c4:ce:e1:23:3b:5b:5f:44:f9:43:b3:c5:49:d2:47:c8:50:
1b:5f:40:3e:9d:f6:d3:84:4d:9a:1c:b2:e4:62:ed:37:e4:99:
b8:5c:30:e4
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ+oqUsSRQy56A3ZXs8yPiMSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjYwNzI4MTIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2U2YTI5YjhlNDBmZDZkYjI5ZTFmZjVmNDNiMGExMDE5NDBkODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31xcDYEZi8IQJCjSFsbtRMA0mwZF
qMwqR+lOrPENgNrzpEMTHytzZn7lvxMPpD/SzwLCxDVG1Iy5mtA7cHpPRF/TkabJ
U13UTZj6Nx6J1qHks9MADEay3KM/ZYd/z1aiy/PeFQ+kDpGVEY2y2tu3sWbvUbuA
D2YgoYcgnceLI1YFTkdScPiEv3mTHkj4t5JUj6QEwd8nljIgjnGPEXcL9WJxJJfv
+7RP79nHmb2CjwIEAjEKjCLBTKbhZAqot+sDAXghqPj4Rx8eSaOBhhjHWRfilOV6
oTST6canVVaEOd9rVdqLPk1xHhUk2gy2IcC43OesfWcnydKKibWbiETciQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFBfmopuOQP1tsp4f9fQ7ChAZQNieMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvRi1haW00NUFfVzJ5bmhfMTlEc0tFQmxBMko0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAAjiIAwQA
LVnnAwQAuev3AwQAwQl+AwQAwiDkAwQA1QWDMA0GCSqGSIb3DQEBCwUAA4IBAQCJ
JdjHC8K9H+Yql4XPgWLOt7pR4asoDawLynFNsLNAZ3QwxV0XIxygYkX3cVZX2osm
bbYbtOARF5Gvlf5YLkBJh2BoTYfk82ElO5Q6dRkS0t8+lLyfFjaEB3sckPgb/OhD
nIpbRMguNrruyVPbsQgM0GVUyjljgz+bn2Xsu9qovzD5Ts+VP250wN3DwjV67fr/
mwZLfQ+qDSF67/qoisgRYHu/xoXGaGVL/uYwr3RC3Sh5bZO8cxVleENVfpin1bJ4
ZBHLUglMORarti/sZn1y4yqydxR67WxfxM7hIztbX0T5Q7PFSdJHyFAbX0A+nfbT
hE2aHLLkYu035Jm4XDDk
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:03:34 2026 by rpki-client