Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/mPaokwxAD9LyKbSUy1uqdmo9F60.roa
File: mPaokwxAD9LyKbSUy1uqdmo9F60.roa (raw, json)
Hash identifier: 2FwhDovnOD3b28quLwy5ECLW1uoegJI72Ysh1RfHX2Q=
Subject key identifier: 98:F6:A8:93:0C:40:0F:D2:F2:29:B4:94:CB:5B:AA:76:6A:3D:17:AD
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019CA00C4F0DC30064E883923167B2889E77
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/mPaokwxAD9LyKbSUy1uqdmo9F60.roa
Signing time: Fri 27 Feb 2026 17:01:27 +0000
ROA not before: Fri 27 Feb 2026 17:01:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 45.8.89.0/24 maxlen: 24
45.15.75.0/24 maxlen: 24
45.140.17.0/24 maxlen: 24
77.83.95.0/24 maxlen: 24
92.119.128.0/24 maxlen: 24
92.119.130.0/24 maxlen: 24
93.157.105.0/24 maxlen: 24
194.93.3.0/24 maxlen: 24
194.169.161.0/24 maxlen: 24
213.139.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a0:0c:4f:0d:c3:00:64:e8:83:92:31:67:b2:88:9e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Feb 27 17:01:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98f6a8930c400fd2f229b494cb5baa766a3d17ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:38:80:c1:16:83:bd:ba:fc:c5:70:b3:87:
19:53:75:e0:0e:13:35:96:42:f2:c9:9b:1e:b1:7c:
be:76:d1:ad:af:73:6b:ce:14:50:80:ee:ea:3f:6f:
c8:58:1c:ee:51:0f:58:d8:06:bb:04:4e:b9:d7:36:
58:52:8c:32:9f:32:d3:56:e2:3b:e7:89:20:b2:14:
cc:70:b4:49:57:67:4c:7a:35:ac:a1:a4:64:c1:f0:
8a:e6:45:f0:69:bf:1e:cc:98:70:4f:8d:c7:0b:12:
34:b6:54:95:05:93:7c:f8:18:c4:28:25:87:15:b5:
07:c2:1a:4d:10:74:48:4d:68:a0:28:8e:39:c0:06:
c2:83:d0:18:a4:ee:75:11:d9:e9:92:7b:e0:d4:82:
2f:91:4a:be:14:54:fa:96:cf:fb:ec:7c:40:e0:83:
0e:28:f9:48:6e:33:8c:54:c1:6c:95:b1:85:06:4f:
56:65:39:b0:99:14:b0:67:9c:55:01:0d:f3:15:29:
c0:bb:84:74:b9:f8:53:fe:32:70:f6:df:1f:cb:c1:
d1:e6:8b:00:70:d4:a8:68:b0:ab:fe:b2:22:11:43:
5b:d2:95:39:6c:ba:a2:16:c9:f8:6d:36:68:f6:e7:
66:e3:fb:2b:14:5f:d7:3b:c8:67:c7:26:46:a5:17:
8a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F6:A8:93:0C:40:0F:D2:F2:29:B4:94:CB:5B:AA:76:6A:3D:17:AD
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/mPaokwxAD9LyKbSUy1uqdmo9F60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.89.0/24
45.15.75.0/24
45.140.17.0/24
77.83.95.0/24
92.119.128.0/24
92.119.130.0/24
93.157.105.0/24
194.93.3.0/24
194.169.161.0/24
213.139.203.0/24
Signature Algorithm: sha256WithRSAEncryption
79:47:ba:0f:e6:3a:d2:59:20:90:17:54:85:fe:d9:e5:64:d3:
71:c7:af:96:61:b6:21:ce:25:e3:50:73:35:40:0e:6b:c6:93:
6f:6f:72:2b:f7:df:e4:bb:e4:f2:b8:c7:4b:9f:32:1d:3d:a7:
f4:4d:b8:44:de:b0:f4:8b:14:1b:b5:71:0d:76:63:e4:b4:38:
83:0d:e8:0a:b1:99:fa:62:7c:d9:4a:73:b3:cd:67:22:85:fe:
5a:c1:97:4f:ed:01:79:53:07:8b:65:ac:83:b1:9f:0e:a8:55:
4b:ae:9f:0e:58:64:2f:73:e0:dd:f6:b4:12:1a:f7:9a:46:46:
dc:94:f6:c0:38:76:89:7b:9b:1d:72:ba:9a:93:25:87:d7:ca:
3f:af:81:c2:47:70:b0:c2:1c:26:b6:13:0a:3c:bb:23:9c:63:
2e:f5:12:80:42:c5:73:f5:4b:bd:0e:bb:b4:60:fd:fc:b4:ae:
e0:b8:52:54:37:98:dd:45:2b:b5:1c:2d:c8:d3:e2:f2:41:2f:
81:71:f8:6c:d6:7c:2f:dc:e5:4f:e9:7d:9c:b4:95:49:f6:d6:
37:b0:af:0a:f2:25:fb:a4:ce:56:74:e5:81:83:17:22:74:4c:
8f:47:bc:e9:80:ec:2b:7b:65:f8:49:e6:b0:51:ca:85:48:5d:
0d:31:23:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:18:06 2026 by rpki-client