Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/sajtPZFz_UkISA1CUzrWg2FzVwU.roa
File: sajtPZFz_UkISA1CUzrWg2FzVwU.roa (raw, json)
Hash identifier: nR5VZdfmxMDZhT8g5kO+2pPgFa/EY9q4ObYkyG2ifYI=
Subject key identifier: B1:A8:ED:3D:91:73:FD:49:08:48:0D:42:53:3A:D6:83:61:73:57:05
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019FA8DC8EC873E5834ACA0B85A67285A626
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/sajtPZFz_UkISA1CUzrWg2FzVwU.roa
Signing time: Tue 28 Jul 2026 13:14:14 +0000
ROA not before: Tue 28 Jul 2026 13:14:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 2.56.138.0/24 maxlen: 24
45.10.108.0/24 maxlen: 24
45.130.144.0/24 maxlen: 24
45.131.47.0/24 maxlen: 24
45.133.31.0/24 maxlen: 24
45.134.24.0/24 maxlen: 24
45.134.25.0/24 maxlen: 24
45.142.46.0/24 maxlen: 24
45.142.47.0/24 maxlen: 24
45.153.224.0/24 maxlen: 24
45.153.225.0/24 maxlen: 24
45.153.226.0/24 maxlen: 24
45.153.229.0/24 maxlen: 24
77.83.2.0/24 maxlen: 24
77.83.80.0/24 maxlen: 24
80.64.30.0/24 maxlen: 24
92.119.228.0/24 maxlen: 24
188.119.66.0/24 maxlen: 24
213.139.202.0/24 maxlen: 24
213.139.203.0/24 maxlen: 24
213.166.80.0/24 maxlen: 24
2a0d:1ac3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:dc:8e:c8:73:e5:83:4a:ca:0b:85:a6:72:85:a6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jul 28 13:14:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1a8ed3d9173fd4908480d42533ad68361735705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:10:15:0a:70:df:a3:5f:0c:55:53:e9:28:4b:
f8:8c:19:27:0b:41:cc:c3:d4:ce:90:92:99:4c:8c:
d3:41:ee:11:c4:37:18:eb:a4:b1:28:08:15:d6:9f:
cd:fc:33:3e:ea:10:35:04:11:60:61:c1:fd:43:45:
5e:8a:34:00:49:a5:78:0c:fd:33:38:aa:9d:00:41:
f0:c6:a7:d6:2a:22:79:f9:6d:60:ae:66:c0:92:6a:
e1:b5:fe:b3:bc:39:86:dc:1d:d2:ae:db:bf:bf:c8:
c2:4e:45:0f:bd:de:de:3d:6e:d6:fe:65:a2:bc:f9:
c0:8d:1a:96:6c:4c:91:4f:54:02:78:21:a4:34:83:
df:50:f5:6b:d8:1c:98:75:b8:3e:5c:b0:3a:62:6a:
83:32:75:04:71:90:92:fa:f1:a0:d6:89:27:91:41:
9e:0f:bf:5f:47:4a:a8:60:4e:0c:05:f2:f2:f2:51:
54:04:5c:dc:72:e8:3b:7b:e5:93:ff:67:97:0d:f7:
fa:0e:1e:25:c2:cf:1b:8b:9f:ae:9b:6e:5b:3b:7b:
37:53:5a:6b:0e:2c:29:2b:b9:5b:63:38:82:7e:5d:
2c:85:c7:2e:f6:ed:91:83:9c:3c:18:88:16:19:8a:
e8:79:01:e0:c8:0b:f5:53:ce:d3:bb:63:5b:ee:04:
56:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A8:ED:3D:91:73:FD:49:08:48:0D:42:53:3A:D6:83:61:73:57:05
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/sajtPZFz_UkISA1CUzrWg2FzVwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.138.0/24
45.10.108.0/24
45.130.144.0/24
45.131.47.0/24
45.133.31.0/24
45.134.24.0/23
45.142.46.0/23
45.153.224.0-45.153.226.255
45.153.229.0/24
77.83.2.0/24
77.83.80.0/24
80.64.30.0/24
92.119.228.0/24
188.119.66.0/24
213.139.202.0/23
213.166.80.0/24
IPv6:
2a0d:1ac3::/32
Signature Algorithm: sha256WithRSAEncryption
57:ed:11:91:9c:91:44:34:54:58:e0:bc:cf:36:0c:a1:6b:a2:
e5:51:b7:16:79:ca:a6:c0:55:4e:6e:9d:31:5f:7a:a6:6a:12:
f3:33:5a:39:a0:be:31:66:fa:b4:29:a5:91:b9:fe:3b:20:ba:
2a:7e:1b:07:e9:9e:f8:c6:f0:5b:13:4f:f0:fd:a9:03:ec:70:
2d:33:6f:24:59:38:0b:89:dc:e8:64:3b:a7:67:ca:bb:24:22:
08:5d:9c:bf:63:7e:fc:b2:5c:ac:69:62:f0:11:33:65:db:85:
68:68:53:1a:25:45:72:f3:0d:f0:05:6a:d3:c1:27:ee:14:b9:
f8:4c:f1:77:9e:53:59:34:df:2c:77:02:0e:88:11:03:c5:85:
5d:3c:0c:6b:de:b7:94:6b:5b:28:08:8b:5b:41:44:8d:40:dc:
24:8b:02:0d:96:9c:d5:b3:59:ed:d2:0c:2e:38:09:24:30:ca:
df:4e:32:15:37:fa:5e:ef:54:24:b8:d8:a6:8f:f4:d2:85:15:
1e:dd:cf:50:9e:0c:24:f9:fe:a0:bf:c3:7d:c1:6e:06:16:d7:
17:d1:8f:6a:9e:4b:ec:e7:27:06:c4:a7:7d:cb:f4:07:aa:e1:
01:ea:32:3d:56:89:91:e3:27:29:4c:1f:f1:59:a4:4e:9f:af:
fa:fb:af:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:37:47 2026 by rpki-client