Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/uYfqij_IsiSPLgyaQk73NwCjcoc.roa
File: uYfqij_IsiSPLgyaQk73NwCjcoc.roa (raw, json)
Hash identifier: 7Z2Wcuv0JmgbonEjEcA9BE0S/csI7N6zMtq+Iduvr2g=
Subject key identifier: B9:87:EA:8A:3F:C8:B2:24:8F:2E:0C:9A:42:4E:F7:37:00:A3:72:87
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A0AFB96CECBEA454D4B9ADD7FE66577356
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/uYfqij_IsiSPLgyaQk73NwCjcoc.roa
Signing time: Thu 17 Sep 2026 14:15:59 +0000
ROA not before: Thu 17 Sep 2026 14:15:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 2.56.138.0/24 maxlen: 24
45.10.108.0/24 maxlen: 24
45.130.144.0/24 maxlen: 24
45.131.47.0/24 maxlen: 24
45.133.31.0/24 maxlen: 24
45.134.24.0/24 maxlen: 24
45.134.25.0/24 maxlen: 24
45.142.46.0/24 maxlen: 24
45.142.47.0/24 maxlen: 24
45.153.224.0/24 maxlen: 24
45.153.225.0/24 maxlen: 24
45.153.226.0/24 maxlen: 24
77.83.2.0/24 maxlen: 24
77.83.80.0/24 maxlen: 24
80.64.30.0/24 maxlen: 24
188.119.66.0/24 maxlen: 24
213.139.202.0/24 maxlen: 24
213.139.203.0/24 maxlen: 24
213.166.80.0/24 maxlen: 24
2a0d:1ac3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:b9:6c:ec:be:a4:54:d4:b9:ad:d7:fe:66:57:73:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Sep 17 14:15:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b987ea8a3fc8b2248f2e0c9a424ef73700a37287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4c:7d:7b:d7:1c:46:32:36:f3:ac:7b:09:70:
56:ee:d9:43:65:7a:72:14:18:4a:a5:6f:58:82:cd:
6c:37:b2:21:08:49:22:b0:14:63:b0:e2:50:eb:42:
be:0f:8c:88:cb:13:a9:d1:4f:bc:2f:07:00:1e:d9:
7b:3c:a1:78:6a:45:53:16:16:0c:4f:c2:cb:fe:3c:
ad:51:97:ee:b7:8d:74:ac:60:f3:86:26:43:41:40:
0a:48:2d:54:93:21:a4:cc:a1:c2:21:52:bd:38:65:
49:2a:af:66:4a:54:37:fa:83:b9:02:d9:a4:5b:d8:
1d:fc:db:d3:ab:f9:9b:b5:2d:cf:75:4b:15:be:fa:
34:6d:a0:64:d0:4a:0a:56:85:0e:90:83:08:8c:83:
b2:9f:66:38:6c:42:7f:3e:b6:8a:ab:f1:4f:76:90:
dd:6b:38:1d:d7:53:01:03:7a:51:51:f0:4e:aa:5b:
3b:b3:b1:14:78:21:7a:b1:84:61:fd:0e:d1:4e:1f:
48:03:e3:bd:bf:25:72:41:54:a2:55:ef:ea:91:20:
43:c3:c1:eb:ef:d9:0d:1d:12:69:fe:19:71:b9:6f:
5b:e6:9c:72:8d:75:a2:1e:e9:83:c0:57:d5:eb:b4:
a2:59:13:8d:bc:35:51:2b:48:ec:c4:db:89:bd:ff:
46:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:87:EA:8A:3F:C8:B2:24:8F:2E:0C:9A:42:4E:F7:37:00:A3:72:87
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/uYfqij_IsiSPLgyaQk73NwCjcoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.138.0/24
45.10.108.0/24
45.130.144.0/24
45.131.47.0/24
45.133.31.0/24
45.134.24.0/23
45.142.46.0/23
45.153.224.0-45.153.226.255
77.83.2.0/24
77.83.80.0/24
80.64.30.0/24
188.119.66.0/24
213.139.202.0/23
213.166.80.0/24
IPv6:
2a0d:1ac3::/32
Signature Algorithm: sha256WithRSAEncryption
50:86:25:f3:73:b7:a4:69:97:5c:c6:6d:41:f2:12:f6:ce:75:
25:03:03:b0:62:80:fa:5f:08:cd:bc:b9:f3:35:a8:3d:eb:a4:
ee:c3:3d:a8:80:7f:fb:0a:4a:06:60:7b:19:88:d0:74:30:0f:
86:f9:7e:0a:bd:1c:9e:02:88:51:b4:09:db:a9:5f:f6:0e:7b:
c9:c3:06:b5:3f:8c:5d:d5:a7:d5:39:e5:52:f4:70:43:61:ca:
ef:0f:00:d9:b7:49:f6:15:94:af:7a:93:37:c2:bf:6c:80:36:
06:b4:ad:c8:24:41:17:1e:57:5f:a6:27:ed:7b:0b:eb:11:10:
5a:6d:63:9a:a2:03:9e:2a:5a:f1:56:a5:43:1e:96:ea:13:63:
70:31:4f:b1:de:a1:45:a7:ec:a2:73:a3:7e:f2:69:da:5a:70:
bf:58:55:4b:da:0d:bf:47:5f:6a:9e:8e:62:da:e7:53:b4:e0:
8b:b8:1d:13:99:9d:9c:c7:d0:16:4f:d2:69:ec:85:1a:7c:be:
35:56:5e:ff:a3:6c:99:d3:df:a0:3a:bf:72:86:68:05:07:e0:
59:64:61:82:bc:72:e6:dc:38:bc:ea:cd:fe:6e:e6:4b:2f:4d:
2e:c4:28:98:d7:51:76:4b:6d:15:d4:dc:6a:5f:46:d0:ad:7a:
90:4f:c8:6b
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgISAaCvuWzsvqRU1Lmt1/5mV3NWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjYwOTE3MTQxNTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTg3ZWE4YTNmYzhiMjI0OGYyZTBjOWE0MjRlZjczNzAwYTM3Mjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20x9e9ccRjI286x7CXBW7tlDZXpy
FBhKpW9Ygs1sN7IhCEkisBRjsOJQ60K+D4yIyxOp0U+8LwcAHtl7PKF4akVTFhYM
T8LL/jytUZfut410rGDzhiZDQUAKSC1UkyGkzKHCIVK9OGVJKq9mSlQ3+oO5Atmk
W9gd/NvTq/mbtS3PdUsVvvo0baBk0EoKVoUOkIMIjIOyn2Y4bEJ/PraKq/FPdpDd
azgd11MBA3pRUfBOqls7s7EUeCF6sYRh/Q7RTh9IA+O9vyVyQVSiVe/qkSBDw8Hr
79kNHRJp/hlxuW9b5pxyjXWiHumDwFfV67SiWRONvDVRK0jsxNuJvf9GkwIDAQAB
o4ICbzCCAmswHQYDVR0OBBYEFLmH6oo/yLIkjy4MmkJO9zcAo3KHMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvdVlmcWlqX0lzaVNQTGd5YVFrNzNOd0NqY29jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwYgQCAAEwXAMEAAI4igME
AC0KbAMEAC2CkAMEAC2DLwMEAC2FHwMEAS2GGAMEAS2OLjAMAwQFLZngAwQALZni
AwQATVMCAwQATVNQAwQAUEAeAwQAvHdCAwQB1YvKAwQA1aZQMA0EAgACMAcDBQAq
DRrDMA0GCSqGSIb3DQEBCwUAA4IBAQBQhiXzc7ekaZdcxm1B8hL2znUlAwOwYoD6
XwjNvLnzNag966Tuwz2ogH/7CkoGYHsZiNB0MA+G+X4KvRyeAohRtAnbqV/2DnvJ
wwa1P4xd1afVOeVS9HBDYcrvDwDZt0n2FZSvepM3wr9sgDYGtK3IJEEXHldfpift
ewvrERBabWOaogOeKlrxVqVDHpbqE2NwMU+x3qFFp+yic6N+8mnaWnC/WFVL2g2/
R19qno5i2udTtOCLuB0TmZ2cx9AWT9Jp7IUafL41Vl7/o2yZ09+gOr9yhmgFB+BZ
ZGGCvHLm3Di86s3+buZLL00uxCiY11F2S20V1NxqX0bQrXqQT8hr
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:15:26 2026 by rpki-client