Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/RRml_hYYRV_uh2tH4MKlyEdnOfU.roa
File: RRml_hYYRV_uh2tH4MKlyEdnOfU.roa (raw, json)
Hash identifier: j9pqLSMOpk42y3UflLLzJCKLgosgbaeUgLKU1+ncNBI=
Subject key identifier: 45:19:A5:FE:16:18:45:5F:EE:87:6B:47:E0:C2:A5:C8:47:67:39:F5
Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Certificate serial: 019F64F5E2B0C3E4ABEE673A481E398E66E1
Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/RRml_hYYRV_uh2tH4MKlyEdnOfU.roa
Signing time: Wed 15 Jul 2026 08:47:43 +0000
ROA not before: Wed 15 Jul 2026 08:47:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57256
IP address blocks: 80.83.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:64:f5:e2:b0:c3:e4:ab:ee:67:3a:48:1e:39:8e:66:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Validity
Not Before: Jul 15 08:47:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4519a5fe1618455fee876b47e0c2a5c8476739f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:a0:38:88:5f:8c:94:9d:f7:82:33:2f:2f:
99:4a:fe:4d:ef:e2:82:a8:b4:9a:91:6e:71:dc:f2:
88:cd:85:32:88:5f:13:7c:1e:85:45:9d:b5:3f:71:
78:94:3d:27:14:9e:94:21:70:13:ee:ee:2a:22:28:
a2:aa:36:1a:4f:f9:d1:22:e5:87:d8:31:7b:70:7b:
5b:1a:1e:b1:cc:5d:25:75:e3:48:56:40:a7:db:ca:
76:54:e8:ee:f3:c1:b9:06:88:fe:da:85:72:3f:b6:
34:57:8b:28:aa:a7:ea:6c:65:5e:96:24:4c:0b:11:
12:4e:2e:a9:07:f9:04:13:e6:59:ec:80:d0:46:91:
b2:fa:08:09:16:1c:c9:b0:45:34:96:57:fa:9d:5c:
2a:15:72:66:c7:7c:ea:5d:bd:4f:3b:34:e6:5f:28:
92:3b:fb:41:a7:07:6f:08:8b:cf:15:f8:66:87:c9:
53:4e:44:da:7a:ed:56:94:fa:d0:b3:3e:a7:c8:c6:
47:45:5e:2c:18:ed:8c:db:eb:1d:8c:c2:93:69:f1:
9d:49:b4:41:9f:b2:51:b4:01:68:ce:01:6b:d2:15:
7e:b7:b6:5a:24:b7:fb:57:21:c9:c0:32:d9:6b:31:
95:70:8a:33:08:0d:ff:1a:8c:02:b2:b0:90:67:d3:
c7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:19:A5:FE:16:18:45:5F:EE:87:6B:47:E0:C2:A5:C8:47:67:39:F5
X509v3 Authority Key Identifier:
keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/RRml_hYYRV_uh2tH4MKlyEdnOfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.20.0/24
Signature Algorithm: sha256WithRSAEncryption
43:7a:c6:91:99:99:10:74:12:8c:89:83:22:f1:60:53:06:b7:
60:5a:0c:0e:c8:8c:61:e1:39:58:aa:39:53:a6:ba:9b:a2:4a:
b4:04:d4:ae:da:c4:9f:42:a8:6c:30:be:21:5d:cb:07:0e:91:
34:22:aa:06:2b:5a:ed:de:85:d2:29:4b:39:83:5f:f5:75:d7:
91:3c:5b:70:de:15:5a:5d:0a:99:49:77:18:ff:62:11:14:1d:
ec:a2:eb:69:03:4d:61:5d:d9:c1:8a:f9:b8:9e:b7:23:e3:ba:
62:2b:47:ef:81:41:e2:fe:04:d4:01:e7:87:01:f7:db:78:12:
30:fe:2f:2c:50:c5:cf:ce:c1:25:42:3b:4b:eb:03:23:78:88:
3c:fe:ec:b2:01:73:6e:fd:31:2c:f0:5a:ee:67:00:56:d0:a3:
63:ec:ea:65:30:33:59:65:bd:e3:a0:65:8c:44:21:aa:82:06:
6d:4f:ef:8c:b1:7e:50:15:66:d4:5f:1d:2a:53:05:b7:05:52:
40:43:c4:2b:0b:58:f9:9b:be:26:4b:57:bd:70:12:81:2a:11:
da:a3:88:f3:a2:38:e2:a3:b5:1a:32:3c:8c:b6:e1:22:0b:6c:
3e:1b:9a:e4:88:a6:f8:11:81:e3:28:fa:28:69:cf:f9:46:2a:
3c:e3:87:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:05:27 2026 by rpki-client