Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/0yWvn9M6oy5fHhcusKTNYjRT7SM.roa
File: 0yWvn9M6oy5fHhcusKTNYjRT7SM.roa (raw, json)
Hash identifier: WvQP0RNlRK2xc7fMdnNh9d+C2dzK7VsvYxKqHmxbO9Q=
Subject key identifier: D3:25:AF:9F:D3:3A:A3:2E:5F:1E:17:2E:B0:A4:CD:62:34:53:ED:23
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019F41CA99DDE3F33372B2DD2B9D50F6887F
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/0yWvn9M6oy5fHhcusKTNYjRT7SM.roa
Signing time: Wed 08 Jul 2026 12:53:44 +0000
ROA not before: Wed 08 Jul 2026 12:53:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 83.245.16.0/21 maxlen: 21
83.245.16.0/24 maxlen: 24
83.245.17.0/24 maxlen: 24
83.245.18.0/24 maxlen: 24
83.245.19.0/24 maxlen: 24
83.245.20.0/24 maxlen: 24
83.245.21.0/24 maxlen: 24
83.245.22.0/24 maxlen: 24
83.245.23.0/24 maxlen: 24
83.245.24.0/22 maxlen: 22
83.245.24.0/24 maxlen: 24
83.245.25.0/24 maxlen: 24
83.245.26.0/24 maxlen: 24
83.245.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:ca:99:dd:e3:f3:33:72:b2:dd:2b:9d:50:f6:88:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jul 8 12:53:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d325af9fd33aa32e5f1e172eb0a4cd623453ed23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:12:d1:8f:c7:47:28:6a:72:ae:fe:00:5c:e1:
14:bf:af:93:8c:14:ca:5e:66:70:ae:92:95:66:ff:
4f:b1:76:5b:d3:7e:8c:70:d3:a0:10:ec:d9:9a:f9:
34:e4:9e:2d:c1:02:4b:b0:e5:8f:64:f0:b5:b2:45:
0f:5e:91:67:7b:c7:e2:ea:3d:94:39:e4:8a:cd:fb:
8d:2d:d0:5e:36:74:85:e7:a3:73:84:0a:18:fc:c0:
47:34:fa:1d:f5:70:36:2f:97:6c:7f:b9:f5:72:4d:
65:d1:4f:db:4f:95:98:86:ca:d0:28:5c:48:38:f5:
be:0e:92:c7:43:a7:68:53:df:44:e7:e3:d2:f9:0d:
60:de:c9:b5:59:73:d8:8e:08:38:b2:2d:10:48:89:
96:8b:8c:32:bb:04:f3:b6:a5:bd:9d:44:49:86:97:
02:ca:21:c0:5d:58:7d:5b:86:62:82:0d:23:57:e1:
b9:ed:8b:07:7e:1b:95:32:92:f6:1d:b8:4a:03:c9:
82:80:5b:c2:4a:37:1f:8f:5e:7a:d4:b9:83:88:bc:
29:51:85:30:00:7a:aa:6f:91:88:86:ee:ae:fe:eb:
a9:62:c5:3b:44:d4:41:98:73:de:04:f8:79:0e:7d:
09:b7:02:1e:cc:29:f7:66:08:fe:a5:7a:9a:13:53:
5a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:25:AF:9F:D3:3A:A3:2E:5F:1E:17:2E:B0:A4:CD:62:34:53:ED:23
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/0yWvn9M6oy5fHhcusKTNYjRT7SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.16.0-83.245.27.255
Signature Algorithm: sha256WithRSAEncryption
5b:bf:d0:9c:5a:04:42:32:cd:48:a6:5c:fc:8d:db:26:f9:2c:
ff:56:19:72:14:b3:69:92:15:46:b0:50:8c:95:33:8c:f0:b8:
49:b9:a7:2c:86:2c:8c:95:2d:cd:03:e6:45:5e:5f:62:6a:a5:
e7:ae:5e:b6:5e:c5:cc:91:26:92:2d:57:f4:a2:75:4a:93:0d:
5c:dd:48:f3:df:7b:38:be:05:19:da:36:90:51:6b:18:e0:8d:
84:7f:38:e5:d6:88:6e:c8:f1:ac:01:c7:80:eb:9f:46:22:86:
88:86:fa:3e:6e:f7:b3:5e:f2:d5:2b:fe:0c:71:1a:36:ce:4e:
0c:be:ff:79:9a:d0:27:5c:b1:06:10:0e:d1:3b:81:76:70:42:
bd:16:16:05:4e:f3:60:e9:73:0b:17:70:23:86:8d:57:ab:d0:
5d:0c:52:a7:60:94:17:2a:77:9d:00:a2:19:dc:05:38:b5:0f:
04:32:2b:0f:4c:73:20:9f:e1:12:18:12:83:5c:26:02:a2:b5:
ad:80:f1:89:ae:6d:48:e6:e6:41:9c:b0:d1:4c:66:75:4f:5e:
69:e8:91:4c:d5:74:8b:af:a2:53:b2:71:18:40:cd:04:e0:1b:
26:a5:02:7e:3d:7e:7f:9e:3f:30:c8:07:3b:72:fe:a2:30:16:
67:e7:9a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:56:04 2026 by rpki-client