Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/4f1jJ8E82r0gR9Ab6Hidgqh2qrM.roa
File: 4f1jJ8E82r0gR9Ab6Hidgqh2qrM.roa (raw, json)
Hash identifier: CFWlrERh/hwsr4YRxnJy0GcEb2F2O746xrdF/LZj6I8=
Subject key identifier: E1:FD:63:27:C1:3C:DA:BD:20:47:D0:1B:E8:78:9D:82:A8:76:AA:B3
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0A0364A4B29C9855B6E4DB0A799D7AB26
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/4f1jJ8E82r0gR9Ab6Hidgqh2qrM.roa
Signing time: Mon 14 Sep 2026 13:58:27 +0000
ROA not before: Mon 14 Sep 2026 13:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199707
IP address blocks: 83.245.2.0/24 maxlen: 24
83.245.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:36:4a:4b:29:c9:85:5b:6e:4d:b0:a7:99:d7:ab:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 14 13:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1fd6327c13cdabd2047d01be8789d82a876aab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:2f:6c:99:f2:47:32:e4:50:94:97:16:83:
83:c5:6e:d4:3e:b5:fb:6c:5d:15:92:2b:da:5a:b0:
ab:de:83:64:94:51:83:8e:04:9d:c9:39:89:d6:72:
3e:f9:4b:71:03:60:5e:3a:9a:39:dd:35:34:ca:a2:
fa:89:f5:8c:4d:b0:f2:53:c8:a1:3b:3b:69:fb:a8:
14:b8:e7:04:23:e8:7c:3d:fe:13:c8:ea:7d:a0:b4:
c3:b6:2a:0f:17:58:20:3b:45:5d:b5:bf:09:e7:56:
3a:64:10:ff:1d:fe:d4:af:79:cb:af:bf:43:aa:f4:
bc:46:fa:15:7a:e5:a5:15:c5:73:43:f5:71:a1:5c:
b8:59:4d:e3:10:b3:74:13:d7:17:28:f4:d6:29:25:
58:21:9c:d9:fb:d7:3f:cd:15:b8:96:02:97:7f:f4:
e5:53:c7:03:71:b8:6b:dc:f7:ec:c4:bd:42:2b:2c:
8b:b5:c7:8e:f8:35:d8:99:03:06:8b:67:11:9b:a7:
a8:6e:82:7b:70:20:0b:9c:01:0a:00:72:26:49:5a:
c9:ba:b9:ff:35:8f:23:30:c1:ad:e3:d8:8c:80:d0:
22:33:1b:c4:b4:c1:8b:ab:dd:f7:94:43:34:ae:ff:
66:27:d5:ea:33:62:58:5c:42:9d:ac:6f:91:f9:fa:
35:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FD:63:27:C1:3C:DA:BD:20:47:D0:1B:E8:78:9D:82:A8:76:AA:B3
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/4f1jJ8E82r0gR9Ab6Hidgqh2qrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.2.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:3f:1e:c1:c1:ac:4e:a0:28:0b:c6:27:a1:dc:3d:f1:7c:52:
c6:82:bd:fd:8b:ee:1b:9d:29:dd:0b:ef:fb:03:fa:3c:0d:0e:
58:5d:c9:a2:94:ea:c8:e4:6f:89:2e:f2:7c:2f:54:75:48:77:
60:26:87:a2:8b:3c:4d:ea:f1:e6:5a:66:4b:2d:92:0f:1d:24:
fe:e2:02:95:85:41:44:18:79:32:1c:e6:9c:89:2a:21:9b:85:
ef:fa:92:79:64:86:f0:ff:27:45:99:70:f8:ea:bd:15:dd:bd:
28:c3:1a:19:cf:56:7c:96:8a:fb:d6:67:2e:22:62:c2:42:dd:
4e:d2:5c:50:5e:d0:3b:d8:2c:58:ff:9e:e7:11:26:9c:dc:00:
07:f7:d8:91:35:23:c5:e9:32:be:32:66:f5:39:a5:b0:34:1b:
ef:f7:f4:19:d6:8c:2b:cf:ee:64:64:54:9a:18:fe:6a:11:08:
f3:fe:2c:2f:12:15:24:36:d8:02:53:40:c8:13:29:be:b1:97:
87:7a:b9:bd:9a:4f:3c:b9:9f:0e:91:92:44:a7:74:20:21:41:
69:fe:05:73:0d:9f:47:3f:05:17:fb:27:47:ee:73:61:06:83:
8a:f5:d7:e6:38:10:df:9d:93:d5:0b:65:a0:e7:ee:61:02:27:
4b:7f:f8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:02:36 2026 by rpki-client