Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/88oBOIfcxO5C3viuNbKmbpyOp0g.roa
File: 88oBOIfcxO5C3viuNbKmbpyOp0g.roa (raw, json)
Hash identifier: 71bKpcg4fHr0KDnTVvLnsNbSOhrOX1niwtQJpClMRyo=
Subject key identifier: F3:CA:01:38:87:DC:C4:EE:42:DE:F8:AE:35:B2:A6:6E:9C:8E:A7:48
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0CD3AA3E0DFF830DD5EEB511F82AD770C
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/88oBOIfcxO5C3viuNbKmbpyOp0g.roa
Signing time: Wed 23 Sep 2026 07:46:07 +0000
ROA not before: Wed 23 Sep 2026 07:46:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.245.5.0/24 maxlen: 24
83.245.9.0/24 maxlen: 24
83.245.11.0/24 maxlen: 24
83.245.14.0/24 maxlen: 24
83.245.15.0/24 maxlen: 24
83.245.68.0/24 maxlen: 24
83.245.71.0/24 maxlen: 24
89.167.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:3a:a3:e0:df:f8:30:dd:5e:eb:51:1f:82:ad:77:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 23 07:46:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3ca013887dcc4ee42def8ae35b2a66e9c8ea748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:33:b4:9d:e7:39:29:03:91:4b:9e:7b:de:
b2:02:b7:43:f4:eb:01:ff:10:67:34:4d:67:d9:15:
00:69:cf:36:30:94:e0:f1:f4:ff:bb:10:09:e7:c2:
17:13:57:92:e5:a8:12:94:fe:63:01:61:89:c1:fe:
69:19:48:66:c9:8d:3d:b6:9d:21:99:f5:08:13:1e:
ae:10:60:c4:8e:66:30:2d:88:51:20:96:00:bb:5c:
18:81:32:0d:a0:83:b0:50:94:19:55:4d:e1:ac:db:
8e:52:41:a2:a3:a3:d7:70:30:5e:e8:ed:ee:74:e0:
95:c2:54:36:0b:66:da:c8:a0:ed:b5:32:5d:bb:2d:
d3:b7:ae:b9:e7:f8:5b:8f:85:c8:cd:c9:cc:48:11:
5f:33:0d:4a:61:11:af:65:9f:4c:ac:0a:27:d2:4c:
79:59:b2:7c:5f:26:b9:f7:1a:bd:b4:50:41:e6:fd:
cd:e5:6f:3e:95:0b:75:45:10:9a:4a:45:f3:d4:93:
60:d1:92:f3:fa:dc:6d:0f:21:74:32:7b:84:fd:5e:
17:0a:5e:ed:4f:6a:f7:d2:c1:a5:1e:20:89:50:4f:
ab:ea:fd:33:77:b8:3e:f4:7e:86:a3:f0:96:f3:d1:
d1:77:4f:74:3f:69:00:46:c5:f6:42:6f:30:10:c9:
74:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CA:01:38:87:DC:C4:EE:42:DE:F8:AE:35:B2:A6:6E:9C:8E:A7:48
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/88oBOIfcxO5C3viuNbKmbpyOp0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.5.0/24
83.245.9.0/24
83.245.11.0/24
83.245.14.0/23
83.245.68.0/24
83.245.71.0/24
89.167.165.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:ac:d0:70:9e:85:30:1a:8c:f6:05:fe:92:e4:d7:05:7f:fd:
27:2a:87:e2:9e:99:dd:3e:32:72:7c:f7:a5:ae:85:f5:02:4e:
a8:83:bd:60:14:4f:c4:53:b1:f0:3a:bb:6a:f7:31:ea:03:9a:
bc:cb:f3:05:b0:6f:3d:f3:90:ce:f1:ba:39:6e:5a:c7:23:16:
29:f6:81:14:e4:d1:f2:fd:d3:c0:8a:e6:0f:7e:e7:84:50:6b:
7c:fe:45:75:52:bb:c2:7b:f7:1f:4d:1c:cd:cc:48:ba:8b:36:
75:7f:4e:2e:07:86:5d:66:9c:b9:50:b7:ed:08:07:2d:3a:55:
72:ea:43:f2:c5:d3:3d:a3:39:7c:6a:58:10:da:db:50:d0:a6:
27:1d:d7:26:f2:a4:d1:3e:67:36:0b:9a:61:ac:df:fe:22:2d:
11:2d:ae:d7:56:f2:8a:61:90:a9:ba:a9:46:60:0b:52:51:3c:
34:15:04:c5:49:30:fe:ae:9d:20:d9:91:db:65:ad:7b:41:8c:
9b:fa:70:89:57:43:79:e3:20:a4:39:7b:11:17:a6:00:2c:99:
9f:3c:e2:6a:8c:ec:f9:a7:de:7b:02:e8:8b:ca:9c:86:01:c0:
1b:c0:e4:e0:55:25:de:3b:d9:91:c9:31:2f:74:70:b7:6a:70:
0d:db:85:42
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAaDNOqPg3/gw3V7rUR+CrXcMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0
MDdhODAwHhcNMjYwOTIzMDc0NjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2NhMDEzODg3ZGNjNGVlNDJkZWY4YWUzNWIyYTY2ZTljOGVhNzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwikztJ3nOSkDkUuee96yArdD9OsB
/xBnNE1n2RUAac82MJTg8fT/uxAJ58IXE1eS5agSlP5jAWGJwf5pGUhmyY09tp0h
mfUIEx6uEGDEjmYwLYhRIJYAu1wYgTINoIOwUJQZVU3hrNuOUkGio6PXcDBe6O3u
dOCVwlQ2C2bayKDttTJduy3Tt6655/hbj4XIzcnMSBFfMw1KYRGvZZ9MrAon0kx5
WbJ8Xya59xq9tFBB5v3N5W8+lQt1RRCaSkXz1JNg0ZLz+txtDyF0MnuE/V4XCl7t
T2r30sGlHiCJUE+r6v0zd7g+9H6Go/CW89HRd090P2kARsX2Qm8wEMl0TwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFPPKATiH3MTuQt74rjWypm6cjqdIMB8GA1UdIwQY
MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt
NWQ1NjA5ODljZjdiLzEvODhvQk9JZmN4TzVDM3ZpdU5iS21icHlPcDBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi
LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAU/UFAwQA
U/UJAwQAU/ULAwQBU/UOAwQAU/VEAwQAU/VHAwQAWaelMA0GCSqGSIb3DQEBCwUA
A4IBAQAbrNBwnoUwGoz2Bf6S5NcFf/0nKofinpndPjJyfPelroX1Ak6og71gFE/E
U7HwOrtq9zHqA5q8y/MFsG8985DO8bo5blrHIxYp9oEU5NHy/dPAiuYPfueEUGt8
/kV1UrvCe/cfTRzNzEi6izZ1f04uB4ZdZpy5ULftCActOlVy6kPyxdM9ozl8algQ
2ttQ0KYnHdcm8qTRPmc2C5phrN/+Ii0RLa7XVvKKYZCpuqlGYAtSUTw0FQTFSTD+
rp0g2ZHbZa17QYyb+nCJV0N54yCkOXsRF6YALJmfPOJqjOz5p957AuiLypyGAcAb
wOTgVSXeO9mRyTEvdHC3anAN24VC
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:28:50 2026 by rpki-client