Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/9PGqKuICSeWwf3zuAb1W9nW41BQ.roa
File: 9PGqKuICSeWwf3zuAb1W9nW41BQ.roa (raw, json)
Hash identifier: O9+KrIurPHxxt2aVkqdjf+mpsaCM/665bM72vJuP/4o=
Subject key identifier: F4:F1:AA:2A:E2:02:49:E5:B0:7F:7C:EE:01:BD:56:F6:75:B8:D4:14
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0D28A4C3A8B2A3E9B3391D2B576DD32C7
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/9PGqKuICSeWwf3zuAb1W9nW41BQ.roa
Signing time: Thu 24 Sep 2026 08:31:13 +0000
ROA not before: Thu 24 Sep 2026 08:31:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 83.245.40.0/24 maxlen: 24
83.245.41.0/24 maxlen: 24
83.245.43.0/24 maxlen: 24
83.245.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:8a:4c:3a:8b:2a:3e:9b:33:91:d2:b5:76:dd:32:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 24 08:31:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4f1aa2ae20249e5b07f7cee01bd56f675b8d414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:02:4d:ba:d8:ea:d4:07:38:8d:f2:9e:48:
40:62:58:ec:5a:53:a5:d2:9f:86:2e:d0:ed:52:e1:
59:ce:a2:92:a4:09:16:dd:ca:e8:10:b1:66:69:be:
2b:3c:83:ef:09:74:59:cc:60:04:f8:2b:e8:5c:da:
e9:8f:18:9e:9f:56:58:72:52:21:2f:dc:01:7b:f2:
dc:dd:8c:82:5f:cd:0c:85:d6:f0:14:1c:9d:14:34:
15:df:21:02:9e:fb:37:86:51:26:98:1e:65:f4:ad:
e7:e2:d7:4e:96:3c:6a:16:b7:80:a6:3b:73:58:b8:
e2:f6:bd:1c:94:f4:76:cd:bf:cc:fb:44:c1:eb:c6:
f4:7e:48:c6:e7:18:13:ac:92:39:82:cd:d2:f0:b9:
ca:a3:c3:05:81:1b:a6:54:a0:ed:44:bc:64:72:8c:
6e:c8:19:78:36:1c:81:df:cd:ff:ce:38:9a:e9:9e:
12:d8:70:bd:ae:82:70:de:24:a6:55:ad:cf:1f:c5:
c9:4d:67:26:d8:aa:50:25:e5:bc:0c:57:1e:10:89:
66:f2:9f:6c:59:86:66:20:a3:39:29:78:64:bc:ea:
ae:ce:f9:40:f3:c3:3f:71:39:5a:ea:3c:b5:ba:fd:
1f:40:e4:68:e3:ad:81:f8:89:d8:00:74:8b:54:db:
ce:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F1:AA:2A:E2:02:49:E5:B0:7F:7C:EE:01:BD:56:F6:75:B8:D4:14
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/9PGqKuICSeWwf3zuAb1W9nW41BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.40.0/23
83.245.43.0/24
83.245.46.0/24
Signature Algorithm: sha256WithRSAEncryption
15:93:78:4e:f8:53:7a:da:cf:71:04:c3:64:16:56:ff:cd:07:
4f:45:84:5f:30:d1:65:37:94:1c:1f:7e:9e:4b:72:dc:64:3b:
e4:f3:35:77:b2:b6:e8:f0:b4:74:03:b3:40:1f:02:34:a1:8a:
02:bb:ee:10:8b:73:23:15:d6:8e:e6:75:19:ab:99:77:22:ee:
0e:c0:52:4b:4f:fb:76:b3:11:d6:a5:20:41:e2:9d:79:55:d4:
e3:22:e5:36:31:2a:13:14:26:2c:b9:41:cd:72:0e:af:5e:d4:
6b:a0:19:d9:60:67:18:33:31:e2:05:4c:0c:31:75:a9:20:0f:
16:19:54:1a:fe:b0:f6:26:40:d3:6c:92:17:7f:2e:7c:82:d6:
a7:d1:65:70:32:88:7c:4a:53:b7:97:d0:be:a2:5f:08:b1:03:
cd:9c:bb:04:fd:83:9e:f7:1d:86:be:a3:74:8c:b2:f0:f9:61:
4b:47:df:df:f3:70:c4:1c:b0:f2:18:5e:18:90:4f:cf:ef:f8:
3d:0a:d9:2e:4b:aa:f1:6f:b7:85:16:d9:78:c4:50:2a:07:4a:
f1:59:0b:53:9d:e8:1e:ac:10:f0:28:55:cb:65:61:8a:f4:3b:
01:ac:96:2c:5d:33:ef:43:1e:aa:59:4e:a2:9f:33:88:b1:90:
43:f3:30:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:19:26 2026 by rpki-client