Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/9doi_T5Qt_ff01AvyIWQAzW828I.roa
File: 9doi_T5Qt_ff01AvyIWQAzW828I.roa (raw, json)
Hash identifier: 7KwQouNEjIqgnyE2nXLB5kr8LWRx+hfgBOKoH0NSHb4=
Subject key identifier: F5:DA:22:FD:3E:50:B7:F7:DF:D3:50:2F:C8:85:90:03:35:BC:DB:C2
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A1CED6CB72FEA66FCFCBD85EA38558F9F4
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/9doi_T5Qt_ff01AvyIWQAzW828I.roa
Signing time: Thu 12 Nov 2026 08:19:05 +0000
ROA not before: Thu 12 Nov 2026 08:19:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199550
IP address blocks: 83.245.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ce:d6:cb:72:fe:a6:6f:cf:cb:d8:5e:a3:85:58:f9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Nov 12 08:19:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5da22fd3e50b7f7dfd3502fc885900335bcdbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:aa:5f:ff:0d:8c:03:3a:8c:88:f0:35:11:3d:
e2:ce:0e:6d:ec:d3:2d:10:01:2f:15:c3:d7:20:00:
86:11:80:31:ef:11:5e:97:eb:76:57:2c:cb:21:8e:
49:51:7c:29:10:49:a7:27:07:56:96:da:cc:f0:a1:
23:55:d0:be:8e:08:fc:c5:b6:ca:9c:4f:52:23:c6:
e6:cb:e8:3a:e6:47:8d:2c:49:f5:bd:96:45:77:c8:
e0:69:fd:e0:16:9e:4f:da:f7:54:e9:0f:70:1b:f4:
25:93:c4:1a:52:56:18:ef:16:94:42:d7:58:5f:3c:
d2:16:a6:ab:7f:b0:4f:0a:5d:b0:d0:61:9f:17:b3:
51:bb:e4:b6:6b:46:e1:e6:e7:80:19:02:28:2b:a3:
f3:9e:77:06:e1:2d:04:75:47:8f:50:84:08:0b:c2:
b4:0b:3e:df:a0:5d:5a:76:b7:06:00:82:5e:a5:d3:
e3:a9:4a:59:dd:c6:9f:0c:cc:57:95:e4:05:5b:47:
05:82:5a:78:55:fd:ae:bd:92:a3:d0:cf:bb:d3:23:
85:b0:5f:28:61:3f:a8:80:41:fb:b7:fc:90:3f:cd:
4c:ec:4d:3a:d0:18:43:a3:67:37:93:4b:d4:52:51:
71:21:0e:3c:78:8f:76:d2:ba:00:b7:06:54:94:2b:
a6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DA:22:FD:3E:50:B7:F7:DF:D3:50:2F:C8:85:90:03:35:BC:DB:C2
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/9doi_T5Qt_ff01AvyIWQAzW828I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.67.0/24
Signature Algorithm: sha256WithRSAEncryption
40:bc:d3:b1:32:c8:6b:f5:26:32:a4:07:5d:dc:be:b3:ff:05:
d6:ad:c6:83:ab:6d:ac:de:fe:6a:f1:9c:a2:7c:55:32:8a:96:
fc:4d:96:79:9b:4f:54:d9:06:ed:9f:f1:56:a2:7e:30:d6:7b:
92:e6:94:2f:91:ae:77:71:4f:c0:4d:c6:1b:fe:19:3a:a9:e1:
04:c9:da:ba:00:59:87:27:4a:59:08:cf:f2:ad:37:f2:7c:b4:
0d:44:6a:fe:fc:31:40:26:00:1d:76:51:d6:38:a9:05:46:71:
b6:76:c2:da:e4:79:0d:bb:fc:c5:64:9b:40:92:04:d6:90:f7:
76:c4:a8:2f:97:6e:2d:bd:0a:75:c0:1d:13:23:9a:4c:37:bd:
ad:76:7d:63:80:b2:53:46:88:a8:b6:7a:9b:ed:e9:37:3f:39:
12:a6:ff:8f:ba:bc:0e:c9:0f:cf:82:72:9e:3c:f5:15:d3:e2:
7a:36:27:bc:11:77:83:b3:46:75:df:07:ab:77:af:ee:fd:df:
8a:45:2a:e4:d0:e3:6c:12:b5:09:62:79:90:ce:9e:25:7e:89:
94:5e:1e:2c:b5:1c:55:dc:ef:64:4b:e4:68:a8:90:46:f4:16:
8f:08:c8:7d:7e:26:60:83:c9:c9:90:3f:a5:6c:8f:66:5c:e8:
cf:c6:a4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:28:42 2026 by rpki-client