Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/PsXb9zE8YGzr8n_RkbH4pCrLI_E.roa
File: PsXb9zE8YGzr8n_RkbH4pCrLI_E.roa (raw, json)
Hash identifier: DgmoxJI7MnT1BVWGbCdAqU6yxQ94JqRUW84m/NLaLZI=
Subject key identifier: 3E:C5:DB:F7:31:3C:60:6C:EB:F2:7F:D1:91:B1:F8:A4:2A:CB:23:F1
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019F1D40A6D8454BD0784040242365D5795B
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/PsXb9zE8YGzr8n_RkbH4pCrLI_E.roa
Signing time: Wed 01 Jul 2026 10:36:44 +0000
ROA not before: Wed 01 Jul 2026 10:36:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 83.245.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:40:a6:d8:45:4b:d0:78:40:40:24:23:65:d5:79:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jul 1 10:36:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ec5dbf7313c606cebf27fd191b1f8a42acb23f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:79:d0:9c:5e:ee:75:a0:6f:93:d3:f2:f5:
2d:0e:a2:41:8c:5b:82:8a:ce:03:2c:9d:37:92:38:
22:af:32:dd:5d:94:5e:e2:b6:4b:a6:e3:1e:28:38:
54:8a:8a:1c:29:94:02:e8:63:e0:3d:7c:b4:53:de:
1c:5f:48:d4:f2:62:8f:06:72:d0:b8:89:20:22:b4:
ff:3d:89:b2:7e:50:78:bf:9a:c8:55:68:37:e8:ef:
27:ae:b7:62:97:a3:43:56:5f:cf:9a:45:12:88:b3:
90:cf:6d:f4:39:38:13:dd:3b:2c:5b:90:d1:7c:82:
e8:89:5a:9b:f3:f6:0f:5a:6d:17:dd:3c:7a:63:9d:
48:94:8e:30:74:92:cf:58:73:bd:77:36:f4:bc:f5:
56:c7:1e:78:45:c4:de:1b:5c:fb:58:04:88:11:a0:
94:ca:4e:0b:a3:72:b1:87:f8:5f:0c:f8:87:0c:94:
19:5d:de:c1:3b:65:2a:20:11:8a:cf:58:81:34:b1:
80:fa:88:b7:b4:91:b0:d6:08:fb:48:bd:eb:60:46:
90:d8:a3:21:eb:87:39:6e:83:be:0a:7b:a8:03:d3:
0c:0c:a6:57:1f:9f:1f:ea:f2:65:9e:ec:51:84:3e:
bf:f8:0c:a0:d1:f9:fe:14:44:18:25:07:17:b1:bb:
ea:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C5:DB:F7:31:3C:60:6C:EB:F2:7F:D1:91:B1:F8:A4:2A:CB:23:F1
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/PsXb9zE8YGzr8n_RkbH4pCrLI_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.9.0/24
Signature Algorithm: sha256WithRSAEncryption
72:60:cc:63:a8:9b:0d:ef:86:dc:39:de:07:a6:a2:73:a4:74:
11:6f:81:26:4e:0f:ff:2b:fa:50:c4:a4:36:f2:75:ef:1b:91:
9f:87:60:ee:0c:82:6d:1d:90:ff:71:37:4f:7a:c9:a7:72:a9:
ed:a1:c6:e9:4a:92:fa:ba:68:12:4f:93:0a:6a:fe:3f:f3:c6:
99:af:8a:65:fa:0b:a1:01:24:ee:a5:c5:9b:77:0c:d5:1e:2d:
17:a5:f1:1e:93:0a:ec:57:de:4c:ac:c8:35:b3:95:11:af:0d:
d1:15:0c:be:9a:10:8d:a6:95:c0:8d:7c:53:03:93:ce:90:2a:
6e:13:e4:46:5c:86:42:88:49:90:02:9e:d1:1c:c3:d2:5c:30:
66:a6:11:28:9d:77:df:2d:92:15:e2:65:37:04:5f:19:38:1a:
bc:28:6b:da:a4:af:d2:9e:b1:d4:8f:2a:e6:2e:6f:a9:b6:a3:
d5:f2:8e:12:63:08:81:aa:bf:1d:0b:2c:d7:52:7c:d4:27:5a:
59:5c:db:76:b9:b9:fd:5c:25:a0:b3:9e:b4:6e:87:72:70:7f:
ae:e7:cf:12:ac:4c:5d:49:8a:17:15:b9:82:68:1e:ad:88:15:
0d:98:8c:bf:e2:a0:3e:f1:40:74:0f:f3:78:81:e2:3c:95:82:
8d:60:35:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:34:20 2026 by rpki-client