Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/VSDudfaR07Sid5nvsB2vmBNWEsk.roa
File: VSDudfaR07Sid5nvsB2vmBNWEsk.roa (raw, json)
Hash identifier: Ow6ryTxzsItq5o8zstdyJ4oOnGY3z16hLDJu00wlEXU=
Subject key identifier: 55:20:EE:75:F6:91:D3:B4:A2:77:99:EF:B0:1D:AF:98:13:56:12:C9
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019F1D40A9CE4896F652F1BA241552EE25D0
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/VSDudfaR07Sid5nvsB2vmBNWEsk.roa
Signing time: Wed 01 Jul 2026 10:36:44 +0000
ROA not before: Wed 01 Jul 2026 10:36:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399359
IP address blocks: 83.245.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:40:a9:ce:48:96:f6:52:f1:ba:24:15:52:ee:25:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jul 1 10:36:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5520ee75f691d3b4a27799efb01daf98135612c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fe:fa:56:e3:33:03:75:d4:fd:fe:47:90:1e:
9b:f8:f3:9f:3b:8f:05:ca:ac:92:0f:ad:cc:9e:b2:
80:0b:c6:71:d4:7f:51:9d:3d:31:9e:27:21:97:93:
c4:5c:8e:ac:b2:38:87:cb:5f:29:4b:d3:41:99:0c:
9c:f0:cb:78:46:ce:87:09:66:67:76:d6:08:25:d1:
d9:07:ed:a4:8b:75:0b:6c:1c:f0:10:38:5e:86:49:
70:a2:f1:cc:57:69:1b:16:63:8f:db:80:b1:88:01:
51:33:d0:5a:0e:3b:fd:e2:5a:4c:23:2c:0f:14:4a:
0b:3b:24:38:7b:4c:88:80:75:55:ef:6c:d6:69:37:
e6:9c:e0:05:a5:5d:d5:c4:f4:2d:d1:57:ba:0a:52:
85:d6:73:f4:51:58:b5:a2:75:df:7c:3f:c6:d8:f5:
a8:fc:b0:5b:1e:3c:61:47:30:38:57:7d:62:2d:4e:
0b:f3:e5:cb:1b:df:8b:cd:06:0d:54:40:e4:45:76:
35:f1:4c:2b:87:bc:a6:3a:78:77:ba:2f:1c:3e:bd:
2c:a4:c2:40:db:fb:99:eb:78:5f:c0:67:3c:ff:61:
45:40:8e:0b:d4:6f:e9:cf:05:c3:c9:50:af:da:9d:
93:23:12:e9:65:f2:94:df:7b:c1:4f:2f:61:70:dc:
1a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:20:EE:75:F6:91:D3:B4:A2:77:99:EF:B0:1D:AF:98:13:56:12:C9
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/VSDudfaR07Sid5nvsB2vmBNWEsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.10.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:3d:a1:3f:47:ff:0a:3c:b0:5d:04:c5:64:63:3d:62:fe:ac:
75:e3:88:65:f8:a8:75:d4:fb:1b:25:71:ba:99:52:2f:d1:41:
c0:7b:f3:96:51:13:48:7d:8e:14:07:6f:f9:6c:55:b7:54:1d:
e8:12:0b:5e:cd:14:34:23:a0:ce:00:60:78:85:6d:65:50:f3:
e3:62:f2:0e:88:ba:05:be:66:ff:c8:0c:3c:00:eb:dc:cd:ec:
73:a9:2e:b3:3e:c9:76:5e:4d:cd:e9:44:9c:e5:7e:ec:07:a8:
b5:77:51:68:5a:e2:84:4d:ef:34:df:3c:ec:5d:53:bf:5a:53:
fb:e2:f1:a2:39:dc:74:41:5a:09:65:f5:fe:ba:fa:54:61:a2:
43:e4:e8:37:0b:61:8a:30:2a:1c:9b:91:01:e4:d6:5f:a8:74:
7c:c2:a8:ef:ca:c8:61:6e:2b:ff:d0:0a:b9:7e:0a:7d:d6:80:
23:e3:13:ec:6b:3c:e1:b2:88:e1:4c:fe:64:a9:ca:f3:94:36:
b0:ad:4e:b4:39:7c:d1:c6:ec:16:e1:18:02:5b:fe:ad:d4:09:
4f:f2:db:a6:04:42:8b:90:eb:01:72:d9:40:eb:5c:01:0e:ce:
1d:62:6b:fd:48:db:52:db:ab:7b:dc:3b:cc:f0:0b:94:bb:6d:
b4:7c:fa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:25 2026 by rpki-client