Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/a617PlLEN5nPKh03vNFZxBSxgh4.roa
File: a617PlLEN5nPKh03vNFZxBSxgh4.roa (raw, json)
Hash identifier: 6VG+uN+9CEFy4WZVrPFyDQaVY9yaJfKQhPjMm3IS2E0=
Subject key identifier: 6B:AD:7B:3E:52:C4:37:99:CF:2A:1D:37:BC:D1:59:C4:14:B1:82:1E
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019F4708C0A503B2DD86AAA362FFD610D5F9
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/a617PlLEN5nPKh03vNFZxBSxgh4.roa
Signing time: Thu 09 Jul 2026 13:19:43 +0000
ROA not before: Thu 09 Jul 2026 13:19:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 83.245.2.0/24 maxlen: 24
83.245.14.0/24 maxlen: 24
83.245.15.0/24 maxlen: 24
83.245.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:08:c0:a5:03:b2:dd:86:aa:a3:62:ff:d6:10:d5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jul 9 13:19:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bad7b3e52c43799cf2a1d37bcd159c414b1821e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e6:20:cc:ad:02:73:b9:bd:b5:d0:4d:d3:10:
05:84:f6:c4:f7:53:65:af:b8:5a:31:dc:12:15:7c:
91:b2:68:a3:e7:5b:50:93:cf:3f:ed:04:4b:27:64:
39:b8:0a:40:b5:7a:51:8b:24:d6:ea:31:59:10:9b:
83:b8:45:4b:8b:3c:fe:99:c2:13:6c:06:b4:a2:de:
47:bb:7f:5c:b3:e2:15:89:34:4c:09:57:75:91:58:
68:a7:b0:f3:e1:0e:99:7f:55:e1:4b:b2:78:9e:bc:
57:96:92:aa:90:1c:42:3a:50:c7:93:4d:e2:89:6d:
13:18:0b:cf:fb:a5:aa:2d:d5:f0:88:4d:09:7e:c1:
0f:22:00:fc:e8:2e:0e:a3:85:ea:a3:6d:de:bb:9e:
b2:8c:9e:c6:83:ea:51:02:54:2e:4f:03:d1:08:91:
c8:60:72:f8:f7:8b:96:be:db:9d:04:0a:d3:30:7c:
74:16:85:b4:fb:21:06:ca:c1:7d:85:3a:64:1a:db:
cc:5b:9f:59:41:f8:06:d9:5b:64:91:ae:ae:58:65:
b1:e1:87:98:aa:e3:95:c4:94:35:38:90:e7:18:68:
fe:09:43:36:9b:54:7a:df:4a:04:d3:bd:4f:38:33:
00:b0:48:70:ee:d8:e2:a7:ae:99:2c:35:0c:d2:af:
f6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AD:7B:3E:52:C4:37:99:CF:2A:1D:37:BC:D1:59:C4:14:B1:82:1E
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/a617PlLEN5nPKh03vNFZxBSxgh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.2.0/24
83.245.14.0/23
83.245.108.0/24
Signature Algorithm: sha256WithRSAEncryption
05:84:ce:73:b5:3f:9b:18:6d:ad:95:57:dc:e4:d4:df:7c:a6:
2e:8a:d4:75:54:04:a8:bd:72:32:85:67:f4:56:85:70:e5:52:
8e:1d:2d:64:c6:dd:7c:3d:c3:9f:ee:80:10:4c:bc:62:3e:0d:
2a:1e:e4:02:9f:e1:b8:d5:28:f7:81:41:aa:e6:70:0b:ee:37:
25:1c:0b:db:48:34:88:35:f0:0e:3e:a6:93:14:75:5d:be:f9:
e9:df:0c:00:d9:c5:d2:47:78:2a:9c:cc:89:ee:a7:72:0b:71:
03:cd:01:83:9c:6f:65:31:af:f8:8b:3f:5e:c5:ef:5e:ed:40:
08:32:95:cf:c2:cc:dc:6f:3a:f7:33:50:ec:4e:c4:ac:5a:8a:
1a:5a:12:06:08:c7:04:b4:48:25:d4:ed:1d:45:da:6c:79:6c:
d2:8b:4c:7b:ad:4f:06:7e:d5:40:09:b9:0a:56:86:34:86:bf:
5c:66:83:29:d1:3b:62:a0:7c:4a:c7:23:ab:4a:6c:6e:e0:57:
3a:71:f7:8f:c2:13:0e:7f:ec:d2:08:34:23:a7:fd:b5:83:46:
52:24:28:54:29:81:b4:73:94:cd:1d:9c:62:54:b8:bb:b8:1d:
2b:d1:02:34:c4:9c:60:a2:23:27:70:a4:b3:de:9a:be:04:87:
bb:06:87:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:18 2026 by rpki-client