Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/euUSuD1lZKlShMZyrQqymS3jUy8.roa
File: euUSuD1lZKlShMZyrQqymS3jUy8.roa (raw, json)
Hash identifier: +PD83dNVumxid1Tk8m31T6C/beJSa9fEboE2ESl2okE=
Subject key identifier: 7A:E5:12:B8:3D:65:64:A9:52:84:C6:72:AD:0A:B2:99:2D:E3:53:2F
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0D287E8929299B68CB7EE38911ED6131D
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/euUSuD1lZKlShMZyrQqymS3jUy8.roa
Signing time: Thu 24 Sep 2026 08:28:37 +0000
ROA not before: Thu 24 Sep 2026 08:28:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 83.245.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:87:e8:92:92:99:b6:8c:b7:ee:38:91:1e:d6:13:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 24 08:28:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ae512b83d6564a95284c672ad0ab2992de3532f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:a7:69:56:b6:52:b8:d9:60:15:dd:49:e4:
f7:be:8d:87:e1:60:2e:52:d3:8e:f8:78:04:2b:24:
df:e5:a9:dc:75:e7:1f:c0:1b:32:81:00:d1:b2:0b:
03:01:d8:27:e5:80:58:07:d8:26:b3:9f:88:6c:77:
7a:3a:e2:24:a6:c0:23:11:26:69:20:67:7a:2f:07:
35:78:4f:9a:43:9d:51:bb:78:8b:c6:ca:4c:fb:74:
59:1b:b6:38:49:44:b7:36:fe:97:3d:ba:88:6f:d6:
6e:03:6e:d0:49:ce:47:2a:52:4d:49:2e:82:f2:4b:
1e:d4:d0:04:59:66:96:c1:ea:16:f9:5c:8d:b2:a5:
99:0e:2a:88:89:a1:3e:cf:81:ae:52:b0:2c:e5:89:
ab:2c:44:5d:c9:30:24:6c:f0:41:1e:0a:5f:f5:38:
bf:29:0c:c6:44:02:0e:fe:2d:d3:f4:c0:c1:c3:30:
16:dc:e2:55:10:28:fb:e2:a6:99:e4:04:9f:96:a1:
ab:5f:53:61:77:a4:cf:37:12:93:e9:59:86:00:5c:
cc:15:7f:5d:29:9f:e6:44:25:97:3b:2a:84:52:14:
97:2c:d9:3b:70:ff:aa:1f:69:25:e0:50:ac:46:32:
29:81:52:a6:72:51:b9:e3:47:5c:9c:68:de:86:50:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E5:12:B8:3D:65:64:A9:52:84:C6:72:AD:0A:B2:99:2D:E3:53:2F
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/euUSuD1lZKlShMZyrQqymS3jUy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.40.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:aa:62:94:86:a7:d3:c1:39:6f:85:79:cd:44:29:28:96:3b:
d4:bc:2c:72:46:f3:3b:fb:ce:f5:45:f9:93:6f:8b:33:88:a1:
7b:34:e1:a8:5f:8c:d0:cf:bf:80:d5:4e:14:73:8f:30:81:50:
21:b6:6c:a5:64:82:4b:dc:d1:19:10:08:69:a4:7b:e5:ec:57:
73:1c:ba:8f:7f:46:af:d5:e7:ef:74:4d:b4:6e:24:63:97:aa:
fb:33:8f:91:43:59:54:8d:59:1f:b3:ea:0d:59:bc:50:b8:84:
f7:07:35:44:00:cc:a5:8d:55:c4:c7:52:3e:67:15:b8:55:d6:
54:1c:81:52:8d:70:5f:d1:d8:42:08:2a:28:d3:42:8c:e6:c5:
0a:03:12:7f:14:d1:20:cd:79:e2:e3:b1:10:e6:da:58:e3:cc:
f5:14:0a:06:bd:26:3b:2d:aa:23:8e:9b:99:c6:c6:86:21:87:
ea:34:2a:25:70:31:f8:90:38:ff:2d:41:4f:b2:49:11:b5:96:
d6:e4:a1:e6:6a:c9:d9:c2:82:dc:6c:26:ee:1b:2b:65:2e:8c:
8e:e3:76:72:5c:db:7e:02:05:76:27:14:41:3d:3f:83:35:1f:
d5:f6:de:cc:13:06:ab:20:a0:53:d0:f2:18:2a:dd:4d:22:04:
04:54:68:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:45:21 2026 by rpki-client