Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/fIfSfYc5asb6gBqe9eNVort2xs4.roa
File: fIfSfYc5asb6gBqe9eNVort2xs4.roa (raw, json)
Hash identifier: teEWsVV3XoZvsOLboWSSAZxkb697W0VTg9OJPaTVF5I=
Subject key identifier: 7C:87:D2:7D:87:39:6A:C6:FA:80:1A:9E:F5:E3:55:A2:BB:76:C6:CE
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019F4B434FE13CD85D9D45F7D4BF47854BD6
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/fIfSfYc5asb6gBqe9eNVort2xs4.roa
Signing time: Fri 10 Jul 2026 09:02:10 +0000
ROA not before: Fri 10 Jul 2026 09:02:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.245.5.0/24 maxlen: 24
83.245.68.0/24 maxlen: 24
83.245.71.0/24 maxlen: 24
83.245.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:43:4f:e1:3c:d8:5d:9d:45:f7:d4:bf:47:85:4b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jul 10 09:02:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c87d27d87396ac6fa801a9ef5e355a2bb76c6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:ac:c4:98:8e:59:c2:70:5b:5a:80:f2:bf:
2b:3a:27:d6:40:ca:4c:55:4d:09:00:fe:c1:cc:92:
46:52:54:5f:da:9d:3f:d1:b7:5e:e3:cb:e7:0f:b6:
07:9a:64:f7:44:4b:28:42:09:fd:d7:d6:f0:0e:2e:
92:48:4a:12:9e:7d:37:09:96:f1:9c:47:ac:19:b6:
69:39:ad:19:b9:4a:17:21:3e:eb:df:bc:09:cc:d6:
28:3d:85:7b:4f:86:a9:fb:4b:50:ad:96:e8:1c:58:
46:52:0e:9d:47:64:ff:1f:0d:54:77:52:02:08:8e:
08:22:50:7a:7e:c0:58:6f:02:b2:77:49:dc:85:3c:
32:4b:82:a5:44:14:aa:ee:c5:a7:18:f3:84:1b:d8:
43:b8:23:12:3a:76:25:1d:b7:b9:b2:a2:fa:bb:84:
9d:2b:c6:96:be:ea:8f:f8:7f:e8:21:6c:9f:5b:d3:
d2:21:8c:a0:5c:6e:51:8f:eb:99:9f:e6:06:16:15:
7a:ec:98:94:e6:3e:a8:f1:fe:3c:3e:d9:a5:4c:6b:
9e:74:74:1c:bb:e0:a2:d0:1a:f5:7d:34:7b:8c:79:
9a:7a:73:f7:18:f4:cb:da:8f:20:0d:46:29:a1:4e:
a8:52:6a:b7:99:06:6d:a4:3b:4e:6d:ee:59:fc:25:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:87:D2:7D:87:39:6A:C6:FA:80:1A:9E:F5:E3:55:A2:BB:76:C6:CE
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/fIfSfYc5asb6gBqe9eNVort2xs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.5.0/24
83.245.68.0/24
83.245.71.0/24
83.245.78.0/24
Signature Algorithm: sha256WithRSAEncryption
29:e9:7b:e9:94:3c:43:eb:19:21:b1:20:59:8b:f7:13:28:28:
8d:b3:ba:96:2c:00:5d:25:dd:99:e2:c0:1d:ba:94:52:02:c1:
11:8a:2c:8b:c4:9b:e3:66:bc:b2:45:d8:3b:d0:f5:8c:83:28:
01:5f:c4:22:94:9b:cc:3c:34:e4:7b:53:87:97:57:a8:50:4c:
8a:c7:04:89:70:44:82:69:12:23:e7:89:b0:a6:b4:e8:bf:f3:
2a:2b:79:c7:fa:8a:03:aa:3e:61:e9:8e:3d:67:d7:ac:73:ee:
be:48:b6:9c:d3:0c:bf:49:e9:b5:55:97:d8:75:6b:19:25:5c:
49:fe:32:df:e3:09:1d:84:e1:e6:bf:b1:cc:fd:c3:3f:d4:35:
d0:50:db:53:ba:56:ba:fe:71:9a:38:c6:34:fb:7e:32:6a:07:
f1:e3:87:d6:c9:9e:2f:b3:2d:e9:e9:a0:12:e8:38:5b:30:36:
55:ce:8d:c5:d5:f3:f8:46:c5:7d:3c:53:1a:51:b7:90:c6:18:
78:48:31:db:85:63:a6:53:62:3c:62:49:82:bf:65:59:5b:5d:
bc:ee:11:ba:1d:8f:ed:3d:1e:47:92:28:c8:fe:45:07:d1:4f:
3f:9c:89:dd:ad:7f:88:50:77:bf:d3:84:0d:e7:9d:3e:2e:97:
a5:59:7d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:59:54 2026 by rpki-client