Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/njZofDQgidOuoUz8FhOg8HlCcO4.roa
File: njZofDQgidOuoUz8FhOg8HlCcO4.roa (raw, json)
Hash identifier: pmn04WuysaIGzuvE21AGaFY1j1JzftPrKe2jTGhY34o=
Subject key identifier: 9E:36:68:7C:34:20:89:D3:AE:A1:4C:FC:16:13:A0:F0:79:42:70:EE
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019F1D40A7BB7ADA8AA33D4D1E821FB4662F
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/njZofDQgidOuoUz8FhOg8HlCcO4.roa
Signing time: Wed 01 Jul 2026 10:36:44 +0000
ROA not before: Wed 01 Jul 2026 10:36:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 83.245.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:40:a7:bb:7a:da:8a:a3:3d:4d:1e:82:1f:b4:66:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jul 1 10:36:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e36687c342089d3aea14cfc1613a0f0794270ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ff:2f:f9:e0:56:64:fd:66:db:db:86:67:fc:
99:53:c7:bc:c7:bc:6d:cb:6d:7c:19:8f:54:b8:72:
64:a9:b3:63:9f:8d:b0:0b:21:41:7d:2c:a1:b6:f4:
4d:7d:fe:c9:21:b0:d6:dc:ec:5d:26:0e:79:71:53:
85:f9:dd:1d:29:b8:bf:43:f1:1f:59:90:bd:05:3e:
af:e2:45:a7:d9:be:1b:0f:5b:11:2c:5a:3b:29:70:
34:3e:07:cd:3b:15:8c:b5:24:f9:f0:0b:d6:ea:b3:
33:b3:f3:85:57:85:1a:4a:ed:4f:09:23:37:13:ce:
d9:21:5b:4d:0a:81:98:13:08:97:84:fe:0b:4a:92:
28:92:c3:74:f3:c2:f2:52:3c:2e:fc:dc:c8:ae:a1:
71:d5:f4:99:ed:e1:29:49:29:26:da:68:ce:90:10:
a3:5f:bc:7b:63:3b:51:65:fa:37:d6:c3:02:bc:21:
87:9a:31:b2:bb:e4:cb:ad:07:a4:e4:0f:d2:94:08:
2f:b8:3b:c9:6d:8d:19:49:e8:f9:dd:00:10:60:51:
38:49:89:79:3f:c0:44:9f:c9:ec:b6:39:58:06:f2:
50:99:24:c4:d2:fa:cb:92:92:c5:a5:11:ba:a6:f8:
90:b2:26:a6:50:67:ab:14:35:8e:46:1d:9a:ce:da:
cc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:36:68:7C:34:20:89:D3:AE:A1:4C:FC:16:13:A0:F0:79:42:70:EE
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/njZofDQgidOuoUz8FhOg8HlCcO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.120.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:d4:51:3a:ec:2e:88:56:12:4c:a5:9c:95:86:18:48:87:ec:
8a:f4:88:79:d7:57:9f:96:96:bf:e4:f7:81:dc:a1:df:99:b7:
72:89:ac:0f:9a:81:85:0e:2c:ff:98:d6:ad:c1:97:d9:e9:bf:
31:c0:15:8c:d5:36:15:22:8f:e4:4c:0f:cf:89:59:46:02:55:
74:e0:85:66:ae:3f:77:d4:1a:36:81:4f:fb:71:21:d0:e4:0d:
45:45:a1:69:93:d9:57:6e:69:90:2d:8b:7b:58:ee:be:50:e7:
95:42:a9:1e:a7:86:41:dd:f1:3f:7d:df:ee:2b:d7:ff:db:0f:
cd:63:5f:6d:e2:a2:9a:78:1b:cc:53:ba:ce:b0:6b:35:01:e3:
62:75:71:a6:c6:08:d4:d3:6e:e8:62:2d:ed:73:99:85:ac:15:
9a:46:2f:b6:d7:27:f9:d2:76:f2:3c:a8:8e:f7:e7:26:8c:64:
ab:93:79:e3:b8:bf:7e:d1:ee:2a:ea:e7:3c:6e:73:b8:71:ae:
26:7b:46:1f:f4:6e:8d:4c:f6:04:23:c8:b3:ae:21:da:28:4a:
21:01:18:21:71:43:5d:ee:61:e9:25:aa:c6:f1:57:51:31:34:
84:a9:25:e7:ac:9c:58:76:87:11:a8:3d:35:ed:1a:a1:e3:8e:
2d:b4:1c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:25:03 2026 by rpki-client