Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/oGw3OpRoGZfTyjJR-z_r2Dy-Y8A.roa
File: oGw3OpRoGZfTyjJR-z_r2Dy-Y8A.roa (raw, json)
Hash identifier: oCbELwtCCjp+HJZHCOxixxeMeDAIy5Gv5vPFtIqmCag=
Subject key identifier: A0:6C:37:3A:94:68:19:97:D3:CA:32:51:FB:3F:EB:D8:3C:BE:63:C0
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019F8DE963CBF5BBEB608D3788ADC7875013
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/oGw3OpRoGZfTyjJR-z_r2Dy-Y8A.roa
Signing time: Thu 23 Jul 2026 07:38:30 +0000
ROA not before: Thu 23 Jul 2026 07:38:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203410
IP address blocks: 83.245.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:e9:63:cb:f5:bb:eb:60:8d:37:88:ad:c7:87:50:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jul 23 07:38:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a06c373a94681997d3ca3251fb3febd83cbe63c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:58:16:ad:26:58:fa:3c:6b:d0:88:bc:f5:1b:
81:16:82:26:c5:fe:0d:0a:2f:2c:23:5d:6f:a2:fa:
ac:25:c5:00:f0:7c:1f:44:59:be:02:66:41:6b:6a:
f4:65:c6:8b:a6:85:e7:ee:59:48:aa:0d:7c:39:45:
2d:44:14:87:dc:32:c1:8b:60:69:66:83:d4:91:82:
50:2d:78:58:7b:e7:34:38:26:a6:84:a7:6c:c5:a7:
c3:99:43:e7:0f:f9:e7:71:b5:eb:45:47:ab:95:d1:
a2:03:7a:93:eb:d2:81:aa:b4:d1:ac:a7:b3:88:78:
d5:02:62:a0:07:c3:19:d4:ed:0e:82:f9:73:a8:b7:
ef:cc:5b:0d:18:77:1b:81:0a:15:42:fb:3b:54:b3:
06:89:83:6b:56:e3:44:58:7d:2c:37:ea:0c:65:8a:
b7:6a:a3:7b:37:48:46:4f:2f:8c:11:51:92:7f:87:
0c:ca:65:38:87:3f:95:8c:d7:a2:2e:04:81:98:ce:
84:6b:d0:d1:b0:74:ff:8b:f8:cd:cd:40:cd:e8:d0:
08:ad:ba:80:b2:05:0e:3d:0c:e9:83:54:f1:88:ef:
5e:ca:94:5f:ea:77:e0:22:7b:16:bc:6f:d9:25:99:
71:dd:50:64:ca:99:a0:5a:df:3b:82:68:d4:fc:e6:
70:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6C:37:3A:94:68:19:97:D3:CA:32:51:FB:3F:EB:D8:3C:BE:63:C0
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/oGw3OpRoGZfTyjJR-z_r2Dy-Y8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.28.0/22
Signature Algorithm: sha256WithRSAEncryption
62:f2:77:22:cf:00:b8:9c:06:7b:ce:94:b3:35:37:65:1b:2b:
7a:51:ac:65:4c:9e:4a:71:7d:e8:34:d4:e3:27:04:86:e7:fb:
32:31:6a:7e:b1:41:10:2b:fc:62:31:5e:62:29:81:a3:15:de:
47:1f:ec:f7:fd:a5:9f:a6:9a:bc:e5:51:d9:90:36:bf:42:ca:
61:72:4f:d0:16:e9:c6:02:db:02:3d:44:56:4b:c7:03:29:af:
fc:f5:97:9f:41:57:a2:1d:c8:23:9d:29:0b:cd:2a:48:91:a1:
89:1f:3f:94:59:7d:e8:c7:00:b0:b7:b1:7b:d6:0b:d9:fe:bb:
99:6e:01:7b:75:a1:81:3a:8c:dd:d3:fb:08:f6:0c:0d:06:06:
68:bf:6d:66:b8:34:78:fe:7c:95:40:d9:69:2f:7e:3a:be:f3:
72:db:c3:78:ea:f7:72:08:2d:9b:c7:90:b4:bd:be:e7:77:4f:
37:f8:41:25:f3:74:f2:a7:6e:a2:3d:8a:47:f8:36:11:64:8d:
f7:6d:a4:56:21:f5:0a:68:ff:79:ee:ae:60:4c:f0:3d:21:54:
9b:ec:47:b7:ee:cb:04:84:f8:1f:ea:2e:e4:74:63:e4:80:cf:
53:20:48:a4:3e:46:df:39:0c:e5:c8:da:aa:f9:60:06:04:97:
63:fa:1b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:50:59 2026 by rpki-client