Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/ywdB0EXOIH8dTf4pebYAPe9o-ug.roa
File: ywdB0EXOIH8dTf4pebYAPe9o-ug.roa (raw, json)
Hash identifier: K9k9XT6wttB9hDlyoRtQ3UfVyFDqPJWVjoonjIi01wg=
Subject key identifier: CB:07:41:D0:45:CE:20:7F:1D:4D:FE:29:79:B6:00:3D:EF:68:FA:E8
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0D287E77E702FD3C2626BA38FF64FF06D
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/ywdB0EXOIH8dTf4pebYAPe9o-ug.roa
Signing time: Thu 24 Sep 2026 08:28:36 +0000
ROA not before: Thu 24 Sep 2026 08:28:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 83.245.13.0/24 maxlen: 24
83.245.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:87:e7:7e:70:2f:d3:c2:62:6b:a3:8f:f6:4f:f0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 24 08:28:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb0741d045ce207f1d4dfe2979b6003def68fae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:36:69:64:35:af:6f:aa:71:b7:04:66:21:80:
2a:33:80:30:6c:10:56:fb:ad:7d:f8:fe:4d:cb:21:
1a:5c:44:64:f2:83:13:9c:32:be:90:19:ed:cb:76:
d6:66:ca:1e:3f:e3:01:22:12:f0:c8:2b:1a:e9:10:
98:4e:c0:d1:b4:d6:85:89:f6:21:06:4f:3d:04:92:
67:94:67:dd:37:51:24:01:29:26:60:8a:14:e1:73:
6a:db:3b:25:12:15:2e:67:06:da:73:a0:eb:63:96:
7a:78:dc:91:e6:48:cf:f5:9d:c2:9a:87:fd:f5:ad:
1e:c4:da:d9:0e:ec:b1:83:c4:aa:a4:3e:dc:fd:40:
56:67:a8:de:80:86:75:e1:c9:dd:5b:49:cf:73:ee:
d5:d5:c5:60:2f:0a:ee:a5:b3:8d:d2:f6:44:33:d1:
e6:0a:fa:e2:4c:f2:60:02:b9:aa:66:ec:c7:78:2c:
a7:91:ef:9e:40:f9:6f:e1:40:9b:7a:2c:3d:76:4d:
ff:11:1a:d5:1f:c5:ea:ca:8a:d6:7a:2d:5e:85:6e:
78:c8:04:72:48:3c:e8:4e:4f:3f:2e:94:f3:a0:21:
5e:29:8f:4f:a3:20:80:31:21:ee:ed:32:5f:76:08:
f8:f1:78:dc:cb:b4:77:92:e9:19:cf:a5:c4:45:ff:
5c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:07:41:D0:45:CE:20:7F:1D:4D:FE:29:79:B6:00:3D:EF:68:FA:E8
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/ywdB0EXOIH8dTf4pebYAPe9o-ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.13.0/24
83.245.68.0/24
Signature Algorithm: sha256WithRSAEncryption
71:4e:a5:f6:91:a2:66:ed:71:42:91:76:cd:1b:2b:59:85:68:
58:de:1f:d4:99:8d:83:05:b4:ba:ce:a5:3f:f0:c6:63:87:36:
5a:5b:e1:13:04:b1:0b:1c:8d:cb:f4:d9:f5:b5:ce:19:fc:6a:
1c:e5:04:f8:42:3b:f7:0b:66:c9:a6:55:d3:0a:92:e5:42:6b:
76:b3:a6:38:d0:8e:94:66:77:cc:7e:61:25:b1:60:e7:b3:17:
74:62:73:60:5b:ea:8c:1f:0c:a2:1d:52:e3:36:d0:fd:ff:a7:
f0:08:32:f3:11:02:fd:84:b4:0d:db:40:50:de:db:87:66:99:
ca:28:83:50:31:af:c3:2a:37:c8:28:ac:2b:08:29:bd:4f:81:
82:9e:4e:f0:86:f1:22:fe:00:9d:18:d9:da:59:8f:0d:00:4c:
f3:7e:5a:59:3e:56:6d:4a:8b:94:fc:22:ec:91:3f:bf:3a:7e:
b2:f8:bd:b7:7b:6c:62:64:a6:00:43:5c:b5:65:15:e0:5d:d5:
c8:9a:1c:d5:c3:f8:e8:41:81:91:cb:38:3f:8b:37:8c:17:02:
fa:72:ff:c3:27:3f:fb:f7:ff:b6:ed:6d:0e:c1:aa:70:ac:40:
6e:21:30:83:ca:b6:19:34:38:ff:a0:03:2a:62:9e:b6:84:53:
97:02:de:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:49:08 2026 by rpki-client