Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/1qTeFFDnwzOP4q5In34k3pMq72A.roa
File: 1qTeFFDnwzOP4q5In34k3pMq72A.roa (raw, json)
Hash identifier: p26U7tW0kqH3pUQQavxcsj3met7vL7YCOjNmeoEtPow=
Subject key identifier: D6:A4:DE:14:50:E7:C3:33:8F:E2:AE:48:9F:7E:24:DE:93:2A:EF:60
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019FA5255453884BE652FF19F0A7AE338094
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/1qTeFFDnwzOP4q5In34k3pMq72A.roa
Signing time: Mon 27 Jul 2026 19:55:14 +0000
ROA not before: Mon 27 Jul 2026 19:55:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136725
IP address blocks: 83.245.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a5:25:54:53:88:4b:e6:52:ff:19:f0:a7:ae:33:80:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jul 27 19:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6a4de1450e7c3338fe2ae489f7e24de932aef60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4c:41:85:2a:32:5c:33:6a:cf:28:ea:39:85:
77:34:92:41:62:c6:82:a5:6c:a6:76:66:89:d6:b4:
56:17:2b:78:86:e5:d5:1c:51:fc:e7:27:08:0c:36:
0c:12:43:21:cd:a0:26:71:43:47:31:a7:28:d6:d0:
51:23:37:13:68:1b:07:2a:e9:4b:f5:e9:84:5f:fb:
75:c7:19:80:2c:fa:82:cf:1e:49:ad:60:0f:b1:14:
8b:87:b0:59:3f:21:09:04:d8:ea:9a:37:69:f6:38:
09:db:ed:50:72:e6:2d:d6:80:66:94:fb:38:01:33:
13:50:ad:90:e7:8b:be:67:1a:65:05:19:56:c7:8e:
5a:33:c6:fa:32:34:5f:70:4c:65:0d:e5:54:1f:b2:
cd:ed:a4:ba:15:6c:5d:24:7e:83:3c:f9:41:68:93:
e2:63:4a:5b:c7:e0:7b:d1:35:14:3b:a5:a8:a8:6a:
01:d7:30:28:98:b8:bb:19:32:fa:ae:18:ff:46:e4:
31:42:fa:5a:34:45:d3:d0:39:15:2a:45:fa:d1:7c:
dc:d0:0a:7d:3d:cb:0e:98:c5:28:6a:b6:37:ac:80:
0a:be:cb:77:e6:94:09:88:01:0c:63:c1:7f:ee:45:
d1:ee:7b:6d:f4:9c:7e:87:b4:aa:4d:af:13:3e:9b:
82:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A4:DE:14:50:E7:C3:33:8F:E2:AE:48:9F:7E:24:DE:93:2A:EF:60
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/1qTeFFDnwzOP4q5In34k3pMq72A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.71.0/24
Signature Algorithm: sha256WithRSAEncryption
09:2b:08:d0:fa:15:a6:43:50:ea:41:76:c8:b4:99:7d:da:41:
93:8e:11:dd:1a:6a:b1:c8:41:20:92:e3:1a:88:35:8f:aa:31:
dc:95:1d:a0:8f:1f:72:d0:9e:9d:7b:ad:d2:f5:81:15:c3:30:
4e:39:35:1a:39:0f:8c:63:53:62:a1:77:a3:d9:bc:fe:bf:2f:
e1:9d:f5:c8:8f:d7:25:b4:1d:42:e2:92:9e:7f:c3:f8:cb:ec:
0c:e4:c9:df:5b:e3:15:80:fc:3a:59:f7:c8:f4:e6:29:6d:49:
67:12:5c:84:1b:c3:bb:6e:39:c7:28:1a:57:d4:a1:02:b1:4d:
a4:21:12:22:1c:44:26:9e:91:61:a1:e1:42:7e:c0:cf:9e:45:
cb:cb:4e:79:e4:39:72:47:df:a3:a1:7d:73:51:18:79:c6:69:
6c:76:4b:75:a9:32:87:fd:d6:97:eb:5e:01:23:df:b6:52:11:
44:5d:41:d5:38:06:3a:1d:64:a4:b1:75:f5:43:f7:af:b9:38:
59:b5:69:93:38:1f:92:46:1e:05:24:01:ce:b7:a3:43:69:59:
6f:d8:e2:03:39:af:59:bd:9b:34:fd:1f:83:e5:94:52:32:ff:
4a:77:54:07:45:3f:3e:bb:7f:28:72:5e:46:a4:d9:51:8b:cc:
b4:8b:ba:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:05:26 2026 by rpki-client