Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/5MhKkkw8Qijd_355CWuE5w3kdNc.roa
File: 5MhKkkw8Qijd_355CWuE5w3kdNc.roa (raw, json)
Hash identifier: DXDSU8SEgCHnvy2y11y8ZxqKtbTq0+BFYZq55TmuO6k=
Subject key identifier: E4:C8:4A:92:4C:3C:42:28:DD:FF:7E:79:09:6B:84:E7:0D:E4:74:D7
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019FA52553CE0B708FF526E7FDE64060F12C
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/5MhKkkw8Qijd_355CWuE5w3kdNc.roa
Signing time: Mon 27 Jul 2026 19:55:14 +0000
ROA not before: Mon 27 Jul 2026 19:55:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24947
IP address blocks: 83.245.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a5:25:53:ce:0b:70:8f:f5:26:e7:fd:e6:40:60:f1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jul 27 19:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4c84a924c3c4228ddff7e79096b84e70de474d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:92:56:eb:b1:77:be:64:00:71:f7:21:20:
78:f5:96:94:9e:1d:07:fa:1b:74:5d:73:d1:9e:63:
a5:01:45:d5:58:f2:27:d5:58:b5:3d:8d:e8:e2:ce:
8b:78:54:18:bd:86:cb:0e:2d:d1:cf:be:10:c1:fd:
77:3a:6f:37:c5:09:9b:66:9a:33:87:75:f0:50:81:
36:52:bd:3d:2f:f3:bf:2c:87:9a:d6:b3:7d:7e:10:
73:72:c3:ac:c4:19:9f:d2:08:70:83:fe:5d:9a:4b:
64:88:0d:d2:d7:3f:94:f6:97:cf:74:7b:73:a8:e8:
40:cf:99:8b:b7:27:99:07:2b:c6:56:f4:e3:87:a9:
da:24:69:e4:f7:f4:c9:e1:0a:4b:8a:6d:cd:94:bc:
ba:87:51:d0:0a:29:06:5e:94:19:af:5c:88:a1:fd:
c4:0d:0e:46:41:0c:0a:27:ec:7d:ca:f0:05:27:48:
c2:87:68:c8:e7:f0:d3:59:84:96:26:13:a1:ce:c1:
74:db:16:c0:8d:17:c5:ef:b2:b2:2a:a3:db:64:21:
dc:67:4b:82:f2:7e:e3:77:ca:52:74:65:ee:4f:94:
c0:4b:02:7b:2b:84:a6:21:15:28:a4:63:27:d4:24:
11:06:ab:83:8f:08:13:c9:39:63:54:8f:62:23:aa:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C8:4A:92:4C:3C:42:28:DD:FF:7E:79:09:6B:84:E7:0D:E4:74:D7
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/5MhKkkw8Qijd_355CWuE5w3kdNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.45.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e0:07:4f:e1:0b:2c:b8:22:f9:f6:ff:ad:e4:a1:5e:56:51:
dd:2b:69:44:75:2e:e8:05:c2:ad:e1:f6:99:bd:0e:fd:d6:54:
05:a3:06:69:d7:ce:f1:db:0f:fd:1a:e8:28:f1:a3:c5:fc:50:
d4:85:95:a9:3c:c7:ad:c0:f2:e3:51:bb:c8:a1:fa:fc:16:49:
bc:74:fa:39:47:2e:8d:45:b3:2b:18:aa:03:ee:1e:9d:5b:c2:
db:a4:f4:bd:15:09:83:47:d1:95:82:3a:58:1a:07:c7:3d:c8:
cb:8e:06:df:52:5e:6b:95:c5:bd:ae:64:62:7d:8d:bd:31:e8:
f9:ba:f4:9d:36:b4:ea:67:6b:05:16:be:97:db:d8:85:c7:eb:
45:8f:cf:eb:1c:ae:58:e1:1e:3e:03:6f:20:c3:3d:c3:35:10:
d6:9f:ea:69:be:eb:ad:4a:eb:01:2b:52:a7:92:16:2e:d9:00:
e2:f8:38:9d:d1:47:58:87:da:0f:f3:c1:18:8a:cc:a2:74:9a:
e3:15:c0:65:59:8a:7e:5f:7b:a5:8e:ac:74:ac:d3:22:c1:c6:
86:48:e4:a9:62:f8:a9:ac:9c:67:b9:7c:ab:61:23:3f:bd:d3:
a4:91:cd:5f:4f:dd:31:df:ba:46:5c:c4:0a:ac:2f:02:d7:7b:
2f:6b:c2:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+lJVPOC3CP9Sbn/eZAYPEsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0
MDdhODAwHhcNMjYwNzI3MTk1NTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGM4NGE5MjRjM2M0MjI4ZGRmZjdlNzkwOTZiODRlNzBkZTQ3NGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArymSVuuxd75kAHH3ISB49ZaUnh0H
+ht0XXPRnmOlAUXVWPIn1Vi1PY3o4s6LeFQYvYbLDi3Rz74Qwf13Om83xQmbZpoz
h3XwUIE2Ur09L/O/LIea1rN9fhBzcsOsxBmf0ghwg/5dmktkiA3S1z+U9pfPdHtz
qOhAz5mLtyeZByvGVvTjh6naJGnk9/TJ4QpLim3NlLy6h1HQCikGXpQZr1yIof3E
DQ5GQQwKJ+x9yvAFJ0jCh2jI5/DTWYSWJhOhzsF02xbAjRfF77KyKqPbZCHcZ0uC
8n7jd8pSdGXuT5TASwJ7K4SmIRUopGMn1CQRBquDjwgTyTljVI9iI6ryqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOTISpJMPEIo3f9+eQlrhOcN5HTXMB8GA1UdIwQY
MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt
NWQ1NjA5ODljZjdiLzEvNU1oS2trdzhRaWpkXzM1NUNXdUU1dzNrZE5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi
LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU/UtMA0G
CSqGSIb3DQEBCwUAA4IBAQBW4AdP4QssuCL59v+t5KFeVlHdK2lEdS7oBcKt4faZ
vQ791lQFowZp187x2w/9Gugo8aPF/FDUhZWpPMetwPLjUbvIofr8Fkm8dPo5Ry6N
RbMrGKoD7h6dW8LbpPS9FQmDR9GVgjpYGgfHPcjLjgbfUl5rlcW9rmRifY29Mej5
uvSdNrTqZ2sFFr6X29iFx+tFj8/rHK5Y4R4+A28gwz3DNRDWn+ppvuutSusBK1Kn
khYu2QDi+Did0UdYh9oP88EYisyidJrjFcBlWYp+X3uljqx0rNMiwcaGSOSpYvip
rJxnuXyrYSM/vdOkkc1fT90x37pGXMQKrC8C13sva8Io
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:25:11 2026 by rpki-client