Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/D71o-jCvB_NKiAzZ6Jv4CVT--MI.roa
File: D71o-jCvB_NKiAzZ6Jv4CVT--MI.roa (raw, json)
Hash identifier: m0XsKk0XGqpm16GVGQoepmbQBC8s6bQGdfOWZSfsdEc=
Subject key identifier: 0F:BD:68:FA:30:AF:07:F3:4A:88:0C:D9:E8:9B:F8:09:54:FE:F8:C2
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0B4A54E127DBDE378F19A50CABCECAF1F
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/D71o-jCvB_NKiAzZ6Jv4CVT--MI.roa
Signing time: Fri 18 Sep 2026 13:12:07 +0000
ROA not before: Fri 18 Sep 2026 13:12:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 83.245.13.0/24 maxlen: 24
89.167.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:a5:4e:12:7d:bd:e3:78:f1:9a:50:ca:bc:ec:af:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 18 13:12:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fbd68fa30af07f34a880cd9e89bf80954fef8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4c:25:dc:7d:4b:a7:51:2f:48:d1:cc:2e:c3:
e2:80:0a:f9:8f:8e:d2:ab:a4:c2:0e:33:e8:1b:f5:
15:f9:5f:74:a7:29:23:9d:da:f7:ba:21:3a:89:d7:
60:1f:3e:cb:fd:f3:bc:5c:59:5a:10:fa:c8:0d:11:
54:29:9e:06:a2:a0:1f:d8:bb:e8:04:a0:9e:8a:36:
01:9e:81:65:9d:9c:1a:9f:6b:30:11:98:01:8e:48:
df:74:86:13:99:13:a6:f1:ea:be:ae:6f:a8:c0:e3:
1b:7f:a9:fd:a8:2a:ad:6c:52:7f:d4:a7:31:61:23:
24:1d:53:13:3b:b0:73:d8:9d:c0:ac:6a:9b:f4:a5:
b3:37:7d:5a:d3:fc:ea:e6:79:3b:3f:14:a6:e5:d4:
df:44:49:b1:25:e6:54:ff:ea:78:5c:2b:00:5d:a5:
9b:b6:77:79:a1:7b:b3:2f:00:f7:af:63:ff:77:c7:
bd:49:a8:85:9d:95:2b:97:0d:b0:bf:1e:09:ec:b4:
95:f8:95:5c:df:51:80:df:7e:46:8e:84:ff:7b:55:
32:d7:9a:d5:18:2f:89:bc:1a:d4:cf:cc:ec:e3:c5:
57:bd:67:5f:39:4d:99:c2:29:ab:90:9e:8a:ea:ea:
b0:df:1f:84:ab:4f:ec:17:2c:e5:e0:b0:2c:f9:46:
1d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BD:68:FA:30:AF:07:F3:4A:88:0C:D9:E8:9B:F8:09:54:FE:F8:C2
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/D71o-jCvB_NKiAzZ6Jv4CVT--MI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.13.0/24
89.167.240.0/21
Signature Algorithm: sha256WithRSAEncryption
31:b6:a3:cf:00:8c:09:da:ce:5a:92:5a:84:ab:82:75:32:87:
52:3b:2f:26:90:0b:6c:49:bf:17:1a:1d:19:21:6f:3f:d6:40:
d3:e0:68:b9:dd:03:a9:2e:87:86:b9:69:a1:71:ce:0f:4e:e2:
34:e4:48:80:09:4b:88:a2:c7:2c:10:e9:fe:b4:02:f6:e9:70:
4b:c6:3b:3e:02:a5:06:81:73:9f:84:98:e9:e6:68:d1:af:cc:
5a:5b:65:82:01:2b:fa:23:6f:bb:d6:73:bf:07:30:ad:c3:29:
2e:56:f4:79:24:4a:7a:37:c1:a0:d5:ba:05:3e:1d:dc:41:58:
8c:36:25:64:d1:fb:af:4a:05:f6:f0:f7:18:f8:b8:ac:9a:6a:
f6:9d:64:e2:a0:37:43:9b:ae:a2:0b:53:6a:72:96:38:b2:9c:
27:8b:9f:0b:81:c3:46:83:e1:fa:58:16:68:a1:81:fc:8f:17:
86:a1:15:5b:36:d7:76:af:ee:02:f5:cb:4e:f7:e5:2a:9c:2a:
7d:16:72:b7:0c:06:53:26:cb:70:0e:09:87:61:d5:b2:de:3b:
a8:67:85:68:2f:bc:8e:07:42:21:46:aa:72:47:fd:b7:92:a7:
9c:64:e0:e1:a8:f5:2c:61:8f:a5:3e:35:bf:e0:e0:d5:44:d4:
a7:b3:35:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:06:52 2026 by rpki-client