Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/HrQc8uWC2KjOE2XaDTLfgLp4hHw.roa
File: HrQc8uWC2KjOE2XaDTLfgLp4hHw.roa (raw, json)
Hash identifier: Z3bR3MHa6YEInjH7SS+w/PsIQlfDMidb6HbEEPYrrQg=
Subject key identifier: 1E:B4:1C:F2:E5:82:D8:A8:CE:13:65:DA:0D:32:DF:80:BA:78:84:7C
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0B446FDEF4A4EDBAF920D763549F0F3D0
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/HrQc8uWC2KjOE2XaDTLfgLp4hHw.roa
Signing time: Fri 18 Sep 2026 11:29:06 +0000
ROA not before: Fri 18 Sep 2026 11:29:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 83.245.13.0/24 maxlen: 24
83.245.68.0/24 maxlen: 24
89.167.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:46:fd:ef:4a:4e:db:af:92:0d:76:35:49:f0:f3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 18 11:29:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1eb41cf2e582d8a8ce1365da0d32df80ba78847c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:a2:24:36:eb:42:7d:c3:24:f7:8a:d3:f0:
b7:0d:58:50:f6:7e:d7:23:53:8c:cc:1f:dd:f9:ab:
e3:44:87:7b:7c:00:f3:4d:be:a7:a8:57:8d:d4:7d:
76:af:b4:72:d2:1d:e9:dd:58:59:f1:9b:a3:27:9c:
d4:97:d0:be:73:72:5f:b2:68:91:8e:97:a9:8e:bc:
45:e0:d2:9a:b3:6a:db:0c:09:4e:f0:c7:bd:31:ca:
05:8c:5f:73:f0:bd:43:05:33:a4:3b:98:4c:7b:1f:
2f:ac:e6:8f:55:da:ab:e5:91:cb:1b:2c:f3:ab:5f:
73:3a:c6:9c:76:c1:ae:7c:82:b0:37:d3:3b:e8:df:
25:60:67:a7:23:11:68:08:7e:ac:c8:4c:dc:76:85:
d2:b3:bb:1a:fe:76:dd:fd:49:ce:66:9a:c2:fb:a7:
1d:d3:2f:f2:46:27:d3:6b:3f:62:ed:3a:08:de:3a:
98:5b:1d:81:e3:19:ad:c7:f8:c8:6a:64:0c:31:2f:
02:43:3e:2f:d1:14:a2:ff:0a:3a:65:3f:a7:59:0b:
47:33:2c:46:95:40:3b:38:55:9f:00:84:2c:b8:ce:
40:62:e2:d6:7b:b1:96:60:78:0c:04:64:b0:7d:f3:
2d:ab:7d:f8:72:84:11:d2:62:ef:d8:f9:ef:d3:60:
d9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B4:1C:F2:E5:82:D8:A8:CE:13:65:DA:0D:32:DF:80:BA:78:84:7C
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/HrQc8uWC2KjOE2XaDTLfgLp4hHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.13.0/24
83.245.68.0/24
89.167.133.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:73:cb:b9:7d:86:f3:d7:8d:62:78:26:a2:72:14:36:0d:a2:
27:e4:a3:f3:89:2b:5a:a0:40:2b:6f:dc:5e:fc:a9:35:9b:02:
c9:0b:db:0b:85:af:db:45:a0:b9:40:5b:c9:d6:20:01:43:95:
7b:2d:aa:f2:b3:22:cf:d1:7c:0d:ed:ce:9c:e9:4f:3d:9c:f6:
9a:c9:a7:d5:25:5a:b5:de:23:94:d3:84:65:ff:15:29:0f:f7:
cb:3e:02:12:16:4e:ea:bb:27:55:af:62:39:7a:ae:2d:79:67:
ca:c0:d1:3d:01:e7:0d:df:72:23:57:d6:0b:c8:d7:e5:e0:5d:
13:46:43:c7:0b:cc:0b:98:6c:89:ce:2d:03:ea:db:66:ae:0d:
89:97:b3:a7:0c:62:e3:fd:31:b8:93:1e:88:b6:d2:8c:f3:73:
d2:7e:1d:38:f2:70:60:77:0c:b5:99:51:e9:25:60:2a:55:46:
5c:66:6a:ca:22:8f:e8:03:92:b8:0c:5f:ff:06:5e:18:df:b2:
e5:d8:59:49:dd:71:a7:f5:1d:d0:79:e7:c8:79:d8:0a:58:a6:
e1:84:d8:86:72:38:8e:cd:9d:00:06:ea:59:f1:ad:8a:59:f0:
82:d2:aa:99:a8:70:bf:ca:19:4b:94:29:e6:b8:de:55:ef:16:
ab:18:09:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:10:53 2026 by rpki-client