Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/ah4cl5b64IDr0d3l6EkqHe6qixE.roa
File: ah4cl5b64IDr0d3l6EkqHe6qixE.roa (raw, json)
Hash identifier: GLNlKsXnrGd0zyK4lwDMIU8azKwauRUpGTm3yZbrg1g=
Subject key identifier: 6A:1E:1C:97:96:FA:E0:80:EB:D1:DD:E5:E8:49:2A:1D:EE:AA:8B:11
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0B4A80F405D0FC254F22BD94D2ADD6341
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/ah4cl5b64IDr0d3l6EkqHe6qixE.roa
Signing time: Fri 18 Sep 2026 13:15:07 +0000
ROA not before: Fri 18 Sep 2026 13:15:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63352
IP address blocks: 83.245.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:a8:0f:40:5d:0f:c2:54:f2:2b:d9:4d:2a:dd:63:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 18 13:15:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a1e1c9796fae080ebd1dde5e8492a1deeaa8b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:da:d7:65:98:1e:b0:a0:24:03:c1:e5:76:51:
9e:1c:6f:96:b7:9c:8f:f4:35:db:9e:c9:db:e0:70:
96:03:0a:ae:7d:a3:ea:0e:06:2b:15:a1:6c:48:04:
1f:9b:22:43:83:94:b8:ae:26:aa:a3:9d:4b:d8:54:
46:88:d8:8f:f3:38:0d:e3:41:6d:e1:d5:92:75:f0:
45:04:ef:b4:18:d9:1d:a9:9c:33:ac:8c:e3:54:a6:
e1:e5:37:de:f7:41:bf:0c:97:76:5f:9f:9d:f7:49:
d2:72:a9:d1:61:cd:39:bc:c9:0c:dc:0c:3c:c0:e7:
d9:39:54:b9:3a:87:da:00:b5:74:0d:ce:6e:4a:5d:
aa:95:d4:f0:93:83:9d:b7:f8:97:e0:b0:ac:01:70:
7c:27:9d:5d:70:5a:3e:37:69:8d:af:33:0b:f6:88:
a2:5b:64:ca:09:0d:12:18:67:57:70:6b:73:3a:e9:
7e:42:18:d8:0b:67:20:1f:9b:b5:8a:31:b9:91:0a:
03:89:0d:0d:d1:33:7c:4a:ae:70:90:b8:8a:42:85:
e1:35:b1:3e:bf:2d:b9:30:49:5e:9d:d7:13:08:b0:
3e:17:2a:d3:26:e0:4f:18:6a:62:28:c7:e2:c0:42:
80:a3:f7:11:e5:7b:b9:80:7f:85:8d:3d:e0:d5:9e:
d0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1E:1C:97:96:FA:E0:80:EB:D1:DD:E5:E8:49:2A:1D:EE:AA:8B:11
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/ah4cl5b64IDr0d3l6EkqHe6qixE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.72.0/22
Signature Algorithm: sha256WithRSAEncryption
63:b4:1d:9c:78:69:83:11:c7:a3:af:03:df:f8:9e:54:dc:b8:
a8:70:b8:54:62:a1:92:36:06:e1:fd:f5:8e:63:8b:61:a8:8c:
1f:01:17:63:fb:15:c6:ff:a5:31:76:f6:9d:52:5f:c2:a8:16:
a9:af:f4:d4:63:ee:21:98:41:1e:af:51:a0:73:03:92:31:8d:
b8:5e:68:33:ba:bd:6d:95:54:fb:b1:19:91:6b:69:d3:79:4e:
aa:87:b0:14:ef:c4:20:e6:f3:67:fc:81:af:56:51:cc:00:83:
79:f5:59:dc:66:89:db:86:ab:d9:80:62:24:8f:f3:69:47:77:
95:b7:30:1b:df:ef:00:2a:c4:5e:25:d5:ee:05:58:68:a5:ab:
46:85:dc:61:73:8f:aa:14:69:d5:fa:8d:bc:ff:9b:cf:91:05:
d2:f6:03:91:d5:c9:26:d7:3f:f7:04:ac:d6:31:bd:3a:aa:91:
95:6e:fa:11:49:c3:d7:f6:21:7f:d1:03:80:ab:fc:e2:37:2d:
c5:7f:7f:a2:de:fa:cf:2c:65:1c:f3:ef:17:60:25:6c:9b:70:
08:88:30:b5:41:b8:03:d9:17:15:81:ee:6e:28:cf:4a:b7:19:
2f:8d:cc:05:c6:d8:cb:ed:52:4c:9e:16:cc:b6:ea:f7:97:9f:
65:c2:6a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:49:34 2026 by rpki-client