Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/g7SIiu4TiCd-XToeT11GwJkS0-A.roa
File: g7SIiu4TiCd-XToeT11GwJkS0-A.roa (raw, json)
Hash identifier: gzgjf81edaIx4093055I05dZBSHnqZxhdsR9U9/P3iE=
Subject key identifier: 83:B4:88:8A:EE:13:88:27:7E:5D:3A:1E:4F:5D:46:C0:99:12:D3:E0
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0A5ED4E30BC0940F136511CFA03E606F4
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/g7SIiu4TiCd-XToeT11GwJkS0-A.roa
Signing time: Tue 15 Sep 2026 16:36:27 +0000
ROA not before: Tue 15 Sep 2026 16:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 83.245.40.0/24 maxlen: 24
83.245.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:ed:4e:30:bc:09:40:f1:36:51:1c:fa:03:e6:06:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 15 16:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83b4888aee1388277e5d3a1e4f5d46c09912d3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fe:2e:ba:9a:7d:e4:68:23:7c:f6:29:20:fd:
61:d1:2f:e1:df:49:f5:a9:4c:00:42:9a:b7:d3:a1:
9f:c0:38:78:f0:c2:e7:f9:37:bc:5c:16:34:64:71:
ea:b0:02:a0:98:07:df:1e:1c:40:eb:10:69:12:7a:
5e:a5:b5:25:34:47:c6:4e:c4:4f:ea:db:aa:b3:13:
ce:60:c8:41:1f:0a:60:56:d3:83:01:d3:04:c8:37:
1c:3c:e6:98:ec:b8:f4:10:d2:94:1e:92:e1:fa:5e:
7f:e7:be:bf:4f:b0:8b:c3:00:66:83:dc:5c:ab:95:
4a:10:05:3c:95:32:a1:9a:91:97:fb:ec:1e:c7:fb:
4a:4b:60:66:fd:0f:1a:50:f7:74:c3:ad:c9:de:5e:
71:88:48:4f:aa:d6:63:9f:a2:a2:c6:36:3a:92:63:
10:28:34:a5:e0:e2:62:a4:ad:ae:e1:cd:11:f1:e2:
04:84:14:83:bb:40:34:0c:4d:f3:67:b8:8f:a7:da:
ec:af:ad:0e:e7:70:00:28:5e:51:7f:ef:c7:f5:7d:
3c:56:72:90:42:03:68:3f:7b:e9:d5:35:95:3b:bc:
5c:dd:6f:3a:a7:a1:a1:f6:8c:2e:31:cc:ea:61:64:
f7:db:a6:3a:e0:37:d7:10:a9:c1:2d:2b:74:cf:81:
14:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B4:88:8A:EE:13:88:27:7E:5D:3A:1E:4F:5D:46:C0:99:12:D3:E0
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/g7SIiu4TiCd-XToeT11GwJkS0-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.40.0/24
83.245.108.0/24
Signature Algorithm: sha256WithRSAEncryption
57:cb:37:8b:a4:7e:e5:bf:ed:76:0e:94:1a:a6:2f:d1:d5:15:
1c:2d:dd:17:b3:6c:a6:23:11:21:46:54:c8:71:3d:25:16:c3:
42:d7:2b:74:ea:21:c1:de:62:0e:3e:23:c2:45:db:2e:f9:71:
c0:81:1a:21:cf:8d:43:d5:bf:78:2e:8d:28:a0:cf:fd:c9:7b:
52:e3:78:2d:5b:53:f4:d7:ee:4d:5c:9d:ae:31:77:a7:29:38:
c4:6b:4a:db:72:cb:f9:4e:84:67:dc:32:e8:f2:63:dc:6c:4d:
77:c7:8d:19:6e:13:8f:50:bd:9c:de:0c:ff:68:7e:a4:f3:84:
57:39:d2:83:08:5d:87:c0:70:46:4e:71:ee:14:be:a0:fb:12:
4c:10:8e:d2:0d:40:00:a4:ed:01:2b:75:c1:8f:72:fb:2d:45:
8f:4e:c8:a3:50:69:f5:94:3f:c1:2f:78:c7:9a:3a:e8:55:c4:
ad:c6:0b:61:77:d9:c0:bd:b8:f5:26:e9:59:b3:7b:8f:69:46:
e6:cb:fe:a9:db:25:10:2b:f2:29:07:20:57:9f:3f:56:e9:fc:
e9:73:f0:ab:27:fa:9a:66:4c:ea:e9:69:db:46:d2:38:36:d0:
97:e8:2c:98:57:4f:bb:d4:b4:46:66:6e:8a:83:03:f3:09:49:
5b:ba:28:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:01:49 2026 by rpki-client