Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/htnHuYEBV2cW71pkM1NKFin1a5s.roa
File: htnHuYEBV2cW71pkM1NKFin1a5s.roa (raw, json)
Hash identifier: P4d0ho3JlvW2P0vDWLTu75LeEZuLHKNjYQ/yf6cI7Y0=
Subject key identifier: 86:D9:C7:B9:81:01:57:67:16:EF:5A:64:33:53:4A:16:29:F5:6B:9B
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019FA52555B11F845B542CC9BBBAE2E26E92
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/htnHuYEBV2cW71pkM1NKFin1a5s.roa
Signing time: Mon 27 Jul 2026 19:55:15 +0000
ROA not before: Mon 27 Jul 2026 19:55:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 83.245.14.0/24 maxlen: 24
83.245.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a5:25:55:b1:1f:84:5b:54:2c:c9:bb:ba:e2:e2:6e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jul 27 19:55:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86d9c7b98101576716ef5a6433534a1629f56b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e3:8c:c9:ee:b7:7a:e0:33:4e:2e:15:75:82:
40:fa:8e:63:ce:dc:0e:36:7a:05:01:82:87:51:18:
d6:c6:d4:0d:af:36:cb:48:93:11:3b:62:f8:1a:29:
0d:e3:8b:31:fa:2f:19:84:76:a7:0f:50:2b:cf:c8:
46:59:ef:44:e0:bd:74:8d:af:e4:4d:98:65:cd:2c:
70:32:6e:ff:2a:84:84:23:9b:43:ac:c7:41:f7:88:
d9:b2:48:5d:83:67:fb:a6:40:b9:43:8e:cf:d8:37:
e6:fe:1b:60:92:0d:43:64:89:f1:67:2b:7b:62:ea:
05:e9:e5:c1:71:27:bb:2a:cb:aa:8d:8d:ce:68:05:
8a:25:3a:44:b1:a2:d5:9b:e5:66:41:e0:8f:af:b8:
23:fb:8a:ed:f8:1b:fb:7b:e2:c3:e9:b5:07:8b:06:
b2:46:ed:73:ea:00:fd:71:b5:e9:e3:2b:bb:7d:03:
89:bc:03:fc:a7:f9:87:bf:20:f9:d9:42:70:d1:c3:
88:f6:5a:f8:c9:df:9d:42:29:03:04:ca:c2:87:5e:
8e:a1:32:81:0b:56:c3:34:06:34:ac:19:fa:62:65:
ab:3e:29:9a:81:fe:bc:df:96:19:ff:83:c1:29:af:
f8:1b:26:1d:65:b2:85:56:2f:d8:c7:d7:b5:17:ef:
3c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D9:C7:B9:81:01:57:67:16:EF:5A:64:33:53:4A:16:29:F5:6B:9B
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/htnHuYEBV2cW71pkM1NKFin1a5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.14.0/24
83.245.108.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:50:b6:38:65:d6:7c:c0:a2:cc:e4:75:82:3d:e2:86:e6:c9:
03:64:9e:91:f8:40:95:84:81:95:19:e4:39:d8:ed:c1:6d:df:
bb:ab:1a:3c:85:68:be:bc:a9:a6:4e:b3:04:e6:5c:51:4c:ec:
c5:a4:e4:00:52:2a:50:c2:f9:0a:71:65:fb:15:e5:eb:b5:c1:
b5:99:82:21:fc:b3:8c:0f:1a:1b:01:13:02:ae:e7:67:59:d8:
7d:21:e0:37:60:44:55:26:b5:90:a2:0e:3c:32:32:7d:68:c3:
8a:90:57:c4:83:61:35:f0:ac:94:34:da:3d:a3:bd:2f:4c:7b:
e9:ef:04:ef:84:e6:68:c7:ed:70:a3:c5:9f:78:ef:0d:0e:e8:
ee:78:ca:d8:31:94:6a:84:2a:00:2c:47:81:d9:db:22:b9:0b:
ac:1c:b2:56:da:c6:df:8e:26:1b:88:e2:dd:87:8d:9b:b0:46:
4f:f6:47:1b:6a:c2:c9:2d:ce:0d:b3:2d:1e:89:e5:0f:59:7e:
d9:23:81:34:9d:a5:9b:8b:62:96:3d:dd:b2:88:be:7f:65:ea:
25:d4:38:e8:3f:79:87:6e:85:e7:97:82:4b:39:54:32:c0:e9:
7f:00:8f:fa:3a:a6:45:63:bc:a0:9b:a3:c8:74:50:bb:7a:0c:
61:80:01:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:42:32 2026 by rpki-client