Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/nIk5A6ErIwKHjIST0TKhFNzSFyo.roa
File: nIk5A6ErIwKHjIST0TKhFNzSFyo.roa (raw, json)
Hash identifier: xNKAVsziKdZ3bHdc3Ep9rpHR5222VpmJVGNLxIONyHU=
Subject key identifier: 9C:89:39:03:A1:2B:23:02:87:8C:84:93:D1:32:A1:14:DC:D2:17:2A
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A09F926911DF096E8EFC49F45D2E895AEA
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/nIk5A6ErIwKHjIST0TKhFNzSFyo.roa
Signing time: Mon 14 Sep 2026 10:59:27 +0000
ROA not before: Mon 14 Sep 2026 10:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 83.245.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:92:69:11:df:09:6e:8e:fc:49:f4:5d:2e:89:5a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 14 10:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c893903a12b2302878c8493d132a114dcd2172a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:61:e7:69:0a:ec:7e:73:7f:b3:3e:2c:eb:
e0:b0:7a:62:83:b3:bb:ba:48:79:44:55:52:91:ae:
39:21:dc:8b:c2:16:e3:42:50:d9:7d:c0:a4:47:8c:
60:e4:81:35:cd:97:02:4a:a6:1f:b1:5d:55:31:40:
ab:84:de:22:3d:e3:62:e3:54:01:2a:16:13:ab:3a:
e9:eb:0c:29:13:63:87:c4:3b:ff:30:fb:f1:da:f8:
01:9c:23:fe:7e:42:c8:fb:89:81:b6:f4:58:53:81:
db:28:73:cc:65:62:f7:7f:76:95:e2:c9:a7:b3:c7:
6d:fc:7d:45:01:8b:99:2b:93:2a:58:2c:55:de:b3:
55:d6:1e:a8:b9:b4:d5:de:a6:5f:56:f3:fc:aa:e3:
80:e0:7b:ce:b8:73:b4:2f:49:df:f2:20:0d:6b:5b:
eb:7d:fc:8e:a4:99:1f:a5:32:97:0e:57:fe:06:9b:
ad:f6:49:20:af:a0:1b:95:16:35:81:a8:5d:af:62:
0b:79:04:6b:0b:c3:fb:df:13:da:24:1f:f5:0d:73:
53:24:fb:f0:c0:53:d1:06:7d:c5:67:95:ee:24:10:
60:83:0a:da:a6:5c:42:75:f5:de:c2:08:14:b6:de:
6a:ae:c4:b0:d3:ae:22:4b:63:72:5a:b6:ff:2d:16:
4b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:89:39:03:A1:2B:23:02:87:8C:84:93:D1:32:A1:14:DC:D2:17:2A
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/nIk5A6ErIwKHjIST0TKhFNzSFyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.78.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ee:2d:b8:37:a3:0b:e2:8b:86:40:ba:bc:2d:1e:fa:34:d9:
27:c2:bd:59:d9:2f:3b:c2:d6:a6:d4:1e:a5:9f:7e:59:11:cf:
bf:08:ae:3a:d5:5d:51:12:82:69:2a:8e:0c:63:27:71:55:8a:
58:cc:54:06:f1:d4:fb:93:ec:ab:7c:94:b7:4c:30:d9:79:55:
f7:6e:d9:12:bb:b0:f1:27:d3:c4:54:59:9e:0b:ff:7d:b8:62:
b7:cb:8a:2f:83:49:d2:0e:6e:9b:3e:b5:20:08:31:2c:97:b1:
ce:d1:0c:9e:eb:7b:8d:3c:a9:8c:df:c8:bf:ea:ee:58:e6:f7:
5c:b6:34:a1:00:a8:d9:7b:24:d5:5d:4d:d6:6d:73:26:81:5f:
e2:a2:5d:18:2f:98:27:83:72:97:e1:fb:0a:57:f4:34:71:13:
0f:fa:16:5e:eb:72:7a:93:3c:d4:2c:31:25:26:50:1d:8b:50:
9c:cd:10:37:1e:83:a3:a1:98:aa:b8:11:8a:e3:b9:bf:4b:31:
d3:9a:94:61:ef:64:1d:9a:24:3d:34:2f:46:a0:63:be:46:8b:
7a:cf:d1:e5:ee:3e:f9:be:c8:23:e3:bc:d3:58:8e:02:bf:ba:
47:b5:69:b4:51:6f:af:de:af:d8:84:c9:02:27:ba:1c:b0:f2:
d2:b2:be:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:05:45 2026 by rpki-client