Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/pqSd4vt0zs--Ehj8NdGHAuFxFgk.roa
File: pqSd4vt0zs--Ehj8NdGHAuFxFgk.roa (raw, json)
Hash identifier: e6LcUYJZoyuOavOVa3IqGA+Hrxrs49d2+0GIJ3jrY44=
Subject key identifier: A6:A4:9D:E2:FB:74:CE:CF:BE:12:18:FC:35:D1:87:02:E1:71:16:09
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0A5ED4D9AD3685F75D932B6C65BF9F435
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/pqSd4vt0zs--Ehj8NdGHAuFxFgk.roa
Signing time: Tue 15 Sep 2026 16:36:27 +0000
ROA not before: Tue 15 Sep 2026 16:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 83.245.10.0/24 maxlen: 24
83.245.40.0/24 maxlen: 24
83.245.41.0/24 maxlen: 24
83.245.43.0/24 maxlen: 24
83.245.44.0/24 maxlen: 24
83.245.46.0/24 maxlen: 24
83.245.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:ed:4d:9a:d3:68:5f:75:d9:32:b6:c6:5b:f9:f4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 15 16:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6a49de2fb74cecfbe1218fc35d18702e1711609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ca:12:a5:92:83:65:c5:0a:30:e7:50:3a:8d:
bc:3c:15:ae:c5:2a:36:4a:2f:6e:eb:d3:f5:c7:a6:
77:32:57:c1:c7:3b:4a:12:eb:f2:b1:75:d3:6a:4f:
0f:e8:f9:67:11:50:2f:0d:f0:b8:65:27:a5:02:0d:
25:67:05:54:94:fa:df:ea:dd:bd:63:19:2a:f0:b0:
c6:a9:d0:6d:2c:43:3f:6a:de:4a:c7:59:dc:3f:cf:
7e:50:9b:97:be:50:ee:bf:f2:f4:66:5a:89:02:bb:
b8:de:d5:98:6d:26:ea:88:79:d5:aa:96:4d:ed:33:
5a:e7:13:34:2a:ad:09:98:a2:7e:51:a7:86:1a:aa:
bd:7c:ce:e5:a5:32:bf:6f:ac:17:19:73:a4:71:b1:
fc:07:6f:64:09:bf:91:60:bf:03:f8:b0:4e:23:09:
36:16:0e:53:92:3a:a0:1e:15:79:fc:63:eb:c4:36:
a8:af:41:15:f9:6f:02:87:c3:0f:bc:6a:98:26:4c:
eb:b9:bc:0b:02:c3:55:e0:50:7d:65:4a:e0:1e:b6:
de:8a:16:7b:7c:e5:44:83:01:79:a8:17:15:c0:59:
5f:8f:b4:39:0a:4f:87:02:36:82:fe:39:4c:e3:a1:
89:e2:ea:0f:af:73:91:bd:d4:e8:99:43:98:c2:41:
38:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A4:9D:E2:FB:74:CE:CF:BE:12:18:FC:35:D1:87:02:E1:71:16:09
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/pqSd4vt0zs--Ehj8NdGHAuFxFgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.10.0/24
83.245.40.0/23
83.245.43.0-83.245.44.255
83.245.46.0/24
83.245.108.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b5:fc:1e:85:a0:92:52:a5:79:56:1f:15:cd:1d:38:2a:47:
5f:33:2a:75:bb:c0:40:a6:0c:c8:f7:65:1c:65:eb:a5:75:51:
12:29:64:dd:e0:4a:44:4f:44:2a:05:86:9e:8a:2e:40:c6:1a:
98:de:72:cc:d2:15:5d:8f:95:61:96:f8:8e:d6:23:b1:73:b2:
fe:a8:7b:3a:85:de:b5:a3:c2:c0:3c:04:25:c7:bb:d5:f6:d3:
b9:35:06:eb:a4:96:7f:01:bf:e9:65:cd:88:b5:14:38:3a:1c:
cb:41:f0:f1:79:1a:28:3d:7d:7b:70:5a:73:b7:c8:c0:d2:e0:
18:fe:68:9c:b9:9d:c7:d2:54:d8:83:1b:92:02:89:de:e0:b2:
b5:19:79:aa:46:00:e1:b0:af:d7:1b:54:6f:09:9c:f0:a8:6a:
20:5f:09:bf:e9:97:41:ea:34:03:49:b2:12:18:21:a3:10:83:
d0:b5:ca:32:1f:63:d9:76:ed:0c:80:8f:79:91:d6:e9:e1:b2:
b7:d1:58:82:5a:51:86:ea:d4:e0:09:18:5b:9a:23:16:15:af:
ce:30:7a:0b:79:c7:79:cb:45:39:1a:74:67:68:a1:49:5e:6b:
a6:7f:e1:1f:e9:bc:44:0c:3b:d8:69:31:3a:f2:47:71:0e:39:
69:3d:4f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:15:17 2026 by rpki-client