Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/qPYrpe0IPiXAhiOKpdpuF4wSk8c.roa
File: qPYrpe0IPiXAhiOKpdpuF4wSk8c.roa (raw, json)
Hash identifier: jpQ9TMH9eteme+uYGWid8uy95Mgxasz92VeoiQvGF0E=
Subject key identifier: A8:F6:2B:A5:ED:08:3E:25:C0:86:23:8A:A5:DA:6E:17:8C:12:93:C7
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0B518E711E9945E58BDC2921D38F52BD8
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/qPYrpe0IPiXAhiOKpdpuF4wSk8c.roa
Signing time: Fri 18 Sep 2026 15:18:23 +0000
ROA not before: Fri 18 Sep 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.245.5.0/24 maxlen: 24
83.245.11.0/24 maxlen: 24
83.245.14.0/24 maxlen: 24
83.245.15.0/24 maxlen: 24
83.245.68.0/24 maxlen: 24
83.245.71.0/24 maxlen: 24
89.167.164.0/24 maxlen: 24
89.167.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:18:e7:11:e9:94:5e:58:bd:c2:92:1d:38:f5:2b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 18 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8f62ba5ed083e25c086238aa5da6e178c1293c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:79:f0:88:45:12:3b:7e:40:cb:19:3a:fc:
ba:7e:c5:c0:02:a2:7c:f7:2d:2b:3a:20:d8:c9:38:
cf:4f:a1:15:98:b9:e6:0e:8e:45:e3:f3:e4:d1:9e:
65:c0:fc:21:81:59:92:e8:7a:62:f1:c9:49:90:84:
f7:96:28:92:b1:7f:64:2e:cf:c3:8a:d5:08:dc:bb:
fd:f2:7f:82:e8:47:80:0b:15:48:49:44:60:22:37:
59:a1:b8:18:af:86:c8:63:50:d6:ca:b5:d2:b2:e0:
f7:22:b2:cf:43:1e:5f:16:3f:c8:63:b6:19:8d:be:
ac:5a:5d:23:42:fd:91:9f:77:11:cc:55:a5:69:4c:
56:62:9d:33:52:11:cf:d6:26:e5:d0:6a:e0:63:40:
a5:29:a2:00:bc:62:93:43:55:85:ca:d7:b8:54:26:
78:8e:0c:76:33:bd:3b:38:c8:81:d5:29:b4:65:d9:
ee:d1:0f:1a:6b:d3:71:b8:54:e6:03:3c:86:9d:c2:
91:c2:1f:75:35:cb:af:ac:56:87:51:b1:fc:19:54:
46:fc:eb:c9:a8:76:10:7c:bb:98:20:7d:cf:a6:f3:
eb:cf:7e:87:ec:a2:28:db:fc:0f:dd:fb:e7:91:5d:
05:13:4a:14:e2:a2:bd:ea:d9:6a:3d:4a:ac:b9:20:
fe:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F6:2B:A5:ED:08:3E:25:C0:86:23:8A:A5:DA:6E:17:8C:12:93:C7
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/qPYrpe0IPiXAhiOKpdpuF4wSk8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.5.0/24
83.245.11.0/24
83.245.14.0/23
83.245.68.0/24
83.245.71.0/24
89.167.164.0/23
Signature Algorithm: sha256WithRSAEncryption
86:e7:c1:09:02:00:f0:09:5f:ab:cb:d4:5b:25:58:5b:48:3a:
43:c2:07:7f:1c:ab:5c:d3:8c:0f:21:99:cc:4c:93:4f:fa:df:
f3:3f:d3:d5:67:0c:57:d3:f5:cc:2e:1f:71:f4:b2:f1:1f:67:
b1:68:8f:9a:69:d1:ff:ea:08:2c:49:18:0e:7f:29:cd:96:63:
06:c6:65:9d:77:74:b9:80:d5:59:91:a0:0a:95:22:de:1f:a7:
54:c1:90:0f:d9:fe:98:b7:7a:52:3c:b4:d8:f0:04:40:31:1b:
e5:ea:cd:1c:9b:14:3c:b2:61:35:72:3c:71:3e:8f:c7:0f:5b:
51:9c:ed:aa:9f:d9:c6:e9:a3:44:b0:87:17:6e:ad:ee:3b:ec:
50:1f:3e:82:39:2c:04:0a:f8:ab:16:ff:2a:aa:b1:53:aa:24:
b8:f0:1c:2e:9e:29:cf:be:15:85:ba:86:90:6a:ae:c9:72:7c:
aa:31:ac:bb:fa:dd:04:33:36:81:82:fc:85:16:9c:17:68:38:
c5:90:5b:75:37:b8:bb:34:ae:f6:67:e8:79:24:50:9e:06:d7:
00:96:08:fd:2e:2d:14:29:cd:15:99:9c:9f:f4:98:4e:14:13:
45:f0:67:50:63:64:e3:54:d9:68:fd:4f:73:c7:db:60:d0:29:
86:72:65:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:20:43 2026 by rpki-client