Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/vqM1TGLYbSuutfsH5sUFzk_Op_Y.roa
File: vqM1TGLYbSuutfsH5sUFzk_Op_Y.roa (raw, json)
Hash identifier: JH4Y1aePxRVSkXzwEy2asQC4OWTRrATFM4PfgjHMeRk=
Subject key identifier: BE:A3:35:4C:62:D8:6D:2B:AE:B5:FB:07:E6:C5:05:CE:4F:CE:A7:F6
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019EB659B11E493DD9BB985150E697585FAE
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/vqM1TGLYbSuutfsH5sUFzk_Op_Y.roa
Signing time: Thu 11 Jun 2026 11:03:11 +0000
ROA not before: Thu 11 Jun 2026 11:03:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198810
IP address blocks: 83.245.5.0/24 maxlen: 24
83.245.68.0/24 maxlen: 24
83.245.71.0/24 maxlen: 24
83.245.78.0/24 maxlen: 24
83.245.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:59:b1:1e:49:3d:d9:bb:98:51:50:e6:97:58:5f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jun 11 11:03:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bea3354c62d86d2baeb5fb07e6c505ce4fcea7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c9:e2:cd:e8:e8:03:92:92:21:8a:bf:a5:0f:
0a:b7:79:f2:ad:e8:30:f5:82:88:18:d6:39:12:c8:
e7:f6:67:c3:5f:26:49:2f:76:c8:87:25:8d:bd:77:
ef:ac:df:c2:3f:14:f3:1b:1e:5b:20:4b:c5:9b:32:
10:76:f3:ac:5d:f6:a3:54:e4:05:d2:0b:05:16:b8:
2b:20:59:c4:52:d8:3d:84:57:08:4c:81:ff:04:c4:
b4:22:e0:1d:a1:f1:78:a0:f7:d2:64:ec:19:b0:43:
1b:53:e3:10:77:a5:0d:e7:4a:5a:0a:78:1b:f4:7b:
0d:69:3a:17:63:bb:4d:c5:e6:46:f0:b9:87:a9:7a:
ec:a6:8c:2b:c3:69:90:5f:34:01:95:4c:30:cb:72:
78:d8:e0:03:bb:76:3e:54:ba:9f:ec:8f:22:2b:54:
bc:5f:f0:f0:98:88:4e:1c:aa:9b:b2:b5:4f:43:92:
ab:27:e0:fc:d0:f0:5a:0f:aa:28:41:37:c0:73:34:
44:66:19:df:91:52:c8:b6:d8:3c:88:90:7a:1c:52:
6b:45:82:d0:23:9c:e4:a5:79:4d:5d:68:cf:8d:a0:
36:d8:27:08:d0:f3:76:85:7f:ec:2c:af:b2:e1:cb:
aa:80:e9:e1:d6:d7:8a:6f:1f:f5:01:3d:ad:2b:80:
82:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A3:35:4C:62:D8:6D:2B:AE:B5:FB:07:E6:C5:05:CE:4F:CE:A7:F6
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/vqM1TGLYbSuutfsH5sUFzk_Op_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.5.0/24
83.245.68.0/24
83.245.71.0/24
83.245.78.0/24
83.245.108.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:4c:9f:fb:e4:76:00:4a:46:20:e1:3e:e6:48:cd:8d:8c:19:
e7:22:cd:e5:e8:37:30:83:95:85:08:56:85:9a:b0:7b:d4:91:
b2:cf:ab:5e:5d:1d:43:fe:a8:5b:52:83:f0:65:15:c5:e9:74:
38:d4:80:75:3d:90:a7:86:e6:12:33:df:22:ab:be:79:b3:0d:
bd:21:04:3e:c6:42:81:74:85:af:fa:0a:5b:4c:99:d4:ce:72:
0e:9f:87:c8:16:dd:8b:9b:7f:d0:c2:41:ff:6d:ac:58:9a:69:
56:10:8e:71:01:af:d7:4d:f3:5d:a3:37:93:3d:83:6b:0a:0d:
10:b2:a9:eb:dc:dc:73:10:76:b6:2e:c0:42:78:7b:97:43:cd:
a6:7b:f6:ef:7d:8d:4d:d1:ff:58:93:02:61:ca:dc:1c:b4:72:
70:dc:ba:c7:dc:3e:f0:65:f6:d3:c4:ac:9b:9a:bf:40:c5:76:
4a:a7:df:48:e9:8a:6c:55:44:fd:ff:a0:5c:57:ce:c4:ac:38:
b0:f5:db:18:69:ff:ee:c9:ff:8d:15:b5:95:18:13:43:11:6f:
5b:05:82:b0:f4:26:f6:73:a8:f1:64:36:2e:89:29:a4:32:bd:
2a:dc:75:bb:db:c6:9a:be:29:9c:84:bc:47:f5:b6:13:cf:94:
ae:39:bd:bc
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ62WbEeST3Zu5hRUOaXWF+uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0
MDdhODAwHhcNMjYwNjExMTEwMzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWEzMzU0YzYyZDg2ZDJiYWViNWZiMDdlNmM1MDVjZTRmY2VhN2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48nizejoA5KSIYq/pQ8Kt3nyregw
9YKIGNY5Esjn9mfDXyZJL3bIhyWNvXfvrN/CPxTzGx5bIEvFmzIQdvOsXfajVOQF
0gsFFrgrIFnEUtg9hFcITIH/BMS0IuAdofF4oPfSZOwZsEMbU+MQd6UN50paCngb
9HsNaToXY7tNxeZG8LmHqXrspowrw2mQXzQBlUwwy3J42OADu3Y+VLqf7I8iK1S8
X/DwmIhOHKqbsrVPQ5KrJ+D80PBaD6ooQTfAczREZhnfkVLIttg8iJB6HFJrRYLQ
I5zkpXlNXWjPjaA22CcI0PN2hX/sLK+y4cuqgOnh1teKbx/1AT2tK4CClQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFL6jNUxi2G0rrrX7B+bFBc5Pzqf2MB8GA1UdIwQY
MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt
NWQ1NjA5ODljZjdiLzEvdnFNMVRHTFliU3V1dGZzSDVzVUZ6a19PcF9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi
LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAU/UFAwQA
U/VEAwQAU/VHAwQAU/VOAwQAU/VsMA0GCSqGSIb3DQEBCwUAA4IBAQA6TJ/75HYA
SkYg4T7mSM2NjBnnIs3l6Dcwg5WFCFaFmrB71JGyz6teXR1D/qhbUoPwZRXF6XQ4
1IB1PZCnhuYSM98iq755sw29IQQ+xkKBdIWv+gpbTJnUznIOn4fIFt2Lm3/QwkH/
baxYmmlWEI5xAa/XTfNdozeTPYNrCg0Qsqnr3NxzEHa2LsBCeHuXQ82me/bvfY1N
0f9YkwJhytwctHJw3LrH3D7wZfbTxKybmr9AxXZKp99I6YpsVUT9/6BcV87ErDiw
9dsYaf/uyf+NFbWVGBNDEW9bBYKw9Cb2c6jxZDYuiSmkMr0q3HW728aavimchLxH
9bYTz5SuOb28
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:09:29 2026 by rpki-client