Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/wfFnps6y7Cx1IJ7srFZcBtiVI7U.roa
File: wfFnps6y7Cx1IJ7srFZcBtiVI7U.roa (raw, json)
Hash identifier: 8qWHpTIXAN+RHXRjlUBOoa2U19sKf49THpdACyzapSI=
Subject key identifier: C1:F1:67:A6:CE:B2:EC:2C:75:20:9E:EC:AC:56:5C:06:D8:95:23:B5
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0B443573AD2240BEEB33076B8480CF518
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/wfFnps6y7Cx1IJ7srFZcBtiVI7U.roa
Signing time: Fri 18 Sep 2026 11:25:07 +0000
ROA not before: Fri 18 Sep 2026 11:25:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17404
IP address blocks: 83.245.66.0/24 maxlen: 24
83.245.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:43:57:3a:d2:24:0b:ee:b3:30:76:b8:48:0c:f5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 18 11:25:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1f167a6ceb2ec2c75209eecac565c06d89523b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:08:f6:29:7c:3d:7b:fd:a4:b5:0a:23:53:65:
fc:e6:17:32:4d:0d:47:81:68:27:3e:7b:b2:79:d3:
e2:d6:3f:58:b5:c1:54:45:10:74:b8:3e:57:92:77:
12:2d:f4:c7:97:a1:1a:f2:fb:2f:70:7c:6c:45:d1:
9e:07:d5:86:71:ae:62:70:c5:48:21:de:03:71:54:
00:a9:0f:ec:3b:3e:72:c4:99:af:7e:59:38:3b:c8:
1d:5d:41:bd:c4:57:69:b6:0c:8e:3d:03:82:78:43:
ec:0d:9a:6f:ad:57:23:75:59:9b:87:32:df:98:e4:
c0:46:93:cb:9a:80:3d:07:1f:9d:a7:f9:ab:d8:b0:
02:f2:32:a3:94:90:55:0e:7e:e8:83:00:bd:80:b1:
81:57:88:da:ae:9f:28:2b:39:0f:d9:b0:2d:a5:6a:
72:6c:d5:70:38:92:a8:a6:46:7c:c4:ad:68:fa:d1:
57:a8:d4:8e:f5:58:79:6b:e0:36:7d:ef:7c:72:fa:
89:88:1b:76:a1:19:44:b6:27:e5:61:f8:f7:c3:00:
63:5a:71:d2:1c:5a:9d:a8:9e:48:b1:7f:33:fb:42:
c0:2c:ec:a4:fc:6f:e2:2c:68:34:44:2c:75:2f:e4:
09:48:38:d1:5c:f4:8b:6d:df:68:bb:eb:67:12:39:
2b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F1:67:A6:CE:B2:EC:2C:75:20:9E:EC:AC:56:5C:06:D8:95:23:B5
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/wfFnps6y7Cx1IJ7srFZcBtiVI7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.66.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:0d:78:ec:b9:5c:32:13:ab:a2:ee:f2:7e:04:ca:b7:ef:d7:
1b:1e:2b:28:22:8f:f5:95:2f:99:9a:d0:c7:42:a6:a5:6f:13:
5e:a7:b5:cc:3c:98:d3:47:f6:f6:13:99:a0:48:49:3e:dc:be:
87:e0:c9:bb:1a:cd:bb:d7:bf:4e:67:48:33:9e:5d:a6:b0:44:
e4:ce:15:1a:ac:86:9b:14:a2:dd:9f:af:95:23:6f:b7:fd:16:
61:50:ac:d9:f5:62:31:cf:e5:4e:0f:80:3f:d6:52:15:2d:8b:
8a:ce:d0:3d:c5:10:73:9a:5f:a9:9e:78:dc:83:36:27:9e:df:
67:85:40:a6:3f:8e:dd:5a:2c:c4:e8:2b:76:e7:07:f7:57:79:
69:d5:ed:7c:a7:48:d0:d0:29:e8:b2:56:a3:48:c2:9e:0a:7b:
08:8d:ba:22:3c:61:d7:b9:23:a0:a1:00:d9:e1:aa:c4:5c:c5:
b5:43:52:56:75:d5:54:27:cb:62:4d:56:c3:91:10:49:e2:43:
bc:c4:82:65:73:60:17:e7:1d:af:27:bd:f6:d9:91:c6:62:1a:
c9:e9:9d:ec:28:c3:eb:f0:f3:bf:6b:5a:96:1c:3b:4b:dd:5e:
5c:5c:90:dc:5a:49:c0:14:f3:70:5d:ea:12:3d:31:0a:e4:c0:
3a:25:64:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:00:00 2026 by rpki-client