Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/U58VFH0hC-bAfuIWx5-x-9JpLVI.roa
File: U58VFH0hC-bAfuIWx5-x-9JpLVI.roa (raw, json)
Hash identifier: Tg2jjCtMuE3tvyiCge6PHALgpdcv8xyRfITU6qGoLM4=
Subject key identifier: 53:9F:15:14:7D:21:0B:E6:C0:7E:E2:16:C7:9F:B1:FB:D2:69:2D:52
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019F4B43518BA8A82DD932CDE3A309324FA7
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/U58VFH0hC-bAfuIWx5-x-9JpLVI.roa
Signing time: Fri 10 Jul 2026 09:02:10 +0000
ROA not before: Fri 10 Jul 2026 09:02:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198810
IP address blocks: 83.245.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:43:51:8b:a8:a8:2d:d9:32:cd:e3:a3:09:32:4f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jul 10 09:02:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=539f15147d210be6c07ee216c79fb1fbd2692d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f5:eb:7c:33:cb:8b:e0:2f:9e:74:4b:73:f2:
da:65:2d:ef:ce:d6:b6:6c:8e:c6:50:6b:27:39:0a:
fc:b8:6f:b5:09:85:a0:f6:eb:7f:dc:a0:4c:93:63:
ae:5e:a7:be:cb:85:cc:29:ef:d7:6c:17:b7:53:8a:
8c:4d:a9:4c:d1:b3:50:02:71:8d:1b:dd:94:c4:58:
b8:2d:1f:46:5b:22:86:61:be:cc:e1:05:e4:dc:ac:
79:3a:41:b6:2e:2f:0c:53:3a:ce:a7:5a:3b:6e:cf:
30:2c:41:51:f8:d1:b4:b8:bc:a3:d3:d6:81:e2:6e:
97:5b:4b:04:7b:39:05:3c:49:d9:c1:49:0b:74:a3:
4b:3e:95:d9:8f:b0:be:59:51:6a:5a:02:37:a2:85:
62:18:9c:ab:c2:4a:36:0e:ca:84:c0:2f:d0:57:3d:
34:22:b2:c5:1a:45:90:e2:f9:48:34:e1:d6:01:2b:
3e:2f:9f:04:30:c9:6b:0e:2f:cc:f0:58:31:33:de:
51:30:a2:60:66:7f:ee:d3:83:5f:99:4d:11:af:28:
0b:76:d5:2f:f7:78:b3:1e:52:ed:f8:09:12:e8:17:
f1:9f:6a:b2:c8:88:87:86:e9:dc:c0:fd:3c:95:3b:
f8:ee:61:52:e8:47:6b:8f:87:cc:19:a2:65:0c:31:
da:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9F:15:14:7D:21:0B:E6:C0:7E:E2:16:C7:9F:B1:FB:D2:69:2D:52
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/U58VFH0hC-bAfuIWx5-x-9JpLVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.108.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e6:1f:00:fd:dc:7b:14:84:3b:0e:22:c2:4b:b9:42:a4:2f:
65:bf:e2:70:cb:16:01:71:db:ce:38:e2:d7:af:7d:b9:a1:46:
4e:f0:e8:1a:f5:7b:0c:8d:53:fe:24:61:51:76:40:8c:2d:1c:
a2:27:70:6d:10:e8:3d:ed:c8:7e:53:4a:4f:f3:3e:a3:d8:cc:
9f:76:da:9e:a0:29:97:21:45:a9:85:68:cc:11:32:36:b7:5d:
78:74:4c:1d:ab:e6:7e:86:31:45:a8:b2:9c:dd:f0:99:07:31:
9f:08:3f:91:96:75:dc:19:ce:ee:b9:12:5c:f7:62:9c:9d:98:
ff:c7:40:76:80:95:9c:8a:80:bf:a1:f7:68:e4:c4:19:ae:d0:
55:7d:f6:2e:63:a9:c4:81:f4:f9:7b:c8:44:34:d5:a9:ce:3e:
dc:f4:a4:c1:2b:22:55:3e:a2:dc:6f:8f:dd:eb:1a:cf:98:97:
76:4d:df:88:1a:c1:11:78:21:7d:ec:eb:fb:f9:e4:f0:2a:d5:
33:56:d4:c8:fb:a5:69:26:91:ab:7d:4b:e6:0d:63:db:65:ea:
d6:34:bb:f0:2f:f1:c2:7b:21:a9:49:e9:7f:16:7a:3a:b5:8f:
85:21:94:ea:32:60:49:4d:9a:a6:b3:da:c8:a4:49:97:77:08:
d1:92:5a:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9LQ1GLqKgt2TLN46MJMk+nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0
MDdhODAwHhcNMjYwNzEwMDkwMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzlmMTUxNDdkMjEwYmU2YzA3ZWUyMTZjNzlmYjFmYmQyNjkyZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fXrfDPLi+AvnnRLc/LaZS3vzta2
bI7GUGsnOQr8uG+1CYWg9ut/3KBMk2OuXqe+y4XMKe/XbBe3U4qMTalM0bNQAnGN
G92UxFi4LR9GWyKGYb7M4QXk3Kx5OkG2Li8MUzrOp1o7bs8wLEFR+NG0uLyj09aB
4m6XW0sEezkFPEnZwUkLdKNLPpXZj7C+WVFqWgI3ooViGJyrwko2DsqEwC/QVz00
IrLFGkWQ4vlINOHWASs+L58EMMlrDi/M8FgxM95RMKJgZn/u04NfmU0RrygLdtUv
93izHlLt+AkS6Bfxn2qyyIiHhuncwP08lTv47mFS6Edrj4fMGaJlDDHabwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFOfFRR9IQvmwH7iFsefsfvSaS1SMB8GA1UdIwQY
MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt
NWQ1NjA5ODljZjdiLzEvVTU4VkZIMGhDLWJBZnVJV3g1LXgtOUpwTFZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi
LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU/VsMA0G
CSqGSIb3DQEBCwUAA4IBAQBr5h8A/dx7FIQ7DiLCS7lCpC9lv+JwyxYBcdvOOOLX
r325oUZO8Oga9XsMjVP+JGFRdkCMLRyiJ3BtEOg97ch+U0pP8z6j2MyfdtqeoCmX
IUWphWjMETI2t114dEwdq+Z+hjFFqLKc3fCZBzGfCD+RlnXcGc7uuRJc92KcnZj/
x0B2gJWcioC/ofdo5MQZrtBVffYuY6nEgfT5e8hENNWpzj7c9KTBKyJVPqLcb4/d
6xrPmJd2Td+IGsEReCF97Ov7+eTwKtUzVtTI+6VpJpGrfUvmDWPbZerWNLvwL/HC
eyGpSel/Fno6tY+FIZTqMmBJTZqms9rIpEmXdwjRklps
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:36 2026 by rpki-client