Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/d1GCVm6ZZ8bSynsr_Hquuc9MKtA.roa
File: d1GCVm6ZZ8bSynsr_Hquuc9MKtA.roa (raw, json)
Hash identifier: 5pBqMvsI+5YNVunlLhPdB2LHXy3q+Adh67BBmHJ1HEw=
Subject key identifier: 77:51:82:56:6E:99:67:C6:D2:CA:7B:2B:FC:7A:AE:B9:CF:4C:2A:D0
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A11F59E1010F9246D5D5F4BD4C44540FB2
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/d1GCVm6ZZ8bSynsr_Hquuc9MKtA.roa
Signing time: Fri 09 Oct 2026 06:29:06 +0000
ROA not before: Fri 09 Oct 2026 06:29:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199707
IP address blocks: 83.245.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:59:e1:01:0f:92:46:d5:d5:f4:bd:4c:44:54:0f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Oct 9 06:29:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=775182566e9967c6d2ca7b2bfc7aaeb9cf4c2ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ee:46:ce:5f:2a:84:cc:b2:d1:b9:35:d9:4e:
8c:45:ad:3e:e8:ac:55:96:a1:a5:3e:66:c6:ff:89:
32:e6:cc:96:1c:d7:a9:0d:10:d6:a9:d5:e3:dc:61:
4e:86:18:38:4f:ef:57:ec:6b:3a:71:c7:26:29:67:
f5:fb:10:7b:27:4d:08:50:fe:03:9b:9d:2a:00:f5:
38:28:98:d1:6f:19:f5:7b:e1:14:72:b9:94:ca:ef:
69:b3:44:6b:6b:53:a2:9f:21:05:6e:ad:42:d6:fe:
97:63:3c:0c:6d:2d:b4:c3:e4:84:9d:ca:12:c9:02:
9f:c4:2a:1e:c1:f5:66:b7:54:31:14:2c:d5:f9:cf:
60:b5:07:31:49:61:a0:b9:82:0b:45:f6:3b:3d:89:
e0:46:a8:d9:e4:6b:72:02:81:e8:47:b1:be:11:6a:
86:b3:8f:c2:be:0b:81:58:88:45:13:31:af:ae:e1:
8a:de:07:75:d4:71:c6:b0:7e:42:4b:8d:b3:6b:bd:
28:86:45:d0:9d:01:27:f2:2a:bc:f5:f7:3b:2d:20:
eb:c7:24:5f:71:4a:05:8c:4c:65:6c:17:a6:a3:63:
cf:28:19:2b:0c:62:a7:a6:e0:57:ed:44:6f:09:e2:
24:33:ec:2b:d4:6a:92:a2:d6:3f:39:9d:49:f5:78:
74:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:51:82:56:6E:99:67:C6:D2:CA:7B:2B:FC:7A:AE:B9:CF:4C:2A:D0
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/d1GCVm6ZZ8bSynsr_Hquuc9MKtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.3.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:2e:9b:ab:e4:a5:5a:72:17:68:a4:4f:0b:c2:89:07:88:36:
fa:58:ce:02:68:b6:db:61:7d:a7:7a:43:5b:7f:42:d7:2a:75:
8a:ee:96:03:02:2a:ea:49:ee:9a:b6:d9:f9:33:d7:91:35:12:
83:73:5d:d0:13:b0:98:92:63:fe:09:ad:23:b4:56:63:e2:66:
48:cc:50:42:51:22:bd:f5:b9:92:9d:64:1c:16:7f:b5:18:fc:
8a:5c:f1:b3:d6:d8:da:05:35:9c:9a:2a:45:d2:e4:b8:9d:81:
23:4f:99:a2:1d:a3:e0:81:5c:39:68:97:e3:80:f0:08:a7:a4:
65:35:7f:67:9a:34:a0:20:a8:5e:6a:28:ae:24:cc:05:49:9e:
c6:fa:73:b8:00:35:27:72:f9:b1:88:ab:d1:01:5c:3e:b5:c5:
30:af:64:fb:4d:db:8b:e6:06:e8:c2:2b:6e:d2:01:1d:75:f8:
f3:44:49:65:1c:21:59:57:ab:52:f0:0d:7d:39:66:71:43:04:
ce:eb:4f:d0:ca:59:4b:e0:f8:c2:c9:ac:1f:5c:92:a5:5a:4f:
5e:ac:f8:cc:a8:05:4c:d2:46:45:42:e1:b2:35:9e:34:a6:88:
2e:a9:00:fe:59:f1:0e:fd:2b:94:6e:d2:99:0b:4d:c9:c3:4a:
48:5a:8a:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEfWeEBD5JG1dX0vUxEVA+yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0
MDdhODAwHhcNMjYxMDA5MDYyOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzUxODI1NjZlOTk2N2M2ZDJjYTdiMmJmYzdhYWViOWNmNGMyYWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+5Gzl8qhMyy0bk12U6MRa0+6KxV
lqGlPmbG/4ky5syWHNepDRDWqdXj3GFOhhg4T+9X7Gs6cccmKWf1+xB7J00IUP4D
m50qAPU4KJjRbxn1e+EUcrmUyu9ps0Rra1OinyEFbq1C1v6XYzwMbS20w+SEncoS
yQKfxCoewfVmt1QxFCzV+c9gtQcxSWGguYILRfY7PYngRqjZ5GtyAoHoR7G+EWqG
s4/CvguBWIhFEzGvruGK3gd11HHGsH5CS42za70ohkXQnQEn8iq89fc7LSDrxyRf
cUoFjExlbBemo2PPKBkrDGKnpuBX7URvCeIkM+wr1GqSotY/OZ1J9Xh0ZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHdRglZumWfG0sp7K/x6rrnPTCrQMB8GA1UdIwQY
MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt
NWQ1NjA5ODljZjdiLzEvZDFHQ1ZtNlpaOGJTeW5zcl9IcXV1YzlNS3RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi
LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU/UDMA0G
CSqGSIb3DQEBCwUAA4IBAQBMLpur5KVachdopE8LwokHiDb6WM4CaLbbYX2nekNb
f0LXKnWK7pYDAirqSe6attn5M9eRNRKDc13QE7CYkmP+Ca0jtFZj4mZIzFBCUSK9
9bmSnWQcFn+1GPyKXPGz1tjaBTWcmipF0uS4nYEjT5miHaPggVw5aJfjgPAIp6Rl
NX9nmjSgIKheaiiuJMwFSZ7G+nO4ADUncvmxiKvRAVw+tcUwr2T7TduL5gbowitu
0gEddfjzREllHCFZV6tS8A19OWZxQwTO60/QyllL4PjCyawfXJKlWk9erPjMqAVM
0kZFQuGyNZ40poguqQD+WfEO/SuUbtKZC03Jw0pIWoox
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:51:52 2026 by rpki-client