Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/1-Xo9FBNnt6IQf3DHY6l6FVVs9Io.roa
File: 1-Xo9FBNnt6IQf3DHY6l6FVVs9Io.roa (raw, json)
Hash identifier: 1M61p2hW3Z5J+kUgHhY13ljWHOQiC4BFBkjaF/siz74=
Subject key identifier: F9:7A:3D:14:13:67:B7:A2:10:7F:70:C7:63:A9:7A:15:55:6C:F4:8A
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019EF8C624C18837C7C4463EDF069ABA7EDC
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/1-Xo9FBNnt6IQf3DHY6l6FVVs9Io.roa
Signing time: Wed 24 Jun 2026 08:36:35 +0000
ROA not before: Wed 24 Jun 2026 08:36:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60602
IP address blocks: 83.245.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:12:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:c6:24:c1:88:37:c7:c4:46:3e:df:06:9a:ba:7e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jun 24 08:36:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f97a3d141367b7a2107f70c763a97a15556cf48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:27:83:35:83:58:0d:6b:2b:9e:5d:19:ca:90:
7f:78:2f:12:d6:b2:17:c4:5c:09:0b:c1:a4:09:36:
7d:a8:83:41:3e:be:9e:58:60:b2:73:12:89:83:e4:
2b:a7:22:59:fa:15:e4:3e:33:d2:99:af:3f:39:b7:
72:27:d5:e5:ca:24:0c:88:6f:3b:76:d3:ae:76:f3:
1d:c0:c5:89:07:2f:fe:0b:85:79:c1:54:94:2d:cc:
0c:bb:b9:5f:b6:1b:8b:69:96:24:1f:c2:98:d8:ea:
37:b5:a1:a7:e9:5b:6b:9c:64:d8:04:19:a7:0d:27:
10:4b:55:03:69:5b:c1:1c:24:8c:c6:ca:dd:27:29:
f4:1b:4e:c5:b0:3b:e7:18:58:6a:e0:91:a3:3e:5c:
48:2e:a6:b4:db:70:6f:85:ee:62:85:81:5e:f7:d6:
49:27:0d:58:a7:26:b1:db:c9:a1:29:08:a9:8f:3c:
c5:f7:53:9b:e2:de:37:99:f7:18:66:41:b8:4e:96:
e8:6c:ec:73:ff:53:a7:c6:ac:75:d1:93:b1:d0:8b:
54:8b:fd:46:f5:ac:ec:70:f3:27:ab:23:21:e6:f8:
4e:7d:29:8e:04:16:1d:be:e3:92:20:4e:02:fa:6d:
80:75:28:24:a7:79:43:05:92:c8:74:74:00:10:62:
ed:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7A:3D:14:13:67:B7:A2:10:7F:70:C7:63:A9:7A:15:55:6C:F4:8A
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/1-Xo9FBNnt6IQf3DHY6l6FVVs9Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.12.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:d1:f7:2f:61:38:2f:9f:e4:f0:7c:ee:7d:37:7b:c9:93:53:
fc:1b:06:7f:d5:df:8e:cb:da:27:ab:4a:52:e1:fe:cf:0a:b0:
05:8b:30:c7:b7:85:47:db:1f:0d:bb:44:f0:be:73:eb:08:42:
54:d7:f8:01:4e:d5:e3:5e:8a:79:51:76:97:e8:7d:82:5e:bc:
73:7b:10:e6:4e:bd:57:7e:eb:1d:fd:b8:c6:a4:ee:95:4a:35:
b9:6e:69:9a:1d:e1:69:f7:9a:fe:ba:85:ba:9c:7d:1d:ad:dd:
4d:65:1a:32:92:3c:02:4d:fe:b3:b0:e2:b2:8c:4d:a0:35:de:
fa:b9:61:cc:5d:fb:ec:0f:db:0e:80:66:10:8a:b8:e1:6c:10:
d8:e6:63:3d:3c:31:25:12:eb:70:d7:29:ab:3a:bf:64:e9:35:
81:ea:f2:4c:e5:b6:29:8b:fb:6f:46:b3:15:df:1a:78:b9:0b:
56:25:d1:ba:e5:19:25:45:46:5a:5b:15:02:32:32:3f:70:8b:
25:3e:9a:06:96:14:3c:ed:b8:58:a8:a3:84:46:48:18:00:8d:
fd:91:82:5a:c1:42:5a:97:e2:ef:a0:5d:cd:e6:ed:2a:17:4f:
01:d5:be:06:37:5f:c1:f7:23:89:65:83:42:6c:5b:f9:b2:94:
98:12:8b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:32:54 2026 by rpki-client