Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/55IL_FMEYxN2_mPAwnBVd0YsSsk.roa
File: 55IL_FMEYxN2_mPAwnBVd0YsSsk.roa (raw, json)
Hash identifier: 9BZLnY9FLmA7kfoZD8m1OasbRrEJ84cgrmKwWq2O/zo=
Subject key identifier: E7:92:0B:FC:53:04:63:13:76:FE:63:C0:C2:70:55:77:46:2C:4A:C9
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019F1D40A71FC8A08A694590B472B32CF600
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/55IL_FMEYxN2_mPAwnBVd0YsSsk.roa
Signing time: Wed 01 Jul 2026 10:36:44 +0000
ROA not before: Wed 01 Jul 2026 10:36:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 83.245.64.0/24 maxlen: 24
83.245.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 12:53:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:40:a7:1f:c8:a0:8a:69:45:90:b4:72:b3:2c:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jul 1 10:36:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7920bfc5304631376fe63c0c2705577462c4ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:e8:f6:bc:c7:27:7c:a4:37:86:50:fe:96:
04:9d:a4:3f:f5:53:bd:d3:46:20:2f:ce:5e:27:b6:
54:06:05:09:2f:9e:57:c4:cf:74:f9:73:72:af:e2:
2f:08:57:c0:90:1f:3d:11:ce:e7:93:24:b4:34:89:
59:0e:7e:62:8a:ea:69:45:d9:7d:cb:e8:d9:18:10:
ac:83:57:a0:9f:80:c0:89:d7:e7:3c:5f:12:0f:1c:
fb:1c:b9:77:53:6e:a0:6d:66:ea:94:c9:28:9d:0a:
45:66:be:08:b9:d7:cc:7a:ba:77:16:46:9f:aa:e1:
a7:3c:37:fd:ed:96:41:2b:07:04:b1:f3:85:69:1c:
6e:b8:70:e0:6c:81:9f:26:e8:a4:c5:1b:0a:86:8e:
cf:0b:f1:84:73:ad:8f:cc:46:17:11:4e:60:92:da:
bc:f7:0a:29:0e:84:2b:4d:3b:15:f1:71:6a:92:52:
1d:f3:3d:56:dd:f6:d5:3a:e9:b0:b8:26:8a:69:6a:
20:f2:bb:d0:4a:c9:44:6f:18:9c:8b:1d:99:76:52:
67:53:a4:91:51:d7:5b:74:4b:1d:2d:15:93:a4:c5:
24:0a:65:ce:8e:25:dc:cc:68:1f:1d:1e:6b:44:1f:
dc:70:e5:a0:9c:ff:25:de:ac:ed:c0:25:89:b5:36:
2a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:92:0B:FC:53:04:63:13:76:FE:63:C0:C2:70:55:77:46:2C:4A:C9
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/55IL_FMEYxN2_mPAwnBVd0YsSsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.64.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:40:97:74:ec:e6:0a:23:45:17:5b:fe:a6:9a:6b:36:f3:1f:
64:e3:90:b4:3b:42:b4:d6:46:5e:bb:ca:f9:a4:7f:60:29:6a:
1e:e1:1e:a8:84:7d:fa:95:8b:98:4f:be:20:c2:40:e9:cd:09:
de:5f:4d:a7:ed:a0:cf:54:d6:52:61:da:36:f2:ef:0d:b1:c9:
ba:7b:9f:7b:96:50:c9:80:3c:44:ae:52:fc:04:b7:73:11:55:
7a:24:08:e9:d5:20:bf:3a:29:df:ae:89:69:fd:ad:91:15:ae:
e8:ba:a9:9c:cc:a2:6a:94:55:9a:97:52:70:58:0f:72:ce:66:
bb:ae:89:f5:8b:18:f7:c4:92:af:7a:6f:fa:fd:96:ed:1f:ff:
d9:d0:48:9d:64:47:5c:ca:a9:5c:5d:09:3a:50:a5:6e:a2:89:
3f:45:30:f6:8e:b5:79:52:c0:62:b6:ce:69:17:9f:8d:a3:06:
c9:0f:e5:6f:9b:4e:e2:42:8d:a0:73:1b:40:91:ea:22:12:40:
13:e2:44:1b:a2:b4:cb:c8:73:fb:05:2a:31:10:64:b5:55:6c:
5c:e7:fd:26:4e:37:fc:b4:15:6d:4f:c4:2b:d0:d4:c7:e4:8a:
bd:e9:3e:2f:d6:51:22:8d:7a:db:ea:23:98:b9:05:75:6c:56:
9d:80:99:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:01:53 2026 by rpki-client