Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/6DH9tZL4XXWuGxGC4t5EPeB9mk0.roa
File: 6DH9tZL4XXWuGxGC4t5EPeB9mk0.roa (raw, json)
Hash identifier: CMwFnB4R9o2qjBXCngIkkD6eII1E4uag46MkA5j1/yc=
Subject key identifier: E8:31:FD:B5:92:F8:5D:75:AE:1B:11:82:E2:DE:44:3D:E0:7D:9A:4D
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019F1D40A8465BCB7EF6E2766D90A90A50E9
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/6DH9tZL4XXWuGxGC4t5EPeB9mk0.roa
Signing time: Wed 01 Jul 2026 10:36:44 +0000
ROA not before: Wed 01 Jul 2026 10:36:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 83.245.2.0/24 maxlen: 24
83.245.15.0/24 maxlen: 24
83.245.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:40:a8:46:5b:cb:7e:f6:e2:76:6d:90:a9:0a:50:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jul 1 10:36:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e831fdb592f85d75ae1b1182e2de443de07d9a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:38:81:41:e4:17:83:2a:ab:6c:1b:25:30:
dc:36:35:b1:b5:c1:f5:3a:d3:79:98:dd:25:3f:9f:
bd:54:5a:e5:08:62:df:f4:93:e3:53:bc:3a:b6:06:
47:b8:c9:9a:ba:1f:6c:13:f7:d3:85:a1:14:4a:44:
27:c9:69:a1:7c:e4:28:61:be:59:71:1c:89:71:bb:
c2:b0:3e:87:3e:68:88:0a:de:7e:4c:27:10:3f:ce:
9f:a2:d6:5a:68:b6:6e:09:aa:b3:e8:37:4b:db:60:
9f:65:59:df:b4:9d:8f:4f:d6:cb:84:f5:cc:0f:a8:
d4:b0:b5:9c:cf:1a:68:ab:01:8f:69:e1:b1:be:63:
b5:83:15:1a:b3:0c:71:69:8c:8d:65:6d:d0:8c:fa:
14:6b:c4:08:68:29:9f:eb:75:c5:9f:05:74:9f:24:
3c:b3:1d:a2:44:8f:09:16:54:ab:72:42:c9:9a:82:
8d:10:34:e4:e2:83:1e:9f:4a:62:b7:1d:ad:34:a6:
fe:5b:7c:9c:f8:98:62:18:4f:ed:75:b2:8b:34:9b:
9b:ce:23:25:c5:90:8f:b7:93:51:9d:15:85:54:c1:
02:1f:aa:7a:17:00:87:93:c1:04:52:61:ca:a2:53:
cb:ee:94:71:8f:8b:22:7e:96:f0:06:40:fb:de:ba:
75:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:31:FD:B5:92:F8:5D:75:AE:1B:11:82:E2:DE:44:3D:E0:7D:9A:4D
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/6DH9tZL4XXWuGxGC4t5EPeB9mk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.2.0/24
83.245.15.0/24
83.245.108.0/24
Signature Algorithm: sha256WithRSAEncryption
08:c9:b8:3d:dc:75:62:5b:4b:6f:f7:30:c5:aa:59:93:04:3c:
eb:0f:8a:60:6d:bf:73:89:3c:e8:35:f9:b5:63:b4:24:87:51:
08:83:19:60:bf:bc:8d:aa:b8:5c:31:11:db:e2:f1:3b:64:86:
ae:42:c2:37:aa:ba:90:f6:2a:b5:7f:ed:de:90:b6:79:2f:12:
df:a1:1a:aa:e4:8b:3e:cc:de:16:39:33:ea:58:9d:df:69:e4:
e9:9c:0a:6d:88:42:f6:63:af:5f:96:f7:98:65:e7:65:be:c8:
6d:55:42:85:9a:66:62:be:9a:f4:b6:53:00:51:b7:5d:ed:15:
3e:ca:b0:64:48:66:03:c0:32:af:79:cb:3f:c4:5f:a1:58:9c:
ca:2f:92:b4:9d:a0:5a:cb:a2:26:6c:28:8b:df:f1:f8:68:dc:
20:2f:dd:4e:2b:dc:48:84:de:6a:20:55:ed:c6:6a:c9:88:8f:
a9:9d:8a:3e:bf:bb:2d:1a:c9:e6:30:a8:20:45:5c:ec:2e:31:
44:29:f6:e1:e5:1f:e2:c3:be:77:11:8c:20:4b:a3:2d:d6:8d:
f6:49:8c:0f:e2:43:7d:25:1e:9a:b7:e6:ef:32:6f:2d:95:e3:
aa:1c:3d:91:28:22:8e:81:7e:5d:b3:cb:d1:16:4a:3e:19:bf:
f2:50:e9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 19:59:24 2026 by rpki-client