Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/7Q9aOj4dJZDCtHG-ucEqD0OKurM.roa
File: 7Q9aOj4dJZDCtHG-ucEqD0OKurM.roa (raw, json)
Hash identifier: IL+kXmp0UwYnR2cxw/GSSBz5WKg1GnweNmkA7ywbZxs=
Subject key identifier: ED:0F:5A:3A:3E:1D:25:90:C2:B4:71:BE:B9:C1:2A:0F:43:8A:BA:B3
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0FB47C4A48F825D846761269B93C9EA0C
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/7Q9aOj4dJZDCtHG-ucEqD0OKurM.roa
Signing time: Fri 02 Oct 2026 06:22:59 +0000
ROA not before: Fri 02 Oct 2026 06:22:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.245.5.0/24 maxlen: 24
83.245.9.0/24 maxlen: 24
83.245.11.0/24 maxlen: 24
83.245.14.0/24 maxlen: 24
83.245.15.0/24 maxlen: 24
83.245.68.0/24 maxlen: 24
83.245.71.0/24 maxlen: 24
83.245.78.0/24 maxlen: 24
89.167.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 07:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:47:c4:a4:8f:82:5d:84:67:61:26:9b:93:c9:ea:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Oct 2 06:22:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed0f5a3a3e1d2590c2b471beb9c12a0f438abab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:42:7c:06:39:71:59:df:db:a9:b8:42:d3:
bb:2b:e8:6d:e8:9a:68:58:85:c5:52:d8:e7:11:b7:
06:ff:83:81:b7:1f:cc:d2:ae:f8:84:70:99:69:98:
aa:7a:7d:e9:d7:8a:16:54:f5:f4:c1:2d:6d:df:92:
26:4b:9c:51:af:d9:5f:06:fb:72:c7:59:c9:58:41:
d6:b6:2f:11:a7:19:6b:ec:66:66:0e:87:f5:68:3a:
f3:1c:46:e4:e5:9b:0a:bd:05:7a:29:b1:ae:6f:58:
74:61:1c:83:97:97:46:bc:84:14:29:2d:a1:3b:30:
3f:c3:ec:69:16:ee:48:dc:1b:0b:a3:b7:79:2b:7b:
65:b3:65:cc:74:c8:d3:14:93:37:05:b9:0e:73:6f:
7e:7d:c5:be:fe:c4:e5:9a:09:e1:90:5e:f0:a3:1a:
39:67:da:3a:b4:c4:5f:a9:8c:fe:b6:fc:f2:50:18:
38:1c:ef:71:7b:d5:02:cd:31:d2:b4:46:75:f6:34:
b7:ac:52:03:9c:13:d2:97:df:c5:f4:13:03:be:53:
78:ed:0c:bd:35:84:55:76:79:e3:04:ce:16:e7:b5:
ac:c4:1f:22:40:74:47:13:e3:3c:41:9e:d1:15:49:
a5:d7:e0:8f:26:5b:6e:25:19:4f:c0:64:20:f7:d9:
65:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0F:5A:3A:3E:1D:25:90:C2:B4:71:BE:B9:C1:2A:0F:43:8A:BA:B3
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/7Q9aOj4dJZDCtHG-ucEqD0OKurM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.5.0/24
83.245.9.0/24
83.245.11.0/24
83.245.14.0/23
83.245.68.0/24
83.245.71.0/24
83.245.78.0/24
89.167.165.0/24
Signature Algorithm: sha256WithRSAEncryption
37:2e:ae:a3:1b:dd:59:82:db:af:02:cc:a9:fa:30:11:9e:c8:
f3:01:ba:1a:ff:06:8d:98:76:53:7b:a5:2f:50:2e:e6:c3:45:
84:3c:30:86:9c:d5:7e:6c:2c:06:a2:05:c1:d4:76:e3:c0:15:
28:17:4b:93:ed:9e:eb:93:bb:75:c6:f8:56:cc:f5:f9:3d:84:
0f:10:2f:49:18:ed:15:94:50:ad:89:f1:1c:99:b6:f2:97:7c:
a4:be:f8:99:79:14:00:6a:db:a2:f8:b7:28:e4:77:38:fb:1c:
70:98:5c:58:c0:29:0e:77:05:8b:35:f0:a4:25:ea:c5:68:d4:
f5:f4:b5:e4:86:63:41:6a:c2:ae:80:74:e7:8a:fc:d6:f8:96:
48:0a:11:10:ac:f0:38:e6:16:c1:2f:cb:eb:6c:94:01:1a:22:
fc:46:68:cf:39:78:e4:f9:eb:8c:ed:c3:fb:dc:8c:bb:89:90:
e7:a1:52:a5:2e:a7:0a:5a:6f:f3:84:7e:c3:e5:1b:cd:13:2d:
25:26:5a:37:a0:05:af:c6:24:91:1d:ea:01:6d:33:03:ba:88:
7f:27:93:26:d2:14:a3:96:f3:bc:22:ae:45:aa:5f:7d:f7:ba:
e4:b4:4a:0c:b0:66:d3:24:c1:a5:dc:26:25:16:c4:7c:78:25:
f5:23:87:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:59:13 2026 by rpki-client