Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/Ah5FDNR1KAU8tBZp0ehaaMl4ISw.roa
File: Ah5FDNR1KAU8tBZp0ehaaMl4ISw.roa (raw, json)
Hash identifier: SA8yyQizIhWIxZvHuE+k7Unjkf8GgkqGQT4YRsl/esQ=
Subject key identifier: 02:1E:45:0C:D4:75:28:05:3C:B4:16:69:D1:E8:5A:68:C9:78:21:2C
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019FEB868E84031005EFDFDCAF6E7D50A1B5
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/Ah5FDNR1KAU8tBZp0ehaaMl4ISw.roa
Signing time: Mon 10 Aug 2026 11:54:51 +0000
ROA not before: Mon 10 Aug 2026 11:54:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 83.245.8.0/24 maxlen: 24
89.167.192.0/20 maxlen: 24
89.167.208.0/22 maxlen: 24
89.167.216.0/22 maxlen: 24
89.167.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:86:8e:84:03:10:05:ef:df:dc:af:6e:7d:50:a1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Aug 10 11:54:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=021e450cd47528053cb41669d1e85a68c978212c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:18:89:fa:33:5c:a4:03:90:0f:42:82:10:
03:58:c2:07:88:67:c7:36:6a:f0:0e:fe:3f:d7:1a:
20:1d:d3:6f:73:69:dd:78:47:a4:10:1c:e9:6e:cf:
88:2c:5e:a6:11:b6:8a:69:ef:5c:dc:12:96:35:b2:
58:0d:be:37:a8:43:19:3d:12:0d:c9:55:e3:0e:c0:
c2:11:d8:2c:f1:45:08:ed:40:b0:59:43:5a:9c:28:
e0:42:3f:09:43:e6:c1:64:f7:83:54:92:83:15:c7:
d2:a2:1a:0d:85:19:f8:24:dd:a0:3a:d3:be:80:9b:
55:35:5c:0c:c9:ec:5f:2f:0b:06:eb:c1:b9:07:30:
0f:e1:37:bc:fa:d5:6a:5a:a3:5b:87:7d:d5:e0:25:
99:55:ef:2c:30:f1:bf:36:f1:73:7e:d4:70:f0:8a:
3a:65:fd:45:3f:bd:cd:e2:7d:97:28:ff:4d:99:a6:
9c:48:b5:38:cc:3a:1b:23:5e:e8:1c:b3:dc:8c:3a:
07:b4:01:de:4b:80:81:c5:86:ba:9e:42:5e:c3:ba:
3a:43:ca:cd:50:2a:9d:1e:bd:64:03:ea:0d:23:6c:
c5:a3:93:30:50:1c:88:9a:23:0c:67:c9:5e:5c:5d:
9c:51:f1:07:80:f7:fc:b8:06:c6:db:9a:ad:14:06:
ff:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1E:45:0C:D4:75:28:05:3C:B4:16:69:D1:E8:5A:68:C9:78:21:2C
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/Ah5FDNR1KAU8tBZp0ehaaMl4ISw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.8.0/24
89.167.192.0-89.167.211.255
89.167.216.0/22
89.167.224.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:0d:8d:85:03:c8:23:ef:94:b8:f1:a3:a3:14:3d:8b:13:61:
cd:af:5f:82:4f:f4:43:b4:e2:2e:ee:82:ad:ec:6f:27:d5:a9:
5d:1c:ee:17:d2:18:ae:4b:2b:08:92:59:64:13:80:8d:32:b8:
c4:5e:7f:8e:32:76:91:d2:6a:9b:ff:97:1c:24:db:90:c7:80:
fd:f7:25:47:78:82:60:33:5a:41:a5:f1:95:c5:2b:64:99:0d:
9f:5a:19:9e:98:e5:3f:f8:2d:ed:6b:7b:4e:39:33:f3:ae:5c:
51:3e:65:77:0e:be:ae:32:22:ed:d6:0d:20:fe:b0:75:0d:af:
c5:5d:b2:49:7b:98:97:f0:f1:66:57:68:14:e0:6e:9e:ef:83:
76:a5:55:49:16:e6:b3:1c:21:92:6d:38:2a:cf:fc:ac:42:9d:
72:89:43:27:83:e7:b8:fb:03:9a:51:f6:9c:22:ad:d0:37:9a:
48:71:31:ff:2d:88:c3:97:ea:46:8f:38:73:5c:c9:9c:d9:92:
95:4d:41:85:7b:5b:90:4b:72:0e:51:6e:6e:a4:d3:4f:c7:96:
81:4c:aa:fa:da:9e:34:df:21:2d:5a:13:35:07:3b:47:d0:e7:
ac:ee:3e:dd:1b:28:bd:3f:35:bf:47:f3:33:77:3b:ca:15:15:
1c:f3:ec:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:26:34 2026 by rpki-client