Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/DNfeT75YIWg_GiEYi0OXwXzVsCE.roa
File: DNfeT75YIWg_GiEYi0OXwXzVsCE.roa (raw, json)
Hash identifier: p373o+Uf7zsdGjZbtQi0QVhe/Loppcgzl4NraszftMQ=
Subject key identifier: 0C:D7:DE:4F:BE:58:21:68:3F:1A:21:18:8B:43:97:C1:7C:D5:B0:21
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019EEE292490F7D78F6FCB7422DD25125100
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/DNfeT75YIWg_GiEYi0OXwXzVsCE.roa
Signing time: Mon 22 Jun 2026 07:08:53 +0000
ROA not before: Mon 22 Jun 2026 07:08:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32042
IP address blocks: 83.245.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:12:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:29:24:90:f7:d7:8f:6f:cb:74:22:dd:25:12:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jun 22 07:08:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cd7de4fbe5821683f1a21188b4397c17cd5b021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:4b:6a:dd:fc:38:63:8a:e2:97:82:e5:ba:
ca:f7:a0:58:ae:8a:21:a5:94:41:b1:1e:c8:82:f5:
8c:28:3b:73:de:ba:2f:3e:d2:94:76:43:28:27:5f:
d0:4c:b9:1d:ab:87:f8:79:b2:90:90:2c:bb:37:be:
50:81:fc:8b:83:bd:8e:c9:16:33:54:72:27:59:36:
50:5d:f4:8b:64:a4:48:8e:17:b1:b2:0e:5c:27:5a:
5d:6e:36:52:f6:f0:91:63:08:e2:7c:c5:66:db:d3:
ca:73:d3:80:0e:4e:d8:06:14:73:2a:1e:c7:60:d7:
4b:a9:77:3c:b9:45:42:75:05:c0:cb:3c:61:2d:4e:
fc:3c:d3:30:4d:11:a9:37:e0:9e:a0:53:1d:24:9b:
73:ee:d1:28:15:71:42:b9:07:b0:40:21:51:66:9d:
95:6d:71:b7:da:4c:fe:2e:66:8c:78:ec:ee:3c:55:
a0:0e:cb:6b:6c:26:ac:9a:e9:ea:ee:ac:b5:a7:52:
0d:d2:b9:66:f9:1e:bf:c5:a5:66:e8:16:e5:42:10:
48:30:54:ad:f9:ee:ea:b8:dc:68:90:fa:c5:8b:3f:
ba:a7:d7:b3:90:5b:64:77:67:e9:7a:88:25:c6:55:
93:8a:1b:10:52:c3:98:38:e7:d3:a0:37:23:34:07:
6c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D7:DE:4F:BE:58:21:68:3F:1A:21:18:8B:43:97:C1:7C:D5:B0:21
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/DNfeT75YIWg_GiEYi0OXwXzVsCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.58.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:de:2a:80:03:4a:24:04:d8:4f:1c:ff:4d:27:54:ec:fb:26:
41:ee:a9:ee:e1:2b:5d:5c:07:59:64:f3:18:0c:5e:b1:4b:48:
ea:ad:93:47:32:89:58:ff:65:0e:7e:82:98:38:f4:44:a3:86:
0f:2a:77:e5:ab:27:6a:bb:51:9b:f8:24:4b:92:d1:fe:f5:9a:
be:8c:d8:0b:2e:ac:09:75:b7:a4:58:71:1d:c4:83:5f:dc:af:
c8:64:55:6e:b6:6e:87:82:94:dd:e7:67:35:82:a8:63:cd:dd:
c2:d7:f0:46:6d:71:95:c4:e6:5d:32:5c:d8:a4:91:99:af:15:
ff:4c:71:75:7b:b9:a3:58:79:c2:9c:ed:4d:cd:ce:65:40:3f:
24:0a:c9:71:87:89:fc:ef:62:9f:e7:23:a5:d7:a2:38:cc:ca:
64:be:f5:2c:b4:cc:38:f8:91:95:f5:46:db:43:85:d8:92:be:
d3:69:b3:6c:6d:f6:96:32:c5:d9:3a:d1:63:5e:e5:1b:5b:43:
6f:c4:a1:f2:7d:5b:7f:06:df:26:8a:01:f9:17:0a:bd:32:bb:
d7:70:26:59:47:28:0b:8c:31:f1:97:21:1a:83:48:71:c6:59:
d0:9c:84:42:e9:f4:ef:41:f1:8f:f9:b0:5a:63:a4:b2:eb:54:
78:40:bd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:32:55 2026 by rpki-client