Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/Gv-eSzI1EfE4H1sSVDVmzc0pSLU.roa
File: Gv-eSzI1EfE4H1sSVDVmzc0pSLU.roa (raw, json)
Hash identifier: D4A7YTxkMulg0PXOXrfz1vOUvxOAZyOLGN9WpCOQnYg=
Subject key identifier: 1A:FF:9E:4B:32:35:11:F1:38:1F:5B:12:54:35:66:CD:CD:29:48:B5
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0EBD3B24CE4AF8CD04834192E25ECF917
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/Gv-eSzI1EfE4H1sSVDVmzc0pSLU.roa
Signing time: Tue 29 Sep 2026 06:21:54 +0000
ROA not before: Tue 29 Sep 2026 06:21:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 83.245.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:d3:b2:4c:e4:af:8c:d0:48:34:19:2e:25:ec:f9:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 29 06:21:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1aff9e4b323511f1381f5b12543566cdcd2948b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cf:52:d0:fd:80:1c:41:97:19:95:c9:85:6e:
c9:8e:9f:e7:bb:6f:c7:d0:24:43:b5:46:1e:14:e4:
a6:e0:89:fb:29:49:3b:1c:63:d2:6d:68:f0:7b:d6:
04:11:d1:55:0e:f0:8e:ef:0e:01:fd:07:e5:5b:2b:
3d:c7:a3:8a:2a:51:ab:31:b9:da:b8:62:b3:5b:94:
5c:60:65:9d:68:ea:bb:0d:65:fb:20:78:31:3d:a1:
a3:13:e1:d4:2f:af:27:ca:6e:09:49:c4:0c:5a:4e:
d1:12:e5:52:78:cd:b7:84:ff:48:f8:94:0c:27:93:
22:1e:ec:9f:88:1e:3c:cc:f9:eb:5d:1a:01:7b:b7:
9d:fa:23:85:a7:a5:06:be:3e:b4:88:5e:39:02:00:
b3:db:53:d9:64:d9:4f:26:cb:c5:44:07:9b:94:28:
14:8d:5e:bc:b4:89:8b:78:e8:4e:4f:8b:0a:e4:61:
3d:e7:bd:7a:6e:c1:19:be:af:6d:0b:ce:51:e7:d8:
2c:72:23:70:53:b3:0c:bd:7d:56:2b:cf:04:38:09:
d7:60:76:8d:37:24:67:21:89:10:54:cf:3a:46:f6:
f8:90:75:b1:50:ad:8c:1a:24:32:58:5c:f2:3e:fc:
e8:46:b0:86:07:b7:fa:4c:5e:a1:0f:7a:84:19:10:
a1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FF:9E:4B:32:35:11:F1:38:1F:5B:12:54:35:66:CD:CD:29:48:B5
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/Gv-eSzI1EfE4H1sSVDVmzc0pSLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.40.0/24
Signature Algorithm: sha256WithRSAEncryption
13:fb:39:13:3e:f4:c4:ac:17:ce:bf:ed:6a:78:8e:f1:a6:ae:
77:10:b5:ee:6a:59:69:00:bd:3a:d7:8d:69:47:f0:dd:31:db:
fa:60:40:7f:f1:5a:d1:2a:fe:02:e4:8a:85:c7:b2:1b:83:44:
37:d3:5b:b5:60:96:0b:16:e0:d2:a3:45:12:9b:da:d5:3c:33:
10:fe:cc:cb:6a:c0:96:0f:77:7c:e5:db:f4:ec:17:5e:09:54:
09:d5:55:bd:91:14:60:20:1c:7b:45:02:2a:c5:47:c6:98:ac:
c0:12:e5:48:c8:17:ae:9f:85:75:8c:ea:cd:96:8c:76:98:04:
55:07:d2:67:d0:fd:09:8a:12:a2:f8:f5:97:d6:41:ae:8c:34:
78:75:ff:e6:e7:fc:85:1c:83:de:fd:ec:0f:85:fd:48:cc:71:
73:25:16:bc:5d:58:60:ae:85:22:13:26:da:9d:3d:09:b9:00:
2e:be:c4:28:be:11:23:0a:4c:41:4e:30:a7:a2:40:51:96:18:
fb:cf:f2:2f:16:81:c4:91:ac:15:aa:4c:20:f1:07:0b:c4:4f:
36:70:ff:ac:3e:aa:fd:cc:68:6e:cc:97:bb:00:24:cd:b5:6f:
eb:3b:ff:e3:37:e1:5e:43:3a:29:fe:1b:9d:9d:24:f1:92:d6:
fc:4c:12:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDr07JM5K+M0Eg0GS4l7PkXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0
MDdhODAwHhcNMjYwOTI5MDYyMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWZmOWU0YjMyMzUxMWYxMzgxZjViMTI1NDM1NjZjZGNkMjk0OGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos9S0P2AHEGXGZXJhW7Jjp/nu2/H
0CRDtUYeFOSm4In7KUk7HGPSbWjwe9YEEdFVDvCO7w4B/QflWys9x6OKKlGrMbna
uGKzW5RcYGWdaOq7DWX7IHgxPaGjE+HUL68nym4JScQMWk7REuVSeM23hP9I+JQM
J5MiHuyfiB48zPnrXRoBe7ed+iOFp6UGvj60iF45AgCz21PZZNlPJsvFRAeblCgU
jV68tImLeOhOT4sK5GE95716bsEZvq9tC85R59gsciNwU7MMvX1WK88EOAnXYHaN
NyRnIYkQVM86Rvb4kHWxUK2MGiQyWFzyPvzoRrCGB7f6TF6hD3qEGRChUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBr/nksyNRHxOB9bElQ1Zs3NKUi1MB8GA1UdIwQY
MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt
NWQ1NjA5ODljZjdiLzEvR3YtZVN6STFFZkU0SDFzU1ZEVm16YzBwU0xVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi
LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU/UoMA0G
CSqGSIb3DQEBCwUAA4IBAQAT+zkTPvTErBfOv+1qeI7xpq53ELXuallpAL06141p
R/DdMdv6YEB/8VrRKv4C5IqFx7Ibg0Q301u1YJYLFuDSo0USm9rVPDMQ/szLasCW
D3d85dv07BdeCVQJ1VW9kRRgIBx7RQIqxUfGmKzAEuVIyBeun4V1jOrNlox2mARV
B9Jn0P0JihKi+PWX1kGujDR4df/m5/yFHIPe/ewPhf1IzHFzJRa8XVhgroUiEyba
nT0JuQAuvsQovhEjCkxBTjCnokBRlhj7z/IvFoHEkawVqkwg8QcLxE82cP+sPqr9
zGhuzJe7ACTNtW/rO//jN+FeQzop/hudnSTxktb8TBLO
-----END CERTIFICATE-----
Generated at Wed Oct 7 05:51:09 2026 by rpki-client