Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/HdGHnGCkN60BBCoXO82KCD8KQP8.roa
File: HdGHnGCkN60BBCoXO82KCD8KQP8.roa (raw, json)
Hash identifier: z19vVo7hZRhugrpovSRveacrmaNy4ZTI7h7Sd6ab6rY=
Subject key identifier: 1D:D1:87:9C:60:A4:37:AD:01:04:2A:17:3B:CD:8A:08:3F:0A:40:FF
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019D4D1E517E11CF465727B61C8A24E69F72
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/HdGHnGCkN60BBCoXO82KCD8KQP8.roa
Signing time: Thu 02 Apr 2026 07:35:25 +0000
ROA not before: Thu 02 Apr 2026 07:35:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62513
IP address blocks: 83.245.56.0/24 maxlen: 24
83.245.57.0/24 maxlen: 24
83.245.58.0/24 maxlen: 24
83.245.59.0/24 maxlen: 24
83.245.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Apr 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4d:1e:51:7e:11:cf:46:57:27:b6:1c:8a:24:e6:9f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Apr 2 07:35:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1dd1879c60a437ad01042a173bcd8a083f0a40ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8d:f2:ff:a0:4d:79:2e:e1:96:ac:00:e1:ab:
4a:69:e2:62:01:f6:ed:28:14:45:45:04:80:92:b7:
9d:2f:d7:54:10:64:e4:2c:b8:fa:f8:07:d2:8c:d7:
86:d0:4a:d1:b9:e2:07:45:8a:e5:9a:6d:b3:83:e9:
e5:1a:7c:f5:63:21:08:e6:ab:9f:98:2f:37:92:e1:
e4:3b:5a:63:af:e0:91:f0:a1:c2:4a:67:23:69:59:
55:07:34:59:98:30:6f:4a:ca:c6:fd:a9:b4:c2:2a:
de:4d:a5:92:3e:dc:49:ff:d2:05:f0:13:ef:0e:9c:
a6:a1:6d:06:bf:3c:f3:85:10:8e:8e:48:17:76:a9:
50:71:89:5f:03:e9:1a:86:36:7b:94:c0:19:54:5d:
f3:0e:ef:73:76:8d:e0:85:4c:83:8c:9e:fe:57:03:
67:a3:bf:29:4c:c9:e7:09:2f:b6:9e:e3:ed:7e:4c:
2b:81:bc:13:a2:6b:0e:22:0c:cf:64:5f:c8:31:cd:
0f:f5:9a:9f:6b:3f:a2:6f:15:cd:ed:a5:6a:66:68:
70:8e:5c:01:df:8e:0e:ed:0a:25:0c:87:7a:e5:f5:
a5:f2:b9:b0:9e:fc:0c:11:28:2b:0e:5a:bb:5c:13:
e5:aa:8d:3f:06:80:ec:02:d4:5b:78:1f:52:28:59:
d9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D1:87:9C:60:A4:37:AD:01:04:2A:17:3B:CD:8A:08:3F:0A:40:FF
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/HdGHnGCkN60BBCoXO82KCD8KQP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.56.0-83.245.60.255
Signature Algorithm: sha256WithRSAEncryption
09:30:a3:8f:30:21:98:24:29:61:45:db:d6:09:19:54:7f:54:
9b:79:7d:a3:f2:66:c1:20:19:38:77:d1:00:9c:81:5d:ba:62:
59:93:7b:05:43:ce:94:18:ff:bf:7d:d6:26:2a:72:73:f2:45:
39:fc:99:e3:49:5f:a4:be:a9:75:87:25:3f:04:a9:18:df:e7:
fa:28:10:51:9b:ee:32:db:f2:ba:30:2e:b4:5c:8e:fc:2f:9c:
40:30:b6:dc:f5:f3:4c:4a:78:19:23:dd:ba:28:4a:86:3a:20:
41:7a:95:df:fe:8a:78:4b:df:4f:d1:a2:3b:48:86:ea:27:f8:
e3:f7:83:ab:f9:50:c8:42:e8:bc:6c:16:5d:b3:c6:1e:f9:ae:
88:a9:70:a6:eb:8f:94:99:ff:0f:31:b2:78:37:a1:12:4e:c5:
3e:44:54:80:80:e9:1e:5c:2d:08:eb:31:1b:e9:5e:bb:1d:f5:
b7:8e:2a:8d:eb:ef:23:2d:16:fb:e7:14:e1:ec:51:81:7f:e3:
c0:a8:77:b4:26:a4:b1:88:b2:10:56:5b:40:b4:dd:fa:99:82:
2f:19:f3:07:02:45:f9:08:84:a9:75:24:b8:67:ad:de:5a:fb:
52:4b:a4:bd:f9:7b:6c:da:27:1a:4d:94:d4:2f:2b:e6:0e:7a:
ea:c7:76:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:33 2026 by rpki-client