Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/K5Dj36r2xiwdo5oqem28sVRsqMs.roa
File: K5Dj36r2xiwdo5oqem28sVRsqMs.roa (raw, json)
Hash identifier: ISSB13GP8+yFx4/mT4hRdaqB2RuGXkAIwv4X60MPsuc=
Subject key identifier: 2B:90:E3:DF:AA:F6:C6:2C:1D:A3:9A:2A:7A:6D:BC:B1:54:6C:A8:CB
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0664B87C27D5C18F0CCB60B67A106F846
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/K5Dj36r2xiwdo5oqem28sVRsqMs.roa
Signing time: Thu 03 Sep 2026 08:03:40 +0000
ROA not before: Thu 03 Sep 2026 08:03:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35661
IP address blocks: 83.245.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:4b:87:c2:7d:5c:18:f0:cc:b6:0b:67:a1:06:f8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 3 08:03:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b90e3dfaaf6c62c1da39a2a7a6dbcb1546ca8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b6:ed:b2:37:ba:de:2d:fc:66:5d:42:b1:6f:
da:98:ae:8c:6e:d2:59:f0:f4:d2:8d:40:dd:a2:3a:
48:76:72:90:94:a9:af:ed:56:e3:2a:bf:ed:bd:a0:
a6:07:3b:bb:61:d6:4a:c2:e4:a9:15:0e:72:90:38:
eb:1d:2b:3b:a5:c7:cc:ff:5a:ac:6a:e6:f5:1c:95:
29:a7:8e:21:61:25:1c:96:62:b8:44:0e:ed:08:2f:
d0:77:16:46:1e:8a:23:07:90:8f:c6:24:62:cf:8f:
ef:f2:ca:8f:61:6b:16:5b:3b:92:ef:44:26:74:43:
85:2d:0e:50:b8:da:7f:13:92:39:a5:e8:da:b0:de:
4e:f1:57:ad:5c:67:db:20:21:27:53:4a:b3:1c:b0:
a5:16:7f:80:b1:c7:25:08:40:2e:f7:2b:57:98:81:
bb:8b:3c:6a:23:d0:12:5a:ec:f2:27:62:9e:77:b2:
79:49:81:98:20:43:d4:ef:f5:7b:95:1a:0c:dc:d7:
3d:3b:97:97:96:dd:34:b4:27:19:da:ad:d2:ac:8f:
c3:0c:fc:c2:5e:41:e4:41:0e:97:d3:bd:82:18:d7:
1f:48:11:c2:50:c7:04:4e:08:80:88:af:bc:df:ce:
d3:5a:90:96:20:e4:b4:92:cf:00:98:41:7f:b9:21:
44:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:90:E3:DF:AA:F6:C6:2C:1D:A3:9A:2A:7A:6D:BC:B1:54:6C:A8:CB
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/K5Dj36r2xiwdo5oqem28sVRsqMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.78.0/24
Signature Algorithm: sha256WithRSAEncryption
80:84:cb:3c:65:f7:c4:39:01:2b:5e:b2:32:08:f4:b2:8a:ee:
ac:fc:20:b6:4a:3e:0e:8c:b7:17:fe:24:62:93:0f:1a:77:90:
75:dc:3a:3e:98:a4:28:88:e3:e4:13:2f:5b:be:c6:0f:27:be:
e9:91:28:8c:3d:2a:ba:2f:4b:11:7f:f6:d5:3e:ab:e3:8e:05:
80:43:dd:de:d4:7f:b0:e2:f8:a6:1e:8d:42:40:ab:fe:7f:74:
f4:d4:3a:86:12:1b:17:40:5c:12:5a:45:32:e1:0d:05:b4:67:
da:29:26:d5:e5:b2:16:d1:c4:49:87:8b:25:f6:8a:51:75:59:
91:8d:d9:5b:e4:30:14:0a:d4:da:8a:85:50:fa:e4:3c:9a:1a:
09:01:22:e1:cd:04:64:00:be:8c:1d:1c:11:45:bc:0b:12:7a:
44:21:26:5f:47:c6:c2:22:a6:28:89:ba:a0:9c:39:eb:5e:46:
1e:e4:23:ef:94:15:e7:ae:b0:0a:d4:02:ef:e2:15:ae:15:2f:
b8:71:17:69:a0:cc:03:97:14:53:22:81:fd:c8:fc:a4:b4:29:
9b:4f:0a:c6:2b:68:02:2f:26:2d:9b:55:66:34:95:87:b2:52:
b6:22:ac:b2:c8:50:46:22:7f:3b:26:f5:2c:ce:f1:b2:fe:24:
88:a3:07:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:01:00 2026 by rpki-client