Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/LaJR34WXnWTcaI-9LhjMEyhwweI.roa
File: LaJR34WXnWTcaI-9LhjMEyhwweI.roa (raw, json)
Hash identifier: ppFMaEyyaI1nBO0GmKOzMtxwnZk5UIRNx7Q+g13bpwk=
Subject key identifier: 2D:A2:51:DF:85:97:9D:64:DC:68:8F:BD:2E:18:CC:13:28:70:C1:E2
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A05798A2EAD74F0E1A4A406ADA550B0C0F
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/LaJR34WXnWTcaI-9LhjMEyhwweI.roa
Signing time: Mon 31 Aug 2026 11:33:35 +0000
ROA not before: Mon 31 Aug 2026 11:33:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41171
IP address blocks: 83.245.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:98:a2:ea:d7:4f:0e:1a:4a:40:6a:da:55:0b:0c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Aug 31 11:33:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2da251df85979d64dc688fbd2e18cc132870c1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:93:06:65:8a:06:9e:ed:a8:59:10:39:f4:34:
68:0d:c0:50:3b:ba:b6:a4:a8:af:2f:57:60:95:ea:
43:c9:20:0f:18:a7:cb:7e:65:ae:23:59:00:b0:6a:
08:df:6c:f0:93:e7:18:74:85:01:02:68:e5:37:5d:
78:fd:46:ab:05:87:55:9f:54:ef:35:c7:82:0b:98:
89:59:33:08:03:57:82:33:2c:d5:d7:83:6d:46:48:
b8:3b:76:f1:a0:61:95:0e:e7:1e:53:56:a6:69:08:
6e:d9:94:96:9c:94:24:8b:1f:5a:03:b4:14:b1:40:
42:c5:0e:b4:ce:d7:c7:4d:77:63:ea:34:30:00:29:
ab:10:2c:e1:7a:2d:6d:8d:7f:e4:7d:8a:00:a7:91:
eb:26:dd:24:59:3b:b8:8f:76:6f:34:b3:12:f9:b3:
2d:ca:05:9d:7c:a7:bd:ef:80:4e:de:bb:81:27:e3:
89:e8:f7:a2:b6:8e:f2:51:45:cb:75:f4:97:d6:e3:
01:7f:ce:10:52:db:64:d4:ae:b1:b5:fa:6c:22:29:
f5:26:42:dc:6e:30:e2:11:f1:56:b3:5c:63:d0:10:
c4:96:11:1e:07:47:6b:ac:43:3a:cd:7f:9c:a1:fa:
89:8b:14:25:74:66:19:9d:a9:ac:cb:fa:8f:33:5c:
d9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A2:51:DF:85:97:9D:64:DC:68:8F:BD:2E:18:CC:13:28:70:C1:E2
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/LaJR34WXnWTcaI-9LhjMEyhwweI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.120.0/22
Signature Algorithm: sha256WithRSAEncryption
31:8c:f4:63:f3:31:1a:7d:f6:4c:0d:f1:12:68:2e:69:1e:48:
b5:51:99:f7:dc:65:78:35:e5:8d:5b:4d:95:04:dc:4f:fe:56:
30:4a:42:14:2f:a7:0e:ed:f7:eb:1e:37:76:b6:bf:32:7b:4b:
62:9c:23:a1:88:50:bd:df:24:b6:7e:42:6c:69:a2:10:06:2b:
44:a3:ba:e4:6e:84:3d:e9:89:8c:9c:a2:2b:21:41:da:a9:9d:
be:f1:94:11:19:52:82:31:ac:8e:14:9c:29:6f:57:40:4d:9d:
59:e0:a7:27:b4:f7:4f:ea:36:f4:03:38:49:c1:9f:84:4c:39:
0e:cc:9e:c2:eb:83:bb:c4:2b:ce:d5:46:46:a9:22:39:6b:aa:
2e:15:e6:c2:86:9b:1f:0a:ce:6f:b8:59:fc:f3:b3:6a:e6:ff:
ac:f5:06:e9:46:a3:4b:ec:de:3c:02:f2:8f:ab:d8:c0:3b:10:
fc:64:ac:c2:0d:1c:64:c2:2d:4d:e6:91:4c:2e:63:76:4d:85:
b0:b1:9b:5d:63:6f:3f:05:8e:98:0e:b1:ed:1a:b0:b3:62:07:
18:b1:fd:8e:5a:a5:5e:8f:8f:84:a8:0f:14:66:9f:4a:8e:1d:
ca:94:20:08:5b:9e:c1:31:f3:0e:5a:9b:10:56:7b:44:13:da:
22:7e:d2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:01:07 2026 by rpki-client