Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/SYooDqCmdVk7J9G18v-PHkKmFSU.roa
File: SYooDqCmdVk7J9G18v-PHkKmFSU.roa (raw, json)
Hash identifier: 1uqZUR2gy/ZNCyXiNt/AJMF3rBVB4YYfxO0Xy2cNDGk=
Subject key identifier: 49:8A:28:0E:A0:A6:75:59:3B:27:D1:B5:F2:FF:8F:1E:42:A6:15:25
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0570F4D5AB9C8D93C6ED3C13992B5D073
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/SYooDqCmdVk7J9G18v-PHkKmFSU.roa
Signing time: Mon 31 Aug 2026 09:03:35 +0000
ROA not before: Mon 31 Aug 2026 09:03:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215059
IP address blocks: 83.245.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:0f:4d:5a:b9:c8:d9:3c:6e:d3:c1:39:92:b5:d0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Aug 31 09:03:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=498a280ea0a675593b27d1b5f2ff8f1e42a61525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5f:0c:26:9c:6d:78:cb:be:ee:27:06:9b:98:
b3:a3:a6:ac:00:f3:be:98:5b:b2:41:3f:fd:16:bc:
25:3b:47:5b:f3:bc:88:5c:c5:a1:bf:be:09:87:4d:
30:91:4c:73:46:36:6b:0f:fc:8d:f2:60:a1:f8:fd:
d7:00:54:c6:56:57:3a:e5:2d:4e:0c:cf:10:b5:ee:
3a:63:98:74:d4:14:07:ef:dc:3e:52:f9:21:48:b4:
bf:1c:f7:d5:55:91:85:f2:e7:0f:3b:be:04:74:3a:
a3:cd:a9:de:7a:bf:33:b2:25:a4:a6:f2:3f:23:7f:
9f:b0:9c:aa:dc:52:a0:d5:06:69:ed:99:09:3e:d0:
d4:cb:ed:05:2c:9c:b9:09:15:54:0e:9c:f4:2f:58:
fd:5a:31:d9:3d:56:3b:cb:62:c0:c7:a3:2b:76:43:
57:bb:1a:22:48:d9:bf:f0:49:0d:35:c5:f6:35:8c:
15:fe:36:1a:e6:49:7c:9e:06:ab:94:27:e4:f2:0b:
dd:03:80:4c:93:da:b0:17:6b:fa:55:32:98:86:b9:
59:a6:6a:08:09:26:39:68:7a:63:a1:f9:82:be:ad:
45:b4:47:d8:c8:19:84:63:4d:9c:16:8d:80:04:9d:
cd:52:79:fe:1e:9e:a8:2e:97:80:63:03:57:23:1b:
e7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8A:28:0E:A0:A6:75:59:3B:27:D1:B5:F2:FF:8F:1E:42:A6:15:25
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/SYooDqCmdVk7J9G18v-PHkKmFSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.120.0/22
Signature Algorithm: sha256WithRSAEncryption
10:9f:66:95:0d:98:96:01:f9:ec:7d:24:e1:b7:46:44:b6:4d:
57:e2:a0:87:72:ac:87:a1:b1:13:27:04:1d:2b:25:ef:25:14:
70:93:3d:ec:82:5a:e3:54:d9:d6:19:19:22:b4:9a:6e:fe:af:
c4:c3:c4:f6:7b:c0:db:ef:d5:fb:c0:ea:55:c6:8e:14:cc:28:
b2:63:a2:c7:ad:55:57:a8:13:1a:de:dd:fc:11:c0:14:12:70:
5b:82:3b:cf:a4:37:88:6e:f9:78:d7:89:8c:f7:54:ec:ef:52:
4c:71:aa:f2:b7:60:25:be:71:8c:5f:20:a5:03:bf:5f:40:b3:
2f:af:6f:84:b2:a4:48:f3:64:c8:f1:bd:28:ce:1d:62:de:fc:
48:c0:7e:da:65:11:0a:21:99:28:ed:a7:72:0a:57:18:38:6b:
61:0d:cf:a6:30:09:4b:2d:b6:d2:91:0f:37:71:a0:ef:b4:8c:
a7:a2:98:33:9d:1c:25:05:69:05:b7:c6:06:5e:46:c6:d6:d7:
cb:40:50:c3:22:ae:5d:a1:8b:ea:37:01:8a:8d:1f:2a:df:ef:
63:cc:bf:54:e6:be:32:f7:62:93:7a:03:87:22:9d:4f:38:08:
6b:ca:56:11:2a:0f:66:b8:5c:a1:59:1a:77:96:af:c2:ba:c6:
51:48:20:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:36:11 2026 by rpki-client