Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/U6dLDAejvUgnq5aOMEIUtrBzTBk.roa
File: U6dLDAejvUgnq5aOMEIUtrBzTBk.roa (raw, json)
Hash identifier: 2dgujFoVBvo9HpAJXnhdci16ozuiz9TD8/Uw/FW7qg0=
Subject key identifier: 53:A7:4B:0C:07:A3:BD:48:27:AB:96:8E:30:42:14:B6:B0:73:4C:19
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019EFF65B6446DE350A4D9E4D7884581AE0D
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/U6dLDAejvUgnq5aOMEIUtrBzTBk.roa
Signing time: Thu 25 Jun 2026 15:28:36 +0000
ROA not before: Thu 25 Jun 2026 15:28:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199550
IP address blocks: 83.245.66.0/24 maxlen: 24
83.245.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:12:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:65:b6:44:6d:e3:50:a4:d9:e4:d7:88:45:81:ae:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jun 25 15:28:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53a74b0c07a3bd4827ab968e304214b6b0734c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5c:44:e0:d2:21:e8:16:40:b0:31:da:27:48:
32:5c:c1:1a:6c:ca:1c:9e:6e:46:4e:c4:61:3a:14:
2f:9c:5a:78:f7:82:a2:74:94:55:ec:68:5d:36:8d:
40:e8:10:94:05:aa:27:a6:14:0f:7a:a0:59:75:78:
a8:97:25:53:05:df:9f:d8:7b:75:a1:a1:63:e6:0f:
b1:22:f1:62:5d:13:da:06:1d:2d:ba:ba:ab:1c:a2:
9d:4b:de:47:26:0c:a7:ca:90:45:7f:6b:1d:89:1f:
47:f6:71:dc:57:fb:34:f6:4d:c9:bd:0b:9e:1f:0d:
73:23:6e:93:0a:96:eb:5b:68:d7:48:0d:a6:f8:eb:
59:35:34:b6:40:50:47:8f:f2:57:9c:49:a4:54:8d:
bf:27:83:61:b8:e7:0a:0a:a5:3d:41:9f:c9:60:5d:
e8:a2:a6:34:ee:14:66:63:6e:82:c1:10:1f:c0:22:
ff:18:e2:6f:d9:b6:32:cb:a8:55:5b:e2:f6:d7:1f:
1b:64:ef:09:3a:34:4a:db:94:12:64:61:47:b7:79:
1f:43:8e:1d:e7:74:53:fc:e7:47:9e:eb:13:59:40:
17:1a:cf:0a:49:9b:90:ef:55:52:3b:7d:3f:07:32:
fe:e9:e9:5d:0e:fc:59:a3:c6:08:f5:22:14:7c:08:
ab:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A7:4B:0C:07:A3:BD:48:27:AB:96:8E:30:42:14:B6:B0:73:4C:19
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/U6dLDAejvUgnq5aOMEIUtrBzTBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.66.0/23
Signature Algorithm: sha256WithRSAEncryption
36:58:1a:64:07:d9:bc:a7:d7:5d:34:f5:81:7e:54:f1:2f:40:
63:e2:a6:84:b1:1f:28:26:2c:07:36:21:1f:30:63:fc:f7:8d:
38:09:f6:e6:7c:83:55:40:f2:5b:76:dd:f7:93:87:c4:1c:41:
4f:cd:54:e3:51:03:f2:53:3a:7c:b8:f8:8f:4f:1e:7b:6a:f8:
df:ce:c6:44:c9:bf:00:96:42:16:a6:e0:d4:38:e7:74:88:03:
9c:4a:9d:f4:40:3b:c3:c1:50:e3:c1:64:e5:49:0c:99:e0:cc:
70:08:3e:d5:3f:9b:79:57:6c:36:d9:13:46:7b:09:70:5e:f6:
de:a7:a1:71:70:8d:13:17:8e:5f:cb:72:fa:23:da:72:fb:f5:
0a:55:7e:a7:81:d6:a4:39:44:6e:c1:fd:33:72:96:85:fa:6d:
50:5c:16:d3:f5:ed:49:08:13:62:2d:52:ef:8d:99:1d:78:18:
3b:bb:91:20:f2:8c:05:a1:4d:2b:55:5f:dc:02:eb:86:1b:b0:
ab:54:89:8a:22:58:28:24:af:e8:ae:90:dd:02:3d:df:53:ef:
59:b1:82:ea:2b:e9:8d:51:aa:7c:12:aa:16:e8:10:ae:7e:f4:
2c:d0:1f:4d:36:6f:91:67:fd:9f:42:1f:4f:76:e4:07:63:44:
d5:c5:09:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:32:55 2026 by rpki-client