Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/YEhHyM9Ex_KKekH5VjBr3VxK3LI.roa
File: YEhHyM9Ex_KKekH5VjBr3VxK3LI.roa (raw, json)
Hash identifier: uHnqXRv4X7k9WzE3QaUtv9JAv+AdztfPp846F5lhQ3M=
Subject key identifier: 60:48:47:C8:CF:44:C7:F2:8A:7A:41:F9:56:30:6B:DD:5C:4A:DC:B2
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019F122A660761574AF23987506991F26F21
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/YEhHyM9Ex_KKekH5VjBr3VxK3LI.roa
Signing time: Mon 29 Jun 2026 06:56:36 +0000
ROA not before: Mon 29 Jun 2026 06:56:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 83.245.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:12:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2a:66:07:61:57:4a:f2:39:87:50:69:91:f2:6f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jun 29 06:56:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=604847c8cf44c7f28a7a41f956306bdd5c4adcb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:38:32:af:ed:c9:c5:d2:d6:e8:7b:81:5a:18:
00:7a:0a:79:88:26:97:a8:f5:b4:a5:b2:af:d1:d5:
78:cb:57:55:a0:a6:20:e5:05:33:d7:35:0a:90:a2:
cd:d7:b5:d2:46:f2:7c:ba:89:1f:c7:36:24:61:f7:
72:ac:ed:57:10:0e:c4:17:ae:30:19:0a:71:e3:38:
2c:23:8f:da:1b:f9:3c:e3:6d:40:f5:7d:39:ae:ce:
a9:c8:d7:3c:66:f4:7f:cd:70:b5:b2:e4:d9:58:57:
ee:43:f6:e7:e1:ed:5d:9b:2d:fe:b3:60:bd:f4:85:
b7:10:58:3c:30:16:3c:78:5a:0e:fa:70:66:34:1b:
8e:95:3c:ea:a2:8f:58:9f:49:ac:c4:9b:45:60:51:
6b:92:46:a6:2a:ca:bb:57:47:01:dd:5f:24:96:48:
2c:83:51:d2:85:26:bd:23:c5:f5:29:c9:76:9c:0d:
56:55:85:4d:27:2b:2a:9b:6d:b2:9b:2b:38:75:45:
de:45:55:54:56:d6:17:9c:2f:ca:75:34:5b:9e:c9:
7b:4d:9c:6e:ea:bf:e2:de:fe:e3:1d:02:1d:81:4d:
4d:c6:4f:c5:a8:1d:4b:77:29:54:29:8e:00:c0:3a:
56:c2:29:91:00:3d:ec:a1:53:f4:d3:50:f2:9c:5f:
87:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:48:47:C8:CF:44:C7:F2:8A:7A:41:F9:56:30:6B:DD:5C:4A:DC:B2
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/YEhHyM9Ex_KKekH5VjBr3VxK3LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.3.0/24
Signature Algorithm: sha256WithRSAEncryption
65:bd:e3:73:ed:1c:6d:47:63:cf:2f:69:73:e0:8e:55:fd:40:
40:91:fb:16:44:c6:c1:e5:19:db:57:17:60:71:74:b1:0a:88:
55:ff:b8:e5:43:56:86:04:46:b3:80:4d:c8:bf:4a:a6:c2:4d:
e5:27:08:dd:8c:4a:91:89:c9:4f:08:68:9f:29:c2:8f:be:ff:
6c:d8:ca:84:15:c0:97:4c:5a:a3:1a:fb:e0:cc:0f:a8:cd:0e:
79:ec:5a:f5:99:41:9e:19:33:0a:04:66:38:bf:20:33:db:1d:
06:1f:5c:08:15:9f:21:f7:42:ea:fb:da:ce:88:57:9c:65:f4:
b9:a1:61:ae:3a:d3:d5:3c:b1:e6:15:75:03:82:1a:2a:44:95:
62:48:fe:18:76:e6:94:1b:43:50:e8:31:32:a0:b4:51:e1:51:
2b:09:3b:1a:d0:24:b4:f3:05:4e:7e:9c:07:e9:ca:7a:03:62:
53:ca:36:85:8a:93:5f:59:19:40:25:01:f2:a0:1f:a4:81:8c:
e1:80:5e:f3:99:8c:a2:7e:f4:b2:f8:de:6a:a1:07:b9:7f:a7:
f9:0e:1a:d7:d1:d0:02:8d:c2:42:2d:6e:40:80:51:b1:78:86:
ef:1f:c7:f3:f1:a1:db:08:6d:28:d1:18:83:01:aa:fb:a4:7f:
57:2f:85:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:32:54 2026 by rpki-client