Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/YGXdTPgw2SvlW3uvIh-3WtuhmsA.roa
File: YGXdTPgw2SvlW3uvIh-3WtuhmsA.roa (raw, json)
Hash identifier: dMA7bJ3qBQAVvVANJ6N/cwoY5Mkkyuwl6eF8ht6OLk8=
Subject key identifier: 60:65:DD:4C:F8:30:D9:2B:E5:5B:7B:AF:22:1F:B7:5A:DB:A1:9A:C0
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019EF8D627AD52A5BF46CF3A6E3122ED6622
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/YGXdTPgw2SvlW3uvIh-3WtuhmsA.roa
Signing time: Wed 24 Jun 2026 08:54:04 +0000
ROA not before: Wed 24 Jun 2026 08:54:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6461
IP address blocks: 83.245.53.0/24 maxlen: 24
83.245.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:12:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:d6:27:ad:52:a5:bf:46:cf:3a:6e:31:22:ed:66:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jun 24 08:54:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6065dd4cf830d92be55b7baf221fb75adba19ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:87:df:e3:a8:6f:78:e7:dc:cc:49:96:58:
40:8f:40:22:c5:98:b6:e0:91:08:db:62:74:82:77:
9c:b7:d8:a3:a1:da:06:cb:90:56:2a:60:a3:a8:01:
9c:36:80:b5:48:77:6a:33:9d:41:3e:89:48:cd:9d:
64:f1:08:42:f6:9d:0a:d3:b3:33:e5:57:94:ff:0c:
e8:4e:8d:b8:55:78:75:93:aa:6d:1e:c2:af:05:de:
bf:d4:4b:fa:a2:7f:24:b7:fc:7f:f7:d1:c8:e9:49:
82:0c:56:61:31:7d:5f:8e:d5:5e:3f:9f:73:6c:d5:
fe:11:7f:c4:ac:a3:41:c7:9c:e5:0b:fd:87:0b:a1:
fe:6a:34:a5:2f:66:01:9e:6f:06:12:f2:dc:16:ea:
fb:4f:3f:bc:80:34:c8:15:01:0e:60:b5:95:a0:2d:
40:b1:71:33:50:00:fa:5f:33:32:22:dd:c7:98:1b:
38:ab:4d:dc:e7:b1:02:0f:5e:13:67:a7:c7:56:a9:
dc:26:de:fa:82:16:e9:06:ed:16:c9:66:c3:fd:06:
63:07:35:c7:58:29:36:a4:07:1a:52:ec:ce:a3:21:
20:dd:82:2c:d2:18:0d:f8:12:be:6e:dc:a2:23:96:
d0:02:5a:8a:65:67:1d:89:74:c7:a5:cb:c5:94:40:
4e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:65:DD:4C:F8:30:D9:2B:E5:5B:7B:AF:22:1F:B7:5A:DB:A1:9A:C0
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/YGXdTPgw2SvlW3uvIh-3WtuhmsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.53.0/24
83.245.57.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ba:e1:4c:19:7a:a8:52:04:f8:b6:02:9a:e1:17:0f:db:12:
66:57:bd:6b:9d:9d:01:b1:67:80:50:76:d1:b7:bc:49:fb:be:
19:72:61:3d:d7:82:4d:7d:96:85:e0:56:05:a8:84:af:ee:3e:
29:e0:72:6e:a0:3f:02:26:b0:a7:39:df:19:23:8e:ee:60:06:
45:96:f8:b9:5b:ad:1f:2d:4d:56:32:fa:88:9b:3a:05:84:28:
ff:b7:3f:56:7b:f6:bd:a8:2b:8c:bd:78:4e:dc:0e:62:94:ac:
27:ed:f9:1f:13:92:45:87:a1:97:3d:66:6c:a6:b3:bb:01:33:
ef:67:96:05:a9:db:91:99:1c:73:02:4b:b6:d3:34:5d:b9:bf:
20:c0:a4:9b:d6:7c:8c:6e:5e:75:ab:2b:57:91:61:a4:fb:4d:
77:4c:c1:84:36:1a:99:e3:f2:a7:aa:97:4a:63:57:7b:7f:83:
6c:ad:36:31:77:de:23:9a:a5:02:c8:2d:27:43:56:9d:8f:86:
3e:37:37:1a:eb:12:48:8b:82:cd:33:c9:65:ab:ba:b6:22:d9:
7e:a4:4f:8c:8d:1b:57:ed:60:d8:09:9f:33:32:70:78:34:3d:
4d:5d:9c:df:b8:3c:1b:a9:8f:b1:93:db:67:7d:40:e5:9e:75:
b5:93:3b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:32:53 2026 by rpki-client