Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/Ycy5lGeS5U8PdIJhcsoT_8YB0SQ.roa
File: Ycy5lGeS5U8PdIJhcsoT_8YB0SQ.roa (raw, json)
Hash identifier: Mmaht3Wpxz+xIyjudmJVkBM+i+FSVBTRr0ppt6Ph/go=
Subject key identifier: 61:CC:B9:94:67:92:E5:4F:0F:74:82:61:72:CA:13:FF:C6:01:D1:24
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019F1D40A65351E589D73F1706A5BE992F51
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/Ycy5lGeS5U8PdIJhcsoT_8YB0SQ.roa
Signing time: Wed 01 Jul 2026 10:36:43 +0000
ROA not before: Wed 01 Jul 2026 10:36:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 83.245.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:40:a6:53:51:e5:89:d7:3f:17:06:a5:be:99:2f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jul 1 10:36:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61ccb9946792e54f0f74826172ca13ffc601d124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:a4:05:ff:73:3e:d0:61:f8:58:f6:63:12:
df:2e:47:80:a8:5a:72:8e:0d:af:96:2a:42:a5:e4:
0d:91:b2:66:23:11:4e:4b:67:50:21:7f:4e:87:c7:
40:bc:d1:6b:7b:f8:c5:44:ad:95:72:04:89:11:97:
5c:b2:79:c0:7a:74:b2:85:0f:75:29:be:fd:d9:d5:
cc:60:38:30:c5:63:d7:29:4f:5e:46:1b:01:b1:c0:
0c:99:ac:fd:81:21:40:25:e0:a4:23:c1:52:1b:9a:
53:9f:c3:a5:fe:5b:da:88:a3:80:75:7c:6c:43:37:
21:bd:94:c2:9e:0e:94:ca:21:35:7c:9f:4d:70:90:
ea:69:48:08:a6:f8:8e:9e:34:5d:0a:98:58:70:81:
99:ab:53:ff:74:c6:cf:fd:c3:86:16:d8:73:a0:c2:
22:48:97:95:1e:fc:74:e5:d0:b0:4a:af:10:93:c3:
7a:86:d5:5d:a6:fd:aa:be:f8:21:b1:a6:cb:53:64:
59:97:4a:2f:c6:9a:82:b4:99:d6:fe:38:b8:18:38:
53:60:63:8e:61:21:68:23:ee:8d:31:05:bb:38:d0:
fb:bd:2f:ab:a8:ac:d9:64:b4:77:bc:3a:25:40:44:
9f:44:26:10:c9:0e:07:62:f1:80:07:91:df:66:83:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CC:B9:94:67:92:E5:4F:0F:74:82:61:72:CA:13:FF:C6:01:D1:24
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/Ycy5lGeS5U8PdIJhcsoT_8YB0SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.8.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:66:ac:a5:53:b6:50:52:a7:31:1a:97:ab:a3:db:d8:fb:70:
57:fe:11:de:59:54:37:a4:7f:0a:01:77:bf:c8:b0:19:93:ae:
0b:03:76:cc:bf:4d:07:77:cf:76:2e:f4:78:71:25:8d:17:a3:
df:54:39:8c:ab:7c:09:7a:e9:bd:86:bd:45:0a:eb:85:d8:ff:
b0:7f:54:67:b8:c3:39:45:9c:9d:dd:69:87:fb:68:73:9b:dc:
7e:83:d3:c9:19:14:d5:54:91:f2:d7:e9:e5:52:65:37:0f:ba:
52:d1:f2:87:57:c5:6e:bc:5c:36:8f:57:1e:75:6a:f1:71:32:
51:29:b9:cc:92:cc:6a:f3:36:b6:09:e9:0e:4a:60:3d:0d:83:
83:60:b7:89:20:2d:a7:5d:42:87:9b:db:ff:19:78:19:b0:a7:
b4:d8:0b:ff:89:ea:14:4e:5e:42:22:8e:17:02:e2:39:03:54:
b4:e6:26:f0:d6:0d:fa:2a:4c:77:ba:27:18:0d:21:d1:92:19:
13:63:67:99:02:86:c6:29:b3:63:09:74:39:54:b7:af:75:62:
19:3d:93:b7:d4:70:de:08:df:f5:45:5a:9b:27:20:5d:0b:73:
02:7b:00:ae:49:58:c8:83:81:bf:c0:14:1a:d8:73:13:ff:de:
9a:32:92:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:54 2026 by rpki-client