Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/YuWhtV_ooJKZDPzglq4aD3u0vNE.roa
File: YuWhtV_ooJKZDPzglq4aD3u0vNE.roa (raw, json)
Hash identifier: LlcMUITpEE6lj8f+Bxsc2+7fgunLPQiQ9Ebhj5Pflqc=
Subject key identifier: 62:E5:A1:B5:5F:E8:A0:92:99:0C:FC:E0:96:AE:1A:0F:7B:B4:BC:D1
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019F1D40A7FB126C8724D60EB6D7D72710B4
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/YuWhtV_ooJKZDPzglq4aD3u0vNE.roa
Signing time: Wed 01 Jul 2026 10:36:44 +0000
ROA not before: Wed 01 Jul 2026 10:36:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152606
IP address blocks: 83.245.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:40:a7:fb:12:6c:87:24:d6:0e:b6:d7:d7:27:10:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jul 1 10:36:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62e5a1b55fe8a092990cfce096ae1a0f7bb4bcd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:da:ae:a0:e3:92:f0:77:15:f0:7a:f1:e2:
0f:77:5e:67:ee:ff:f5:45:cc:39:69:e5:c3:64:c0:
a0:32:d0:1f:25:3a:9f:5d:91:11:db:26:04:0b:90:
0e:25:52:72:ec:88:ea:fe:f1:5e:fd:41:54:82:a0:
90:33:aa:46:e2:c5:ac:56:7a:85:6a:ab:c5:fd:4f:
1f:e1:61:0c:b7:8e:3c:b8:e7:b7:ec:44:9d:00:ff:
ad:b6:c5:3b:ed:ed:72:9a:78:36:ce:5c:b2:a9:8a:
ff:f8:e4:34:f9:8a:e1:0b:a8:30:b2:2e:00:03:d4:
48:81:9f:65:64:5d:a9:fc:56:9c:06:10:df:21:66:
f9:e7:e7:1c:ec:cc:0a:6e:2a:61:d8:72:84:9a:c7:
84:a6:70:2d:3f:79:19:65:a1:b3:ba:59:6c:05:34:
bf:e8:cd:d0:aa:35:69:69:f7:bd:84:06:b3:c6:85:
b5:46:e8:5d:1b:9d:5c:fe:17:36:7b:2d:36:99:99:
b8:10:b1:cb:da:7f:04:fa:30:27:ac:a7:2b:7b:7f:
21:09:0a:6d:f2:2d:88:2d:23:fc:68:09:7a:ac:67:
03:7f:cf:0e:e8:02:3a:1f:68:89:e0:c7:85:ec:e9:
ba:87:3d:af:27:21:54:37:9e:e6:4a:bd:41:fc:d1:
5f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E5:A1:B5:5F:E8:A0:92:99:0C:FC:E0:96:AE:1A:0F:7B:B4:BC:D1
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/YuWhtV_ooJKZDPzglq4aD3u0vNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.11.0/24
Signature Algorithm: sha256WithRSAEncryption
04:50:84:5a:1a:ce:d9:fb:67:3a:46:e0:bf:b0:3c:25:8d:3a:
71:d7:27:a5:05:e7:4e:9d:2f:ee:fd:aa:cd:0c:15:a0:92:4f:
d4:44:30:8f:19:9c:85:7e:6e:85:70:d5:c6:db:42:3f:28:a4:
bb:7d:7a:5d:f5:87:16:55:14:fb:d1:87:c2:ac:e7:db:15:e1:
28:e6:6e:61:0d:60:0c:4e:19:cd:ce:e9:40:95:05:9b:42:5b:
58:6c:60:0e:da:69:7c:9d:d1:82:3f:ec:16:78:da:7a:fe:2e:
c7:4a:bb:4f:5c:cd:b5:07:e8:f9:e9:64:fa:cf:c4:ff:8a:93:
71:ef:3a:f1:51:f1:90:30:06:f0:30:33:d8:41:38:17:94:cc:
60:dd:47:29:6e:ca:48:10:6a:f3:6e:e6:95:4d:c6:1f:46:03:
6e:c1:40:86:41:53:2a:f2:e6:de:a6:ce:02:43:90:55:f5:d6:
90:7f:2f:b1:91:02:a4:fb:07:d5:37:1a:c4:95:0d:8e:d8:e7:
f9:5e:5e:e2:cc:3f:64:9a:68:e8:b3:6b:4a:ce:5b:be:4b:2a:
44:4c:f4:9d:02:98:06:91:db:b3:ac:67:31:78:ca:50:e9:07:
75:e5:41:9f:e6:94:e3:4f:bf:40:3d:77:96:f0:37:7d:61:27:
16:76:ca:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8dQKf7EmyHJNYOttfXJxC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0
MDdhODAwHhcNMjYwNzAxMTAzNjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmU1YTFiNTVmZThhMDkyOTkwY2ZjZTA5NmFlMWEwZjdiYjRiY2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1s/arqDjkvB3FfB68eIPd15n7v/1
Rcw5aeXDZMCgMtAfJTqfXZER2yYEC5AOJVJy7Ijq/vFe/UFUgqCQM6pG4sWsVnqF
aqvF/U8f4WEMt448uOe37ESdAP+ttsU77e1ymng2zlyyqYr/+OQ0+YrhC6gwsi4A
A9RIgZ9lZF2p/FacBhDfIWb55+cc7MwKbiph2HKEmseEpnAtP3kZZaGzullsBTS/
6M3QqjVpafe9hAazxoW1RuhdG51c/hc2ey02mZm4ELHL2n8E+jAnrKcre38hCQpt
8i2ILSP8aAl6rGcDf88O6AI6H2iJ4MeF7Om6hz2vJyFUN57mSr1B/NFflQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGLlobVf6KCSmQz84JauGg97tLzRMB8GA1UdIwQY
MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt
NWQ1NjA5ODljZjdiLzEvWXVXaHRWX29vSktaRFB6Z2xxNGFEM3Uwdk5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi
LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU/ULMA0G
CSqGSIb3DQEBCwUAA4IBAQAEUIRaGs7Z+2c6RuC/sDwljTpx1yelBedOnS/u/arN
DBWgkk/URDCPGZyFfm6FcNXG20I/KKS7fXpd9YcWVRT70YfCrOfbFeEo5m5hDWAM
ThnNzulAlQWbQltYbGAO2ml8ndGCP+wWeNp6/i7HSrtPXM21B+j56WT6z8T/ipNx
7zrxUfGQMAbwMDPYQTgXlMxg3UcpbspIEGrzbuaVTcYfRgNuwUCGQVMq8ubeps4C
Q5BV9daQfy+xkQKk+wfVNxrElQ2O2Of5Xl7izD9kmmjos2tKzlu+SypETPSdApgG
kduzrGcxeMpQ6Qd15UGf5pTjT79APXeW8Dd9YScWdspz
-----END CERTIFICATE-----
Generated at Sat Jul 18 07:09:16 2026 by rpki-client