Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/fNVqF5yDUil_SWA2BYZlXdeKNdo.roa
File: fNVqF5yDUil_SWA2BYZlXdeKNdo.roa (raw, json)
Hash identifier: HPbQ50A50C4FKQ88DRsMXuci3WFPEbfYN9SMITi22CQ=
Subject key identifier: 7C:D5:6A:17:9C:83:52:29:7F:49:60:36:05:86:65:5D:D7:8A:35:DA
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019F4B37015BEA0B7E1C5C54B0A9D2DAEB82
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/fNVqF5yDUil_SWA2BYZlXdeKNdo.roa
Signing time: Fri 10 Jul 2026 08:48:43 +0000
ROA not before: Fri 10 Jul 2026 08:48:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 83.245.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:37:01:5b:ea:0b:7e:1c:5c:54:b0:a9:d2:da:eb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jul 10 08:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cd56a179c8352297f4960360586655dd78a35da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:48:04:87:74:44:f4:3e:f4:01:c8:75:c6:35:
d8:37:6e:be:c1:2e:ad:f0:e4:23:33:5e:ec:6f:f2:
f0:4a:4e:c0:5e:14:af:29:73:a0:c6:8a:5f:13:d4:
7d:92:9f:24:b9:22:80:fc:68:c7:3b:dd:37:0b:38:
c6:1c:9e:ee:2b:ea:82:8d:5f:81:1f:be:3c:93:12:
c6:b2:9d:d8:12:c1:bc:a9:c4:19:2b:a2:3f:4e:38:
c3:58:71:41:99:52:16:c9:f4:0b:60:8f:12:52:1c:
f6:45:a9:37:d3:7b:b8:2a:d1:cb:90:65:79:c3:47:
43:14:b7:2e:85:bf:61:5a:02:b2:c9:41:40:d9:4b:
78:aa:b4:62:96:d9:c2:c0:71:df:f2:ea:01:b5:7c:
48:69:2e:bd:70:b5:16:09:e1:66:3f:cc:24:47:0a:
41:22:3f:e6:98:36:36:b0:e6:3e:b4:56:d1:c9:b9:
a7:b2:ff:64:8f:71:8c:62:ad:fa:ee:63:28:48:52:
89:3b:a7:e3:ff:73:a2:83:f7:b3:66:45:c3:f5:e3:
2e:75:f6:83:3e:1b:fa:2f:f2:da:9c:18:37:86:1a:
fc:73:91:70:b1:dd:53:f5:4c:2c:ff:9d:ef:21:f4:
e8:2d:17:6c:54:d2:92:44:91:22:3d:81:4d:14:c6:
a9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D5:6A:17:9C:83:52:29:7F:49:60:36:05:86:65:5D:D7:8A:35:DA
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/fNVqF5yDUil_SWA2BYZlXdeKNdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.11.0/24
Signature Algorithm: sha256WithRSAEncryption
16:05:0c:f4:67:fa:3a:bc:1c:ae:c9:d5:11:bf:8b:3f:20:d1:
03:7b:8a:76:81:ea:43:ea:7d:83:f2:aa:83:36:2d:bc:77:25:
33:02:12:31:d8:22:db:3a:5f:43:a8:3b:e0:74:38:f2:35:89:
7c:72:fa:33:c2:ab:76:b7:5a:6e:d8:7a:e5:14:42:8a:c7:23:
01:b6:60:db:59:6e:77:99:d2:f0:8f:53:4a:dc:43:bd:f2:56:
38:bf:91:89:14:ca:38:16:c6:34:12:01:28:07:2d:64:63:5e:
5b:17:e6:41:2c:a5:29:b0:80:6e:67:43:90:bc:f3:ce:01:54:
0f:76:30:06:2c:09:c0:9c:eb:26:89:a1:a1:30:49:ed:2b:3a:
ce:18:3e:ec:c1:81:85:0b:aa:94:98:ba:ba:1b:58:d0:2e:bf:
49:1c:d9:b6:67:d1:c4:11:74:0c:94:ba:fb:44:85:fc:7b:44:
1f:8c:c6:83:34:da:f7:bc:db:1e:48:6c:b8:66:77:b9:47:92:
b2:55:a1:36:8f:e7:01:95:75:69:a2:9e:6e:e9:42:c8:34:a9:
d2:db:73:09:71:af:f3:f0:e0:00:65:bd:58:ce:94:5d:db:51:
d3:9c:7c:55:84:e4:bb:a0:2b:8b:fb:d5:7a:3e:37:11:8c:89:
1a:b1:fb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:32 2026 by rpki-client