Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/hlXSn0D2-9zpwImKJrF7-rWAFRI.roa
File: hlXSn0D2-9zpwImKJrF7-rWAFRI.roa (raw, json)
Hash identifier: 7uKiPn6tifkvBVVICaZyIXbH4gHr99kS5x8s6ij10Fg=
Subject key identifier: 86:55:D2:9F:40:F6:FB:DC:E9:C0:89:8A:26:B1:7B:FA:B5:80:15:12
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019FD1C8A7A055954F7277FA298CD4861D84
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/hlXSn0D2-9zpwImKJrF7-rWAFRI.roa
Signing time: Wed 05 Aug 2026 11:56:55 +0000
ROA not before: Wed 05 Aug 2026 11:56:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 83.245.2.0/24 maxlen: 24
83.245.14.0/24 maxlen: 24
83.245.15.0/24 maxlen: 24
83.245.41.0/24 maxlen: 24
83.245.43.0/24 maxlen: 24
83.245.46.0/24 maxlen: 24
83.245.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:c8:a7:a0:55:95:4f:72:77:fa:29:8c:d4:86:1d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Aug 5 11:56:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8655d29f40f6fbdce9c0898a26b17bfab5801512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:85:79:85:7a:b3:67:db:b0:3d:9f:ef:cb:
e6:5f:f5:a7:70:b8:35:a6:2b:0f:52:b2:59:b8:88:
8b:aa:23:ac:dc:e4:5e:ec:be:01:93:eb:f6:2d:df:
0e:f7:85:9a:5a:99:91:44:8a:ee:73:af:21:55:40:
52:b7:d3:b3:22:80:bb:68:3a:15:04:f2:77:0a:d2:
55:0f:04:fe:28:a2:c4:40:1f:87:1c:97:3f:77:fb:
36:7d:b7:58:86:44:2a:16:1a:bf:83:5b:c8:2a:d9:
f9:f8:02:6f:a2:22:6e:64:8c:dc:ee:e0:c8:a1:35:
1a:d9:13:80:26:a9:8b:6d:9d:b1:48:f9:f6:df:db:
4a:4e:d2:39:fb:ed:ae:4d:2c:b9:75:c2:60:13:bb:
6b:20:48:e3:fc:1b:d0:08:27:e3:39:a1:fe:a7:f0:
67:cf:8e:3b:b7:8f:14:1b:2e:90:e1:32:0d:d4:fa:
4b:f8:dc:bc:d8:d0:a5:3b:4c:9b:6b:47:db:7a:ea:
f3:c0:21:7a:70:80:ae:46:4a:ba:fb:7f:1e:6e:32:
11:59:29:be:aa:b6:d2:94:b4:82:48:66:13:0e:4c:
bb:fc:03:f0:7c:d3:99:05:32:55:56:47:49:9f:19:
c0:b1:48:93:3e:8d:90:77:50:70:b4:43:49:39:f7:
39:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:55:D2:9F:40:F6:FB:DC:E9:C0:89:8A:26:B1:7B:FA:B5:80:15:12
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/hlXSn0D2-9zpwImKJrF7-rWAFRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.2.0/24
83.245.14.0/23
83.245.41.0/24
83.245.43.0/24
83.245.46.0/24
83.245.108.0/24
Signature Algorithm: sha256WithRSAEncryption
55:b7:ba:7a:cc:61:d5:7b:d7:06:c2:6c:fb:60:37:66:c3:98:
1d:d2:64:5a:4f:e1:da:77:fb:43:10:9e:95:b6:8e:6f:0b:07:
a3:da:8d:9c:29:35:d1:12:8f:82:97:24:f6:ab:8b:78:ed:2a:
5b:12:58:98:de:55:b3:12:65:b1:d5:3b:65:d9:09:dd:e3:c6:
e9:c3:b2:61:8c:9b:88:01:c9:a8:2e:34:54:1f:1e:cc:dc:a7:
54:14:8e:32:1e:08:46:55:32:ca:a8:c2:85:41:25:ce:ae:f5:
4f:ac:0b:25:ee:17:3c:b6:ee:44:b0:4c:6f:d2:bb:0e:20:d8:
32:5d:e1:4b:e6:58:51:d2:af:51:c8:2f:24:33:f3:03:cf:79:
11:d9:3e:64:d1:2f:19:e8:d7:84:0b:42:a8:02:18:58:63:de:
8f:fe:d8:68:57:15:2e:ee:d1:e9:5c:98:72:cf:a3:36:db:68:
42:85:2b:73:60:2d:54:7f:f2:98:16:7e:aa:2e:c8:c6:ea:de:
8e:28:b7:f8:70:d0:3d:ff:21:0d:d8:dc:e3:ae:95:cf:3e:b8:
ba:cc:70:ed:25:f7:86:ec:5e:e2:21:8a:1f:9c:8a:82:37:ea:
e8:36:e8:3f:92:d5:17:be:ac:ca:35:ce:64:ce:44:27:54:d5:
35:80:03:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:26:37 2026 by rpki-client