Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/rJQ5FIbm5qUex0MKUdpTnJvh4kg.roa
File: rJQ5FIbm5qUex0MKUdpTnJvh4kg.roa (raw, json)
Hash identifier: lfELAL4WOgHBI7o4KofuPC1ytKbqFlANhQImQDJ9qLM=
Subject key identifier: AC:94:39:14:86:E6:E6:A5:1E:C7:43:0A:51:DA:53:9C:9B:E1:E2:48
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A186FECC2415C6DD302913C22EF8D78646
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/rJQ5FIbm5qUex0MKUdpTnJvh4kg.roa
Signing time: Thu 29 Oct 2026 09:30:07 +0000
ROA not before: Thu 29 Oct 2026 09:30:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 83.245.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:fe:cc:24:15:c6:dd:30:29:13:c2:2e:f8:d7:86:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Oct 29 09:30:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac94391486e6e6a51ec7430a51da539c9be1e248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:28:2b:59:8d:88:f8:aa:ed:88:23:4d:83:
53:fb:49:5a:7a:29:1e:da:17:ce:a3:4f:66:7c:b7:
a0:93:5d:ba:bd:e7:30:26:cf:f7:7a:ce:bd:44:27:
14:14:db:f6:97:79:f6:c9:f3:91:92:c9:15:e7:e4:
38:18:66:b2:a0:52:5a:e2:53:54:48:a5:ad:40:75:
a8:5d:d5:c7:15:4f:5b:85:27:aa:dc:a3:5f:ee:58:
b0:6d:a9:44:35:12:65:a1:f7:9e:40:c5:5d:07:9d:
22:a0:95:db:0d:4c:f4:86:55:12:45:cb:70:39:aa:
10:8e:10:34:9e:6a:c6:6e:63:f5:8f:fe:ea:80:02:
f4:08:bb:d9:a2:d9:11:4d:cd:2e:89:4f:93:46:91:
47:4c:4b:a0:5b:d7:4d:94:f8:74:fb:12:ef:db:b2:
aa:b8:24:ed:d5:20:b4:46:3c:54:e1:ca:7f:74:95:
ee:31:3a:d7:5f:5c:32:69:b0:73:2a:b7:a3:56:db:
06:3a:03:1b:42:d8:21:aa:16:ba:f5:52:d3:ed:aa:
6d:04:69:71:55:ef:1f:e2:65:a5:c2:f9:d3:0c:fc:
b6:4d:9a:e6:11:9c:e4:60:b1:08:dd:b4:a5:cd:d7:
b9:a9:9c:06:63:8f:35:12:47:75:fa:d3:ae:4d:3e:
fa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:94:39:14:86:E6:E6:A5:1E:C7:43:0A:51:DA:53:9C:9B:E1:E2:48
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/rJQ5FIbm5qUex0MKUdpTnJvh4kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.45.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b8:e9:e1:5f:20:8a:7b:88:a0:91:1f:6c:e9:59:6f:1b:04:
0d:ba:c5:be:16:0a:c9:35:55:94:e2:1e:a2:2e:ce:5c:18:24:
7c:86:6f:4c:8e:d7:22:c6:db:f7:d3:3f:d4:b6:d2:ab:02:34:
5a:44:07:bc:6c:22:91:e3:31:84:af:dd:25:d0:c1:d0:31:a1:
cb:b1:57:00:0e:40:f5:42:f6:9a:26:09:06:1b:5e:98:9a:5d:
63:3c:4b:c7:fb:18:f7:9a:ed:d9:e6:8c:55:e5:43:0a:f4:4a:
a3:8c:68:7a:fa:e2:4a:54:b2:ea:f7:01:ce:5f:2a:78:9f:2f:
64:50:25:71:41:e0:fb:a1:9f:99:cc:fb:00:5c:44:48:7c:b7:
c8:2e:73:8d:ea:b3:99:a4:30:62:4c:1f:c8:09:f0:e3:a9:00:
df:3f:fc:30:7f:06:a6:82:15:c5:fb:42:0d:76:6c:76:0f:f9:
31:cf:22:de:47:81:a5:1f:96:74:b1:9f:f8:d0:0c:27:07:40:
59:d2:0f:d6:ba:66:d3:ed:0a:11:99:33:5b:3f:e0:9a:a5:15:
2b:b6:c3:eb:8f:81:3b:97:e4:c4:37:97:50:0c:f0:96:95:f3:
cd:55:ea:96:d5:07:5e:ed:64:d1:8c:10:aa:94:de:24:02:17:
86:8d:05:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:44:45 2026 by rpki-client