Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/rxGu8UFB67FVnSCIgLfiEaYI_Es.roa
File: rxGu8UFB67FVnSCIgLfiEaYI_Es.roa (raw, json)
Hash identifier: YnawNXaVIhK1sVyfr6VnldX7yq5uGYBnShW1Lbor1fg=
Subject key identifier: AF:11:AE:F1:41:41:EB:B1:55:9D:20:88:80:B7:E2:11:A6:08:FC:4B
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A11029529F4B06695FC58F9CCE5800DF5C
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/rxGu8UFB67FVnSCIgLfiEaYI_Es.roa
Signing time: Tue 06 Oct 2026 07:41:45 +0000
ROA not before: Tue 06 Oct 2026 07:41:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 83.245.108.0/24 maxlen: 24
89.167.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:29:52:9f:4b:06:69:5f:c5:8f:9c:ce:58:00:df:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Oct 6 07:41:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af11aef14141ebb1559d208880b7e211a608fc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4a:5c:c8:a0:8b:50:be:ff:11:80:35:73:b2:
9e:b4:56:ac:f9:2b:6e:f0:e3:e3:c0:03:b2:88:19:
77:ab:e5:66:cd:65:f3:68:e0:de:e4:6d:25:f4:65:
d7:37:09:d2:7a:2f:3f:12:23:80:bd:e3:3c:23:0f:
cf:f2:d5:c8:73:fb:f6:8d:84:5f:1d:e8:61:05:2f:
22:be:4a:86:05:97:d2:1a:76:0b:01:c6:97:8c:ba:
56:4b:0e:14:36:f7:a9:c1:91:2c:b7:93:56:8a:4d:
f2:9d:6d:31:ef:c5:4f:e1:c8:bc:3c:fa:f9:0f:16:
20:7b:5c:8c:8e:8e:3c:d7:5d:99:bf:bf:a9:62:1f:
16:e8:30:58:d7:f2:4a:71:31:50:e2:a6:43:8e:48:
a8:33:5a:b4:ee:44:f2:15:44:df:46:3a:fc:71:fc:
de:e7:32:f5:a6:7e:3f:e7:67:6f:1d:66:d5:c5:a5:
96:98:70:45:72:3e:83:d6:f2:d6:ef:e9:df:6a:08:
2d:01:46:e6:4a:2a:95:bf:2b:5d:09:52:f6:46:82:
7c:7a:d8:00:50:c1:20:f7:49:53:02:7e:ef:d7:eb:
40:19:f5:b6:d9:59:1d:42:97:bb:c6:87:6b:09:1f:
a2:96:85:7f:79:a2:42:3c:14:5d:24:b0:78:52:ba:
1a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:11:AE:F1:41:41:EB:B1:55:9D:20:88:80:B7:E2:11:A6:08:FC:4B
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/rxGu8UFB67FVnSCIgLfiEaYI_Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.108.0/24
89.167.133.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e8:eb:52:7c:5c:9d:f8:a6:7a:94:f0:eb:5c:bb:06:97:35:
4a:46:00:5b:b9:68:d8:33:4e:73:6a:61:f4:fe:9e:48:3c:27:
d9:e1:b3:a0:89:47:df:5b:88:64:b5:f3:81:4c:91:32:fe:99:
1f:f4:3f:16:71:cf:b5:ce:a8:12:ee:b5:f3:e1:82:34:05:98:
30:e0:82:e3:1e:ca:43:e4:e6:bf:cd:41:c8:50:67:ed:f6:99:
23:e0:b0:86:67:45:82:a9:fd:4d:dc:11:06:a7:a0:22:8d:3e:
bc:75:47:fc:85:cd:d5:2c:51:d4:99:24:0a:0d:06:36:f4:90:
84:2a:d4:24:02:ad:71:f4:18:c1:d2:eb:95:50:1e:2b:ca:03:
e9:d1:d0:9c:27:48:db:34:c3:16:29:bd:d4:12:52:56:1f:29:
77:28:7e:29:ab:69:62:6a:f1:cd:c9:33:c3:8e:97:b4:70:44:
92:70:62:07:8b:66:7b:a6:f5:56:0b:a1:8f:4c:5c:6e:fb:63:
ea:68:62:91:37:60:7a:89:0d:30:95:c7:3f:c3:18:f7:f2:33:
30:45:17:6f:f9:02:5f:a1:d1:30:49:43:6b:7c:1c:46:6e:bb:
c7:b2:87:ad:8c:7b:13:56:19:f0:ca:48:2f:82:88:74:fc:44:
07:9c:a2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:50:07 2026 by rpki-client