Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/xnLqP066QreDEuGoe4aceiuQnok.roa
File: xnLqP066QreDEuGoe4aceiuQnok.roa (raw, json)
Hash identifier: W2BBOQCtGCSZiC505GNr1hWCxfkVPLs9xYD8nvPcDSs=
Subject key identifier: C6:72:EA:3F:4E:BA:42:B7:83:12:E1:A8:7B:86:9C:7A:2B:90:9E:89
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0A97403B78CAA06EF83F257B678484C78
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/xnLqP066QreDEuGoe4aceiuQnok.roa
Signing time: Wed 16 Sep 2026 09:02:27 +0000
ROA not before: Wed 16 Sep 2026 09:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219100
IP address blocks: 83.245.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:74:03:b7:8c:aa:06:ef:83:f2:57:b6:78:48:4c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 16 09:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c672ea3f4eba42b78312e1a87b869c7a2b909e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a2:7b:a1:e0:48:97:67:bf:3b:8a:3b:0d:c4:
34:e7:08:c5:fa:df:bc:f4:14:13:59:ac:b7:2a:bd:
de:9b:76:42:b6:c2:85:30:f2:0e:6b:81:9a:06:ac:
58:19:9d:87:15:df:90:c8:26:61:87:8e:9d:d6:4b:
ce:08:6f:9c:21:8b:49:c9:a9:95:48:b1:3c:ed:61:
b1:3f:55:64:85:a2:6c:6f:91:f3:14:2d:1f:76:1a:
41:89:a4:03:6b:3e:85:b4:f6:b0:18:0d:84:20:c2:
0a:3d:04:3e:ab:7e:8c:52:06:e9:eb:27:e5:3f:10:
96:2f:34:94:a5:23:db:d4:e7:59:81:99:f2:6d:8e:
5c:57:8d:e0:b1:71:05:25:19:56:9d:d9:9d:e1:af:
20:0d:fe:6a:e1:96:3e:83:bc:e7:a5:7f:1c:c4:90:
a4:c6:91:fb:3e:5f:9c:e6:6a:35:c4:90:dc:55:2e:
2c:db:58:d3:b0:83:f6:0b:fc:e9:73:39:71:73:b7:
a5:ea:a3:db:31:7f:80:59:03:84:c2:b0:e4:bd:be:
0c:e2:58:15:1a:c7:69:7d:e6:88:dc:f4:66:36:58:
a2:89:ee:53:5f:09:35:ba:55:f8:89:62:40:50:d2:
64:8d:f4:4b:61:c5:82:2e:17:30:e4:69:e4:16:ac:
23:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:72:EA:3F:4E:BA:42:B7:83:12:E1:A8:7B:86:9C:7A:2B:90:9E:89
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/xnLqP066QreDEuGoe4aceiuQnok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.40.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ab:aa:46:99:c1:da:d9:95:ee:88:d6:04:bb:bd:0c:e9:d6:
cb:ef:a0:5a:24:f8:f6:87:68:71:3b:65:52:57:4c:1f:32:0d:
8c:92:52:f0:c0:6f:a3:54:48:8e:eb:e1:65:89:5d:0d:5b:85:
b5:a3:72:f0:fa:62:8e:a1:99:b4:26:d8:a0:ec:91:c2:40:e8:
aa:13:34:90:58:8b:40:f6:20:d6:28:ac:f6:09:a2:70:f1:72:
cc:98:b7:19:c8:8b:3a:d7:16:8a:73:d4:0b:3b:ee:66:2f:35:
13:2f:b3:4f:81:c9:65:8e:69:c9:16:6e:46:b4:0c:60:ea:0e:
8c:d1:7f:cd:cb:a5:5f:7d:3b:48:6f:b4:7b:09:95:d8:5b:73:
a0:f3:5c:d3:a4:b3:29:27:13:61:10:ad:ef:6e:db:cb:2b:8f:
93:91:ad:61:b5:b9:44:d6:0b:c3:1b:9e:cf:7d:2d:2c:f7:d7:
ea:c8:28:0b:ab:a4:b4:60:3f:92:02:85:a7:0a:5e:09:2c:ef:
e7:ab:7e:01:4a:5e:6b:44:46:9f:83:29:bd:45:4a:28:df:53:
08:02:ba:78:e7:ae:5d:12:32:96:2f:af:ce:b9:10:80:2e:15:
8e:73:3c:62:4a:83:66:3b:01:b0:a3:b4:1f:2d:a4:57:9a:4f:
d2:a9:44:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:28:25 2026 by rpki-client