Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/yrsQIiYq3vWJ2zDNMqv02WW7Mu0.roa
File: yrsQIiYq3vWJ2zDNMqv02WW7Mu0.roa (raw, json)
Hash identifier: onh8r8GX9eyMaVVL/j7wJ/TZ4o2MwLEwSiePXCfui5k=
Subject key identifier: CA:BB:10:22:26:2A:DE:F5:89:DB:30:CD:32:AB:F4:D9:65:BB:32:ED
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0F1A1AEB8AFDF6810629961ED9C8E98D5
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/yrsQIiYq3vWJ2zDNMqv02WW7Mu0.roa
Signing time: Wed 30 Sep 2026 09:25:00 +0000
ROA not before: Wed 30 Sep 2026 09:25:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 83.245.13.0/24 maxlen: 24
83.245.66.0/24 maxlen: 24
83.245.67.0/24 maxlen: 24
89.167.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 07:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:a1:ae:b8:af:df:68:10:62:99:61:ed:9c:8e:98:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 30 09:25:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cabb1022262adef589db30cd32abf4d965bb32ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:29:6d:5b:3a:c8:c7:7a:15:19:99:1a:eb:81:
7d:ff:77:57:11:93:55:81:24:70:74:27:1e:de:25:
04:8a:c6:74:65:22:30:cd:eb:db:50:62:d5:d7:20:
f6:15:9c:94:5e:43:94:99:02:f5:49:cf:83:7a:48:
3e:ee:30:a7:24:68:13:2a:35:f4:c8:27:48:87:c6:
e4:5a:c2:32:b5:35:17:79:35:0c:e3:6b:1d:42:14:
35:03:1f:db:8e:08:83:c1:5f:96:2d:ab:db:c0:ac:
70:ec:21:ad:c2:f1:60:23:f5:a5:6e:5e:28:20:f9:
34:37:0f:d7:5b:20:21:01:2e:c4:f3:db:68:a9:72:
72:43:8e:7a:ab:b8:39:d3:55:19:be:6a:df:6d:84:
e1:a9:86:b4:f1:a8:6e:df:e8:11:8e:55:b1:fa:4d:
75:19:62:2c:e2:1b:83:30:c5:b9:e8:43:bf:05:78:
a4:a5:b9:71:a3:84:8f:88:9b:f6:e9:93:84:fb:f7:
37:6b:04:f1:48:de:d2:48:49:71:25:39:d3:91:7e:
4a:e9:bc:72:d1:2d:74:33:28:19:e1:a0:6c:cb:0b:
b5:ae:a3:73:2c:bf:62:28:e9:29:e1:b5:42:e2:78:
a5:ac:57:a0:d0:0b:b4:3a:14:0a:93:39:c9:7b:67:
51:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BB:10:22:26:2A:DE:F5:89:DB:30:CD:32:AB:F4:D9:65:BB:32:ED
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/yrsQIiYq3vWJ2zDNMqv02WW7Mu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.13.0/24
83.245.66.0/23
89.167.240.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:81:57:11:6b:64:f1:42:23:ca:df:6d:48:e7:39:89:48:e8:
fa:5b:49:87:21:6b:fb:2e:71:20:d8:87:e3:64:fc:3f:dc:48:
b2:ed:94:03:49:16:41:76:86:a4:5e:c4:0f:fb:8f:86:f1:e7:
9f:62:5f:7b:c1:b9:32:db:60:07:20:c4:21:07:0b:63:7a:29:
1d:49:cb:2d:73:e5:29:1f:3d:d7:75:0a:b7:3b:f3:98:69:f0:
fc:73:41:cc:9e:94:0f:c0:32:b8:d7:33:08:d4:75:c5:77:6c:
02:d2:b7:2c:b2:75:ca:5d:b8:64:1d:c5:b7:0f:63:22:3e:aa:
6e:06:a1:f2:c6:26:f2:e7:66:38:9b:85:76:86:89:f6:17:12:
7c:08:2f:7c:39:94:25:8f:d2:f1:26:21:8e:19:c6:93:f9:62:
48:d2:2c:e8:43:cd:57:b0:63:2d:44:0f:c8:26:cd:00:44:34:
78:9b:d3:f8:8f:0d:68:c6:92:09:de:33:eb:be:b4:6b:c2:20:
41:73:a0:a3:54:91:db:8f:8f:f2:bd:73:e8:a5:c3:45:9e:d4:
73:62:ef:44:41:c8:70:7c:ad:f3:91:27:e3:91:29:a2:0b:3e:
bc:13:4a:6f:7f:92:7c:46:e3:8f:c6:d3:48:9c:82:25:bb:d4:
b3:5b:f6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:11:04 2026 by rpki-client