Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/zZgAiVF6YAvHOQAzpqnZj8pf21I.roa
File: zZgAiVF6YAvHOQAzpqnZj8pf21I.roa (raw, json)
Hash identifier: P6o0oNH6EXIbZ3NMCQ5NQ9rFVHOr+ieAKEm7U8TSUGo=
Subject key identifier: CD:98:00:89:51:7A:60:0B:C7:39:00:33:A6:A9:D9:8F:CA:5F:DB:52
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A03CAD576840C1654048F324A4DEAE90DF
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/zZgAiVF6YAvHOQAzpqnZj8pf21I.roa
Signing time: Wed 26 Aug 2026 06:06:28 +0000
ROA not before: Wed 26 Aug 2026 06:06:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 83.245.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:ad:57:68:40:c1:65:40:48:f3:24:a4:de:ae:90:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Aug 26 06:06:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd980089517a600bc7390033a6a9d98fca5fdb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f8:4e:e8:cf:2c:e3:40:40:50:df:c3:f5:98:
6c:66:b6:1c:60:aa:b3:18:a4:79:aa:2f:6d:41:d2:
03:d9:a6:b4:ee:0c:8f:a8:04:8a:ca:e5:71:f3:24:
00:42:10:a7:cb:9d:29:95:9e:6d:98:9b:1d:f9:3d:
13:af:93:32:51:0b:28:05:1f:6c:b2:5d:39:08:78:
3e:6e:ba:3f:a1:78:34:c6:a4:39:ce:f5:e4:be:89:
84:11:c5:db:6a:0a:d7:a5:bc:5a:c7:1c:12:75:48:
fe:41:cc:93:23:04:54:2e:9b:65:57:5b:96:59:d2:
b0:30:5d:4b:ad:89:31:c8:2a:03:7a:0e:e2:ea:2c:
8b:1e:8c:73:06:6e:36:30:be:b2:a4:e7:73:37:89:
4e:2b:ea:eb:7a:5a:8b:b5:a4:af:7d:5f:28:16:89:
fe:b3:66:9e:8e:c7:86:63:ff:61:a6:1b:91:db:cd:
24:31:5a:dc:01:4c:34:e6:5f:a9:5e:6c:c6:a7:4e:
bc:e9:b6:20:56:dc:7d:5d:64:9d:82:8d:03:fd:d4:
7f:6b:f7:2f:4b:3a:8b:65:9c:8a:14:b4:b1:1e:46:
ab:73:10:74:fc:13:e8:60:53:09:57:30:ab:b9:3f:
cd:bf:ea:15:82:2a:5f:e2:50:e2:ec:56:d8:f9:c0:
79:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:98:00:89:51:7A:60:0B:C7:39:00:33:A6:A9:D9:8F:CA:5F:DB:52
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/zZgAiVF6YAvHOQAzpqnZj8pf21I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.5.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:3a:2d:c6:f2:1e:96:ea:56:2d:1e:d1:5b:8f:93:8d:be:6d:
0d:3e:94:08:a0:22:a2:bd:c3:95:44:62:dd:7e:91:0f:34:b6:
b4:3a:74:10:e8:44:a6:fa:7b:d3:ee:b7:ae:9e:29:72:97:78:
69:2e:a1:34:cd:03:90:e6:bc:84:3a:0c:e1:3b:e2:50:be:05:
f7:71:31:d3:24:8b:79:f7:86:8f:d8:4c:39:29:8b:65:e4:92:
84:ab:82:05:78:06:2b:53:b0:07:22:e7:e2:20:e1:fe:3e:9a:
de:ae:21:73:ff:6f:6c:c0:40:9c:7e:49:3a:c0:ba:53:1b:08:
bd:54:e4:a5:3a:36:50:0d:b2:64:20:3f:04:9c:a3:8c:8e:76:
f6:7b:79:93:f9:ef:7b:61:af:b8:f3:c2:0b:95:75:99:9a:d4:
9f:17:dd:34:5c:e5:59:da:e6:a2:1d:c6:36:32:6b:6c:61:c6:
53:84:e5:5b:25:58:2b:ec:22:d0:10:89:c3:f1:01:44:2d:43:
55:c0:89:be:41:bd:c0:cd:0d:47:82:7a:b9:18:7d:ec:ad:d1:
bf:1d:80:46:ef:76:b1:3a:0d:3a:b2:ae:d2:12:57:d8:25:07:
33:67:7b:6a:8b:b8:8b:de:ff:a2:77:3b:b4:bd:48:ab:7d:bd:
58:18:40:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:30 2026 by rpki-client