Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/83-Cr4HPb0cd-Cr9YyiBPKFOBbo.roa
File: 83-Cr4HPb0cd-Cr9YyiBPKFOBbo.roa (raw, json)
Hash identifier: +3Il+y5vpogg/q58N+CnyI3tfn6ffAqaZR+BK/PUJYI=
Subject key identifier: F3:7F:82:AF:81:CF:6F:47:1D:F8:2A:FD:63:28:81:3C:A1:4E:05:BA
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F45BD4EF2A4E8ACBD8442DB42048EEC91
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/83-Cr4HPb0cd-Cr9YyiBPKFOBbo.roa
Signing time: Thu 09 Jul 2026 07:17:42 +0000
ROA not before: Thu 09 Jul 2026 07:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 213.214.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:bd:4e:f2:a4:e8:ac:bd:84:42:db:42:04:8e:ec:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 9 07:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f37f82af81cf6f471df82afd6328813ca14e05ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:fe:22:29:97:1c:5c:b5:5b:20:44:cf:54:
6d:50:94:d9:ba:16:25:4a:b1:c2:b1:ff:38:44:7f:
4b:70:2d:65:c2:4d:07:1f:fd:20:4b:df:bf:d2:07:
5f:c8:5b:8d:8a:23:63:4e:20:f5:41:ec:ce:20:9d:
bc:36:14:10:ee:30:c5:7c:dc:76:65:0d:7a:91:87:
67:6a:29:69:0e:ed:08:ad:3d:ab:54:04:06:99:2e:
ac:12:03:9f:ce:93:c6:bc:c8:de:91:73:a9:06:dc:
23:b9:80:6a:2f:51:97:76:ca:92:7b:d0:cc:01:bf:
ae:f6:ad:5e:12:99:29:99:7e:f8:88:2e:22:65:bd:
1a:04:2b:66:9f:fe:f2:80:90:a5:5e:59:19:fe:e0:
da:0c:cb:89:f8:41:65:a2:87:c5:ef:86:a6:8c:45:
b4:4c:15:f6:e1:1e:3b:46:eb:4f:85:d8:96:97:6a:
66:0c:1f:b9:e5:16:da:be:70:5a:50:a9:7e:00:35:
c4:f4:bb:71:a1:a6:d9:2a:00:2c:29:8e:55:90:45:
76:59:db:06:ae:a0:88:1c:5a:53:03:bc:13:dd:3a:
74:99:9b:50:da:76:66:a5:5b:f1:9d:42:39:55:98:
9b:23:59:27:79:ee:c1:cf:8d:13:8d:68:85:5d:56:
3c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7F:82:AF:81:CF:6F:47:1D:F8:2A:FD:63:28:81:3C:A1:4E:05:BA
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/83-Cr4HPb0cd-Cr9YyiBPKFOBbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.214.104.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:70:6e:02:d7:5a:ec:91:1f:32:95:83:d5:78:d6:f4:74:6d:
93:de:af:3e:02:93:f0:09:d6:b2:0a:24:e1:4a:ab:a8:6b:bc:
70:05:ff:bb:c5:2e:f4:c9:cc:21:e3:36:ac:61:7a:45:a5:3a:
87:ac:81:7a:3e:34:55:e2:df:57:4e:47:29:22:d1:f7:2a:5a:
7e:db:d5:77:03:79:14:3c:18:f3:a6:00:87:df:99:e6:e0:14:
79:7e:7b:13:f7:61:80:72:79:93:1b:27:15:86:3b:af:e2:55:
9b:7c:bc:af:cd:05:34:b1:72:38:8a:02:73:6b:1b:b7:d9:bd:
38:2e:36:a2:3e:ef:f8:2b:5b:73:be:8a:5f:e8:ac:98:69:ee:
28:5c:2b:52:3e:5d:67:39:6f:fe:ca:29:7a:4a:a0:47:2c:14:
7c:f4:10:a3:90:4b:bc:89:05:d8:4c:d3:be:b1:08:73:92:f5:
1d:b9:ad:d8:16:f3:a4:b1:d8:4e:da:33:50:97:7a:a3:c9:49:
13:73:41:93:f0:52:cd:00:92:04:c4:36:20:49:6c:5a:43:f8:
9c:ff:19:f1:ef:5a:76:f6:14:0a:87:20:e1:2e:7f:8b:27:48:
9c:0c:78:ad:d0:29:4d:c1:d7:a6:3c:2f:89:6c:19:ab:62:62:
d5:2d:7f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:32:58 2026 by rpki-client