Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/CrXZL2oVpITc9JpydyxZx8NVQtc.roa
File: CrXZL2oVpITc9JpydyxZx8NVQtc.roa (raw, json)
Hash identifier: 6AI6gTUvoIZn3sb4Po+vih/UMXkkecK8jH0MBSkPrMI=
Subject key identifier: 0A:B5:D9:2F:6A:15:A4:84:DC:F4:9A:72:77:2C:59:C7:C3:55:42:D7
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019FC60EA2DE309A7BF0244D2A182B8FB299
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/CrXZL2oVpITc9JpydyxZx8NVQtc.roa
Signing time: Mon 03 Aug 2026 05:17:55 +0000
ROA not before: Mon 03 Aug 2026 05:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139642
IP address blocks: 83.98.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 10:41:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:0e:a2:de:30:9a:7b:f0:24:4d:2a:18:2b:8f:b2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Aug 3 05:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ab5d92f6a15a484dcf49a72772c59c7c35542d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:7e:eb:4a:4b:2a:5d:ca:39:ce:b1:97:98:
36:37:42:32:fa:42:32:73:6f:a5:66:81:56:aa:1a:
f4:b5:5c:a2:8e:03:e0:24:37:d2:5a:76:f1:0a:24:
c6:66:6b:9b:4f:3f:46:74:56:67:95:e6:07:c9:b3:
31:8a:ca:e1:a7:db:aa:18:d0:a4:9b:56:4b:b4:f6:
dc:7d:0e:da:83:eb:a1:f8:ff:3d:c8:d6:22:5f:4f:
e6:ad:28:a5:b9:a7:be:b3:06:44:b6:bb:a5:8d:67:
4b:a7:64:c3:7d:75:a9:38:bc:f6:8e:70:5f:6a:20:
91:79:7e:5a:c8:ab:8f:8f:a5:0f:18:4a:17:30:45:
65:ea:12:7f:97:ee:58:d9:46:b8:c0:45:fc:aa:c3:
67:dc:28:1a:12:53:de:38:e2:ac:90:c1:9d:87:a1:
c9:6e:66:40:55:99:5a:1e:bc:5f:f1:83:8d:a5:f0:
59:aa:ec:84:33:24:b7:f9:b5:2b:b7:58:56:4d:5c:
25:57:b0:b3:63:a2:d9:38:1e:09:73:42:71:e2:19:
31:20:f3:36:2f:47:2f:6c:96:48:46:a0:a4:7c:06:
b6:8f:92:9a:25:1f:07:6f:ec:c3:18:39:44:18:72:
99:10:35:26:2f:da:0e:cb:92:c0:3a:73:70:58:6c:
21:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B5:D9:2F:6A:15:A4:84:DC:F4:9A:72:77:2C:59:C7:C3:55:42:D7
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/CrXZL2oVpITc9JpydyxZx8NVQtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.192.0/24
Signature Algorithm: sha256WithRSAEncryption
24:24:92:2c:7e:3b:59:8a:eb:de:5e:22:2c:fd:38:c2:8e:cb:
cf:b9:82:2e:c1:58:48:2f:e0:8f:d4:b9:2e:d2:19:c4:73:1e:
fe:85:30:36:59:df:03:9e:e3:da:ab:74:7d:06:8f:c0:33:ba:
41:d5:1f:34:f9:6d:08:25:26:39:52:f2:f0:2c:2a:4a:15:12:
21:0a:ac:ca:d5:4d:19:c9:1d:64:28:76:5b:15:41:7a:27:d9:
50:50:b9:5d:7e:70:48:ed:d8:02:bd:dc:c5:8a:0a:21:90:c3:
c9:e6:da:0d:61:d2:fe:7f:6e:79:d2:14:f7:9f:e9:5c:01:08:
74:83:76:6e:3c:a3:be:ff:bc:6f:ce:4e:67:c1:e9:17:10:39:
df:7a:32:5e:64:00:3c:f2:d8:71:45:20:49:d5:a7:99:ba:c2:
64:fc:0d:51:ee:4d:9d:1a:5c:f6:79:eb:fe:96:32:46:e0:6e:
ac:f6:91:ab:1b:ff:95:37:95:1a:5e:c2:86:08:4d:f5:74:bc:
86:34:1e:0e:e8:1b:4c:5b:d8:4d:34:4f:ed:4c:25:8f:49:55:
39:98:c8:2a:3c:8d:eb:07:e8:5c:b5:25:d9:6b:9c:73:f3:f1:
b7:20:0c:7d:c9:58:09:47:01:2b:74:5a:bf:ce:b2:06:1a:cb:
3b:f6:3d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 15:11:57 2026 by rpki-client