Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/s0P0zrsw80VgnPS3_ivxkr8CHak.roa
File: s0P0zrsw80VgnPS3_ivxkr8CHak.roa (raw, json)
Hash identifier: mmzJAojtZdun1M9hZZOT0W/OKF4bt3iycS8+Z0cqRSI=
Subject key identifier: B3:43:F4:CE:BB:30:F3:45:60:9C:F4:B7:FE:2B:F1:92:BF:02:1D:A9
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A0A517FC0668F697CA44AEAD0CFF361A4B
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/s0P0zrsw80VgnPS3_ivxkr8CHak.roa
Signing time: Tue 15 Sep 2026 12:43:27 +0000
ROA not before: Tue 15 Sep 2026 12:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215817
IP address blocks: 83.98.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 01:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:17:fc:06:68:f6:97:ca:44:ae:ad:0c:ff:36:1a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 15 12:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b343f4cebb30f345609cf4b7fe2bf192bf021da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:a5:e3:bf:08:b4:2a:4f:eb:b6:a6:dc:b6:
97:a4:58:a5:1a:31:e3:e6:45:8c:41:a1:4e:73:5a:
61:07:72:43:2a:93:9a:b0:08:00:2b:20:a0:54:71:
e1:f4:45:03:29:c4:69:7d:7a:d2:1f:35:f2:07:b7:
3c:b2:25:4b:94:74:01:f3:6a:00:cc:d3:6e:53:6a:
11:96:70:bf:1d:62:44:e8:5c:fc:ba:e0:15:d2:2d:
99:37:1e:a4:ed:f3:98:ed:5f:57:45:71:d2:7b:37:
de:5a:e1:80:85:fd:43:97:6c:cf:44:17:a6:91:e6:
59:9e:fd:3d:ea:2a:7a:93:39:35:96:6c:33:4a:32:
87:6e:12:19:f3:19:d3:c6:e9:4d:77:3b:01:ff:d2:
a4:5d:e6:c5:a9:0a:6e:ba:8a:25:2e:8e:3c:7f:a0:
c0:d9:da:9c:75:41:28:df:3a:a8:ae:56:14:6f:60:
c2:4d:a1:bc:13:fc:f6:00:f2:d4:f1:c2:15:8a:a3:
37:90:36:31:dc:01:82:38:32:e4:40:0d:0a:2b:37:
31:0c:28:a8:8a:a1:6d:33:d3:a7:35:87:c4:05:ae:
ab:09:a5:d8:79:bf:0d:07:93:21:6f:76:e0:f6:0f:
38:11:23:be:bd:14:93:cb:2c:ff:48:d9:a2:68:fa:
47:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:43:F4:CE:BB:30:F3:45:60:9C:F4:B7:FE:2B:F1:92:BF:02:1D:A9
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/s0P0zrsw80VgnPS3_ivxkr8CHak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.195.0/24
Signature Algorithm: sha256WithRSAEncryption
04:86:1e:2c:0f:50:23:89:65:d6:11:c2:37:00:2b:94:ee:fd:
16:8a:83:3d:e1:34:c5:10:dd:7b:b3:8e:7b:1e:5e:9d:fa:14:
81:fa:90:bd:46:81:10:6c:6e:52:a7:a1:0b:81:b4:3c:f1:30:
2b:c6:1e:e3:73:99:54:06:41:78:11:0c:93:cb:6d:b3:79:7d:
1f:9d:52:69:b0:22:33:e8:e8:68:89:11:95:ac:1e:51:63:c8:
47:e2:77:c0:76:6f:19:3b:80:50:80:78:47:91:60:ef:83:47:
4b:09:ea:24:43:d3:f4:30:60:a4:8e:71:ef:34:28:d0:b2:ba:
d4:fd:87:57:e9:84:1c:e9:29:1e:d3:a0:9d:df:2c:20:35:8d:
ba:04:28:3f:92:3f:a6:df:01:2b:fa:1a:8b:da:2e:97:c3:84:
55:b7:53:e8:5a:52:37:e7:42:cf:9c:bf:74:61:25:b5:4c:1c:
5c:4d:aa:43:ca:50:dd:ea:80:9c:29:1c:bb:7b:d3:c5:5b:1a:
a8:f5:f0:8c:3f:73:44:b8:be:50:06:5f:23:f0:f3:8a:3f:4b:
ac:b6:24:5d:ab:06:26:99:3b:e7:7f:5e:d2:96:56:44:45:8a:
57:67:9d:98:67:7c:69:99:c4:4b:1a:88:85:2c:95:8c:58:51:
c8:63:b0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:03:11 2026 by rpki-client