Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/k43KVehzYjhlVakUxMIHzoF2b2U.roa
File: k43KVehzYjhlVakUxMIHzoF2b2U.roa (raw, json)
Hash identifier: Lt50zu7gjZwVLLGXgaJlo2KVTeOk3j8cZekklxMmr68=
Subject key identifier: 93:8D:CA:55:E8:73:62:38:65:55:A9:14:C4:C2:07:CE:81:76:6F:65
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019E212647FAD27A20E188C1FBB1177FE50E
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/k43KVehzYjhlVakUxMIHzoF2b2U.roa
Signing time: Wed 13 May 2026 11:43:37 +0000
ROA not before: Wed 13 May 2026 11:43:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208831
IP address blocks: 77.83.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:26:47:fa:d2:7a:20:e1:88:c1:fb:b1:17:7f:e5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: May 13 11:43:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=938dca55e87362386555a914c4c207ce81766f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:c1:21:ad:01:c9:c6:cf:9d:f4:2e:9e:44:
ab:12:49:fe:5d:f3:ca:be:33:1b:31:38:b2:9e:3e:
8a:41:b4:46:cc:32:86:00:88:36:59:9d:e6:aa:8b:
f6:cd:f8:ae:30:4d:16:5f:2a:e5:bd:8f:e7:e4:bc:
f4:90:c4:a7:71:b1:04:f2:78:c8:4b:92:89:25:f7:
fc:b2:92:08:f6:60:4e:81:85:53:e8:0a:2d:23:da:
08:b5:62:a9:8c:7b:51:d8:b8:ab:7c:1a:bd:5f:31:
a9:07:c9:61:70:89:44:b7:5e:d6:ca:c2:62:03:17:
f7:b5:4c:c4:8b:1c:11:75:4d:ed:26:4e:8f:e5:25:
e7:d2:d8:80:2b:e7:95:41:55:43:46:3a:ba:f5:30:
6f:98:0c:4b:39:8d:15:4a:aa:94:6e:7a:cc:c8:14:
9d:24:61:2a:a0:ec:41:08:d6:21:4b:46:58:d1:3b:
f9:fb:81:1a:54:f9:b5:6b:2a:92:03:75:23:e3:9c:
df:e5:de:e0:ba:61:eb:53:6a:15:df:b5:ba:d9:47:
a1:d0:02:6b:df:06:3e:36:8d:fa:28:7e:96:36:fc:
57:d0:fd:fe:57:ba:e9:71:14:f2:57:66:e3:a6:22:
0e:c3:49:e8:d6:43:5e:f5:14:ae:72:db:f5:50:ea:
69:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8D:CA:55:E8:73:62:38:65:55:A9:14:C4:C2:07:CE:81:76:6F:65
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/k43KVehzYjhlVakUxMIHzoF2b2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.192.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:9f:7a:64:64:19:2b:08:36:c3:94:c5:61:74:c9:63:30:3a:
12:dd:0b:49:45:fb:85:d4:3b:a1:aa:d2:31:20:99:f1:0a:a0:
8b:25:b6:c2:4a:e1:c6:94:e2:38:bf:00:0f:55:15:b1:9d:1b:
e9:71:54:cd:bd:af:b1:e2:0f:99:be:d3:72:04:9b:45:3b:67:
1e:21:34:31:52:6c:4f:9b:6b:ff:6a:f2:42:c8:fb:ff:3b:1d:
6f:0f:ef:fe:ab:fa:55:4a:75:b4:64:5b:3d:17:da:54:a8:95:
09:4e:5d:1a:7d:7d:9d:eb:e6:61:ca:03:f4:64:c9:ea:32:ed:
32:56:08:31:30:c0:ed:e7:e0:a5:bc:ce:99:a4:6c:94:a0:ee:
56:b0:25:6c:93:e4:0c:fc:dc:f7:d4:ab:bc:f7:c6:3b:59:bb:
e2:41:a2:3c:a7:d5:ae:8e:0b:d0:33:eb:01:bc:27:c3:2f:d9:
be:4f:90:b5:98:ea:e2:c4:a4:7b:82:e9:03:10:1e:22:73:e9:
f0:d0:9d:3d:b5:ac:e6:6e:89:fe:ac:5a:dc:f3:fd:6e:83:de:
be:9e:2a:46:12:2c:a1:0a:e4:bc:e3:fe:ad:1f:eb:83:09:4d:
f6:c2:1d:50:6d:5b:5b:76:0b:05:17:cf:f1:ff:15:b7:25:fc:
40:36:22:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:27 2026 by rpki-client