Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/FfXhF1YKrA0XtrAmczYs_lVEp4M.roa
File: FfXhF1YKrA0XtrAmczYs_lVEp4M.roa (raw, json)
Hash identifier: koCh9hxPoPb3+Vr+SRdOs2qO7w2WiTLso0/yEctUc68=
Subject key identifier: 15:F5:E1:17:56:0A:AC:0D:17:B6:B0:26:73:36:2C:FE:55:44:A7:83
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019D6C0D8B4132B9648C1D1352E339E1A3EA
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/FfXhF1YKrA0XtrAmczYs_lVEp4M.roa
Signing time: Wed 08 Apr 2026 07:45:20 +0000
ROA not before: Wed 08 Apr 2026 07:45:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44477
IP address blocks: 83.142.208.0/24 maxlen: 24
83.142.210.0/24 maxlen: 24
83.142.211.0/24 maxlen: 24
83.142.212.0/24 maxlen: 24
83.142.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6c:0d:8b:41:32:b9:64:8c:1d:13:52:e3:39:e1:a3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Apr 8 07:45:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15f5e117560aac0d17b6b02673362cfe5544a783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:01:a0:9b:4a:9f:7b:97:32:2f:68:ae:06:
20:86:19:6a:f6:10:41:80:33:2d:03:4c:e0:bf:86:
b6:25:92:17:38:7f:d0:cd:6c:9d:2f:e8:9b:49:83:
25:88:3c:68:2e:e2:f3:8c:63:c1:a1:e5:af:7c:dd:
7f:78:13:26:64:ac:aa:5e:ec:84:25:95:e4:77:81:
4d:76:a6:e8:f1:bb:79:4d:17:31:ad:e4:fd:98:43:
02:88:33:c0:5b:aa:6d:23:52:26:9a:41:87:c7:ab:
29:c8:cc:59:14:37:cf:b7:28:26:7d:92:29:91:6f:
f6:96:ff:0b:84:93:0a:00:e4:5d:ea:2b:a6:d9:31:
6a:a8:1e:83:5c:41:ca:12:d1:bd:cd:36:47:8b:fa:
fb:ae:41:1d:28:db:9a:8b:fc:1f:8a:75:26:c5:95:
d7:c5:78:67:66:4b:20:23:ca:41:f4:4c:39:62:38:
ea:02:a5:57:94:76:b9:ef:8e:dd:c5:af:a5:8c:79:
aa:a8:11:42:81:cb:a3:10:2d:7f:e1:da:89:5e:24:
9e:b9:29:6a:ef:89:7c:48:90:fd:dc:a2:45:fa:f2:
06:90:65:46:72:00:6f:32:a6:ed:0b:ed:9f:6c:2e:
6f:54:77:29:3b:bc:27:b2:fc:ce:ec:d0:57:68:96:
f8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F5:E1:17:56:0A:AC:0D:17:B6:B0:26:73:36:2C:FE:55:44:A7:83
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/FfXhF1YKrA0XtrAmczYs_lVEp4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.208.0/24
83.142.210.0-83.142.212.255
83.142.215.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:d6:a2:4c:8a:c4:3e:08:b4:d9:28:ca:0d:ba:d5:1e:a9:ec:
88:8d:79:a5:81:98:21:ce:cd:4a:8a:c0:66:d9:57:f1:c0:9d:
ea:42:1b:6f:0b:60:68:68:ed:1e:89:10:c6:48:6a:19:72:bb:
ca:1b:ad:58:b1:17:8c:d9:1e:fb:b4:5d:f4:17:47:ab:38:0d:
a1:45:e8:cf:11:4e:51:68:94:28:e1:e7:2f:38:e1:94:7a:63:
3f:bc:88:e3:95:d7:80:13:07:bd:8b:11:80:d5:dc:36:d2:c3:
4a:c8:df:77:a8:ca:d0:5e:dd:21:81:22:4e:bb:ff:c8:9d:33:
ec:89:13:05:26:e7:ad:50:ec:67:fb:97:2f:3a:25:ec:66:7a:
a4:ab:9d:33:87:95:b5:16:ee:54:d7:80:dc:e8:51:ea:56:ee:
a3:b6:ce:6e:00:75:fd:a4:b4:fc:97:b6:fe:18:6b:bc:5e:af:
ee:e7:f3:4c:f4:ac:cb:9c:5f:f8:a3:9b:f7:de:b8:eb:43:f1:
0b:5c:6b:8f:d3:c0:1a:f5:35:cf:88:1f:84:b7:9d:f8:cd:ca:
c6:7b:f3:1d:0b:32:9a:d8:b6:77:3b:f6:15:bd:20:36:8f:ef:
22:26:5d:10:3b:00:90:a7:3f:14:55:fc:d7:52:30:75:9b:ca:
99:95:89:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 09:33:27 2026 by rpki-client