Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/3Bs1QDSGS0kjvq4EHxwWPsOvI7A.roa
File: 3Bs1QDSGS0kjvq4EHxwWPsOvI7A.roa (raw, json)
Hash identifier: Y3wrll2e7N7tLunXy2NfFMm5qgwbNJl4KYqkdR3RdTI=
Subject key identifier: DC:1B:35:40:34:86:4B:49:23:BE:AE:04:1F:1C:16:3E:C3:AF:23:B0
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01A19C61E715A589775D2771D10C94F7506D
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/3Bs1QDSGS0kjvq4EHxwWPsOvI7A.roa
Signing time: Mon 02 Nov 2026 13:10:24 +0000
ROA not before: Mon 02 Nov 2026 13:10:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 83.147.1.0/24 maxlen: 24
83.147.17.0/24 maxlen: 24
83.147.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:61:e7:15:a5:89:77:5d:27:71:d1:0c:94:f7:50:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 2 13:10:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc1b354034864b4923beae041f1c163ec3af23b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:be:22:b4:1e:5f:54:3a:6f:e5:c8:6b:52:e8:
c7:df:7a:94:e1:d1:8e:e5:27:81:81:f5:a0:3a:3d:
30:9b:25:92:47:b5:9c:fe:71:e4:57:ff:e6:64:a1:
b0:95:ee:38:9f:5c:4c:d9:15:3f:1a:02:db:6e:23:
fc:ae:ef:ed:ce:9c:60:5e:f8:31:11:9e:34:45:02:
49:f1:ea:b2:f6:60:99:e8:eb:17:e4:9a:dd:a8:22:
f7:f5:be:bc:11:0f:2c:31:85:37:ed:c3:47:1e:ca:
b8:fa:a6:bd:f3:fc:5a:04:62:d3:b3:2c:8d:26:09:
62:44:90:c2:4a:6a:00:5e:4a:6b:8f:78:53:51:84:
1b:16:4d:7e:3a:b0:65:c6:c8:5e:24:f9:f7:0b:ab:
a6:a0:f3:27:b6:14:54:96:e6:cf:51:60:1d:f8:1f:
ed:94:e5:d1:04:84:ce:d8:68:ec:53:23:83:77:c5:
69:fe:e1:9a:af:80:e7:a8:a6:36:3a:4e:3a:b9:7b:
74:72:e1:83:23:51:a3:65:e0:93:17:8a:f4:d4:f4:
37:c5:90:12:2f:0f:7c:ad:73:6a:c5:42:e9:43:7e:
78:c6:31:13:56:ed:0a:ad:82:9c:55:b5:a7:49:d9:
f7:e9:0c:f4:39:2c:be:17:6e:3f:11:7b:43:49:fe:
f3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1B:35:40:34:86:4B:49:23:BE:AE:04:1F:1C:16:3E:C3:AF:23:B0
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/3Bs1QDSGS0kjvq4EHxwWPsOvI7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.1.0/24
83.147.17.0/24
83.147.23.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:68:91:10:4c:c7:88:a4:52:9a:d2:e4:b3:e4:3d:01:57:0d:
05:08:3b:c1:57:3a:93:eb:66:1c:c9:76:f1:6f:bd:1f:b1:8f:
9f:53:46:81:66:49:76:4c:96:f3:56:0b:b4:7c:3c:ed:8d:fd:
2c:e6:00:12:0b:5f:93:e1:23:6e:1b:46:df:81:a4:40:bc:38:
45:57:b4:43:a7:2b:f9:0c:ed:55:9e:4c:04:cd:c8:f4:7f:3d:
09:3e:ab:a3:87:3c:96:47:70:b3:4e:ea:f5:3e:bb:e8:ab:0f:
d8:cd:1f:93:8f:9c:ee:ee:76:b6:86:71:1a:dc:fc:29:61:75:
c2:2a:21:e2:ff:7d:6f:0f:38:8b:39:68:56:45:5b:21:a3:8b:
c2:0b:bb:56:65:9d:f4:68:43:12:f6:1c:4a:ed:7a:4c:d8:d8:
56:f7:71:70:5f:a5:1f:2c:f1:da:15:62:dd:8e:95:af:af:e6:
d4:ca:3a:0c:a3:57:56:fb:e1:30:e0:51:bc:59:fd:24:41:09:
fd:9c:86:1a:8d:20:95:90:4b:bd:b9:2a:14:39:53:1a:e9:91:
bc:73:75:22:60:b7:54:f7:b4:57:40:cb:28:cd:be:b0:44:a7:
5f:31:6d:4f:f1:78:00:2f:13:90:88:c7:e9:09:5c:8a:87:05:
7d:fa:05:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:38:52 2026 by rpki-client