Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/59mU0fO4soeHmxbRTRLssCzw3tg.roa
File: 59mU0fO4soeHmxbRTRLssCzw3tg.roa (raw, json)
Hash identifier: Y+1/kvZAd5yOQ/XjkG06quE+FPB8q+QatTd31h4BzXM=
Subject key identifier: E7:D9:94:D1:F3:B8:B2:87:87:9B:16:D1:4D:12:EC:B0:2C:F0:DE:D8
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 019CB758D095A150B73C7824638D3093A60C
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/59mU0fO4soeHmxbRTRLssCzw3tg.roa
Signing time: Wed 04 Mar 2026 05:36:16 +0000
ROA not before: Wed 04 Mar 2026 05:36:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.147.4.0/22 maxlen: 24
83.147.16.0/22 maxlen: 24
83.147.20.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.22.0/24 maxlen: 24
83.147.23.0/24 maxlen: 24
83.147.26.0/23 maxlen: 24
83.147.26.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
83.147.28.0/24 maxlen: 24
83.147.40.0/22 maxlen: 24
83.147.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:58:d0:95:a1:50:b7:3c:78:24:63:8d:30:93:a6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Mar 4 05:36:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7d994d1f3b8b287879b16d14d12ecb02cf0ded8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5d:e8:0c:43:81:a7:1a:d2:23:88:93:f6:69:
19:8c:5c:52:37:3e:20:d7:35:d7:3f:dc:52:15:fa:
ce:da:7b:0c:c2:7b:56:65:64:f2:d1:6a:7a:47:71:
19:e4:81:44:bd:d2:bc:95:4f:1a:8e:c2:e3:22:da:
a4:b6:4c:f8:e4:71:62:fe:2e:f7:72:99:65:f7:1d:
c7:9e:f3:19:da:c5:25:e0:87:81:b1:ea:87:f2:7a:
a1:30:19:a7:a6:8b:08:44:13:7d:19:be:58:af:1d:
52:52:7e:2a:6b:0d:70:29:d7:85:84:67:e9:a4:ff:
f3:6d:3b:0d:9e:61:7e:c3:ff:40:e3:8e:7b:44:cc:
4b:70:3f:26:a8:b0:ce:09:78:14:bd:75:8b:14:de:
77:e2:fa:85:19:e7:95:28:68:e9:87:11:f7:c6:32:
c5:26:4b:f0:84:14:f4:e2:8e:1d:6c:79:38:a1:d5:
d9:61:57:62:0d:43:15:ac:4b:d0:5e:8d:a9:55:a5:
a1:24:1e:26:17:f6:be:2e:5c:29:76:c5:a3:79:59:
67:ee:93:0b:32:ac:b7:7f:b3:42:ce:6f:15:4e:50:
5c:0f:ed:a7:f9:7c:bc:dd:09:4f:e1:c2:24:73:59:
03:65:b9:66:21:e7:a2:cd:9c:6f:d8:08:ab:dd:68:
1d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D9:94:D1:F3:B8:B2:87:87:9B:16:D1:4D:12:EC:B0:2C:F0:DE:D8
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/59mU0fO4soeHmxbRTRLssCzw3tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.4.0/22
83.147.16.0/21
83.147.26.0-83.147.28.255
83.147.40.0/22
83.147.48.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:70:62:b1:b6:17:87:71:8d:68:88:e0:80:31:70:b2:b4:55:
61:fc:c1:c5:6c:a3:70:2b:26:9d:58:65:f7:96:a9:e6:82:f6:
50:a5:22:b0:56:0e:10:fb:03:5d:ef:94:56:88:be:9d:5b:49:
f2:22:24:41:c5:36:39:3d:50:2d:3d:93:e4:b9:a9:55:6b:b5:
fb:d2:3c:c4:2a:f1:17:51:a9:46:15:c9:ba:99:c6:bb:09:d0:
fc:2d:4a:0a:57:0c:6a:c5:b0:49:0a:03:e9:76:0d:ee:3d:3e:
d7:4e:71:f7:6b:cb:2e:c5:02:19:99:40:bb:9b:46:80:5f:8d:
72:47:39:4f:46:91:1a:9c:1c:d4:e1:fa:77:5d:e3:1f:a3:42:
ba:af:d9:93:c5:9d:d5:37:e4:9e:93:0f:d1:26:5b:f7:a0:06:
6f:18:df:b1:2e:9b:46:4c:2d:e7:ec:a5:87:cb:a2:90:eb:86:
d6:ef:fb:f6:2c:72:52:96:83:d6:e2:8d:be:d9:39:cd:36:bc:
1a:e4:f1:8b:ab:30:73:57:f9:4c:4e:e3:5a:ad:0b:0a:76:ba:
77:ca:d5:cc:94:bb:38:4a:93:2f:06:91:c1:8b:02:59:c3:b8:
73:fd:0f:13:9d:ba:cd:ef:88:20:78:71:cd:98:24:78:18:e4:
7e:33:35:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:44:20 2026 by rpki-client