Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/7oYsd0kB9BetPa9Rs1L6qzZcKRg.roa
File: 7oYsd0kB9BetPa9Rs1L6qzZcKRg.roa (raw, json)
Hash identifier: iwjHZjFT+YJSPFCy/h07zQiFNcAIPK6jDb1TxiqHfI0=
Subject key identifier: EE:86:2C:77:49:01:F4:17:AD:3D:AF:51:B3:52:FA:AB:36:5C:29:18
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01A017EAA2137F2FE2DDE78A3A1FE190C6C5
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/7oYsd0kB9BetPa9Rs1L6qzZcKRg.roa
Signing time: Wed 19 Aug 2026 02:47:27 +0000
ROA not before: Wed 19 Aug 2026 02:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 83.147.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:17:ea:a2:13:7f:2f:e2:dd:e7:8a:3a:1f:e1:90:c6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Aug 19 02:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee862c774901f417ad3daf51b352faab365c2918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:ed:92:cf:f7:cf:25:cb:52:4f:46:02:81:
17:da:89:49:15:98:ed:63:73:ca:3e:f0:34:d6:ee:
fa:5a:92:2d:8f:8c:36:49:96:a7:38:9b:d9:6d:dd:
6f:bf:31:bb:8e:c1:6e:f0:b2:a7:0e:4d:66:d5:f9:
97:01:eb:d9:fd:2c:04:76:7c:5a:7f:6c:f5:51:4e:
53:c5:10:4c:fc:b2:4b:c4:7c:b7:cd:c7:98:a5:49:
c4:13:97:49:8e:a8:21:d3:30:10:89:91:83:a0:69:
1e:2a:5e:3d:77:2c:9a:43:e1:ea:28:14:31:55:c7:
2f:10:95:1b:8c:98:db:f8:75:9b:63:29:93:39:17:
07:1a:bf:ad:3b:80:15:42:49:bf:83:78:e8:61:cf:
2c:d8:12:12:e8:28:20:e3:c7:8c:38:d9:3f:69:04:
f4:d7:8f:4e:d3:98:66:98:1f:bf:5a:27:10:32:e5:
93:c2:b0:25:18:28:c1:46:b7:2c:d2:04:b0:a9:37:
6d:89:b4:7a:d2:0d:d8:10:71:19:be:95:9e:b7:75:
da:e7:48:77:bd:a8:dc:1b:30:6e:2d:1b:7b:0c:7d:
a9:0d:af:2c:bd:00:84:13:76:fb:65:7e:50:5a:63:
e5:27:c3:04:ca:29:1b:86:0a:5a:3b:8b:da:86:87:
69:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:86:2C:77:49:01:F4:17:AD:3D:AF:51:B3:52:FA:AB:36:5C:29:18
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/7oYsd0kB9BetPa9Rs1L6qzZcKRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.23.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:7b:ee:30:96:ff:11:3c:ce:92:44:e3:a9:22:22:ad:a4:07:
fb:c3:5d:07:ff:3b:b1:b3:cf:2b:6e:f4:17:5f:9f:c7:2a:4c:
00:7d:c4:bc:cf:af:4e:68:c3:13:56:6b:82:c8:79:58:7c:72:
fe:48:2a:5c:55:16:4f:4d:9f:7d:39:19:a4:2d:6b:d2:9c:f0:
21:e5:17:b9:b3:ae:bf:21:f0:75:16:14:7e:b1:18:80:93:1a:
a5:86:e0:e9:13:a4:1b:90:4e:a2:0a:ef:a2:13:b3:dc:1f:be:
dd:c8:e9:51:71:18:06:2b:db:4e:c1:2e:c3:d0:b5:d7:56:74:
b8:1e:45:c6:56:3f:de:98:2a:17:9f:69:b0:65:cf:cd:6b:3b:
1e:ec:7f:66:f1:72:7c:37:9a:09:44:54:97:4f:78:4f:0a:c5:
b0:68:5e:9e:66:60:ba:dd:51:e6:8e:bb:f0:16:11:56:bc:00:
2b:61:de:03:3e:b6:ea:30:93:43:3a:26:83:32:e2:8e:86:a9:
88:d1:a5:65:33:d2:b6:db:7c:c2:8e:a9:b2:c6:2a:54:86:b8:
fd:3c:6d:42:d8:bc:77:c4:e2:c4:1b:5e:9b:58:31:e1:62:11:
a6:08:bf:f2:d1:79:1e:d6:cf:54:96:f9:97:a0:07:04:0c:e9:
ea:c1:7a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:40 2026 by rpki-client