Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/AJ71PM-nDIgZ6xfJcuoiXNFyofQ.roa
File: AJ71PM-nDIgZ6xfJcuoiXNFyofQ.roa (raw, json)
Hash identifier: is31a32aE/Kq1zs8CKaydJAWIMJ2+RsLidp2zWhTye8=
Subject key identifier: 00:9E:F5:3C:CF:A7:0C:88:19:EB:17:C9:72:EA:22:5C:D1:72:A1:F4
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 019A14C8010BDD51262A426D9EA0095BF471
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/AJ71PM-nDIgZ6xfJcuoiXNFyofQ.roa
Signing time: Fri 24 Oct 2025 05:54:03 +0000
ROA not before: Fri 24 Oct 2025 05:54:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 83.147.4.0/22 maxlen: 24
83.147.16.0/22 maxlen: 24
83.147.20.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.22.0/24 maxlen: 24
83.147.26.0/23 maxlen: 24
83.147.26.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
83.147.28.0/24 maxlen: 24
83.147.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:c8:01:0b:dd:51:26:2a:42:6d:9e:a0:09:5b:f4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Oct 24 05:54:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=009ef53ccfa70c8819eb17c972ea225cd172a1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:9d:9a:be:1c:f0:83:8b:52:9a:5c:c0:db:
b7:8b:27:f7:9d:83:33:6c:4c:13:12:0e:7a:4d:9d:
4e:c9:55:0c:a8:b4:94:65:cb:a9:e7:4b:30:66:90:
11:6c:5e:dc:f7:67:37:de:e3:43:1e:56:95:e4:3e:
6a:c9:8a:da:ab:ea:08:27:34:9e:a4:a3:cf:f9:9d:
2c:6d:0b:73:22:ea:de:56:dd:15:f7:14:64:b4:fa:
fe:29:f2:85:d1:c1:f1:e4:22:22:5c:8b:5a:e5:bf:
b1:04:c7:aa:30:1d:85:e8:54:b7:c5:b9:a8:44:73:
ab:62:f2:0e:07:c9:4e:1e:c6:5c:bd:c8:dd:74:eb:
1c:44:fd:6b:b5:61:b2:9f:79:22:73:a9:5a:fd:b3:
7a:2e:cd:2b:30:6e:32:8c:e2:37:70:f2:c9:26:97:
59:26:15:1c:f1:69:be:de:37:a7:67:30:6f:1f:47:
ee:92:19:d4:bf:87:ec:b3:cd:4c:ea:da:ff:1a:58:
6b:53:bd:96:11:5e:2b:51:e3:bd:01:cb:e4:d4:ab:
0e:8b:44:66:16:da:7d:f4:13:47:09:93:f0:d6:be:
ce:d7:75:c1:a0:d5:9b:52:3f:18:6d:78:c8:a6:f3:
ba:ef:75:f6:49:89:b7:49:b4:b7:e8:bc:82:9c:87:
d5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9E:F5:3C:CF:A7:0C:88:19:EB:17:C9:72:EA:22:5C:D1:72:A1:F4
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/AJ71PM-nDIgZ6xfJcuoiXNFyofQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.4.0/22
83.147.16.0-83.147.22.255
83.147.26.0-83.147.28.255
83.147.48.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:aa:4b:43:02:53:81:63:09:d0:c2:60:e7:44:06:18:84:b9:
b0:28:db:58:85:c9:cb:a1:02:fc:27:d3:7d:67:2c:7f:c9:88:
01:8c:e9:d7:6b:55:a1:49:40:d2:7b:3f:95:cc:95:f7:8a:88:
7d:4e:a3:7b:bb:c6:73:d5:67:ad:3f:94:a4:f7:0a:89:e1:d0:
92:22:ef:ee:ee:fe:bc:ad:68:76:18:10:d8:40:34:83:71:ee:
02:14:76:e3:fd:88:02:d8:86:f2:30:78:f3:9c:86:51:41:0f:
6f:e1:63:62:15:18:f3:6d:02:71:0f:5f:0f:37:1d:8b:09:b4:
57:c5:13:df:4a:a8:5b:df:6b:79:94:1c:23:2d:76:45:58:08:
2f:71:81:f4:ea:e2:bb:00:2e:21:91:66:a4:8e:f0:cf:60:bc:
3e:f4:57:ab:0a:98:7f:94:c1:78:c9:d3:cf:40:79:10:2f:26:
57:9d:ce:d4:82:0c:83:7f:4c:77:e3:e5:8c:6e:9a:51:49:3b:
1e:fb:44:e9:a9:9b:82:5b:d8:d5:53:3f:cf:56:85:f5:18:8d:
6b:e0:de:44:32:0c:9e:35:ec:f3:54:aa:19:03:f7:a1:7d:93:
b3:ce:e5:39:8b:f5:74:93:95:f7:a3:61:0d:91:ba:d8:89:80:
7c:d2:44:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 05:45:05 2025 by rpki-client