Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Cy6ZeHj9HP2JCAoXMDdYdbQtKXM.roa
File: Cy6ZeHj9HP2JCAoXMDdYdbQtKXM.roa (raw, json)
Hash identifier: 2bVCERtKfSRSYaapML+M1+tejrp8z2Bfw6G/HnZ6dzk=
Subject key identifier: 0B:2E:99:78:78:FD:1C:FD:89:08:0A:17:30:37:58:75:B4:2D:29:73
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 019FE235993A25A59F294B570144D122EDF1
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Cy6ZeHj9HP2JCAoXMDdYdbQtKXM.roa
Signing time: Sat 08 Aug 2026 16:29:51 +0000
ROA not before: Sat 08 Aug 2026 16:29:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 83.147.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e2:35:99:3a:25:a5:9f:29:4b:57:01:44:d1:22:ed:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Aug 8 16:29:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b2e997878fd1cfd89080a1730375875b42d2973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:54:c0:17:a8:21:73:de:79:4f:2d:9b:25:af:
c6:ce:bf:d4:a3:3d:2e:8d:42:cc:60:d2:58:be:47:
42:7a:25:0c:0d:fd:7a:09:e0:d3:a5:41:a3:5d:69:
9e:ac:52:b8:e3:81:fc:8c:29:3f:50:37:88:b5:b8:
68:54:ff:3e:d5:03:77:4e:1e:ef:7b:5a:3f:cd:8b:
2e:67:78:12:6a:b3:b5:e0:35:31:a4:ae:51:ff:96:
de:98:da:7b:60:6a:e9:4d:6d:7a:3a:eb:19:5e:22:
e9:69:e7:af:46:d5:8a:50:cf:aa:70:39:c7:dd:2c:
41:d9:06:45:3a:d2:67:e0:cd:94:a1:17:d3:02:06:
3a:9a:b0:d2:93:eb:79:07:fb:25:b5:1e:8d:33:aa:
1c:4d:3e:10:f3:7e:8a:81:db:8e:07:0c:02:52:ef:
e7:a5:f7:91:40:bb:af:e1:dd:d8:ad:21:6a:e5:3c:
4a:e7:f6:84:db:10:bb:42:ff:f1:5b:a7:36:e7:8a:
d5:3e:63:cf:ca:39:c9:a7:af:67:87:3a:a5:d6:c2:
91:c1:4a:ab:54:2f:9d:0e:56:bb:b5:83:02:fb:2a:
2c:c8:a5:03:8e:68:00:cd:c3:e8:3f:96:64:28:bf:
78:a0:24:25:7c:d6:5b:fe:78:d5:6e:14:28:d2:cf:
32:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2E:99:78:78:FD:1C:FD:89:08:0A:17:30:37:58:75:B4:2D:29:73
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Cy6ZeHj9HP2JCAoXMDdYdbQtKXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.5.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:f0:15:03:45:58:c2:2e:5b:37:4e:1d:8b:36:9e:b4:21:47:
68:97:41:aa:7d:35:52:8d:20:a2:03:a1:8d:f8:91:7c:0c:15:
8e:74:99:6e:a3:fd:b1:da:e7:66:f6:6c:0a:90:83:50:e0:de:
5b:93:4b:ab:58:f5:b3:f6:da:c4:70:3c:ac:fb:29:e2:50:41:
13:d9:86:83:91:11:9e:db:be:f1:8e:ae:b7:23:5c:19:55:e8:
6e:63:78:4d:9b:ba:df:89:46:7d:95:8d:6a:5d:3a:cd:42:19:
84:a1:15:e4:00:d8:14:c8:30:6c:61:3e:2b:7f:6f:11:1d:26:
61:6d:06:53:ed:84:ea:95:f6:6d:eb:3f:fd:f0:1b:4c:5b:a9:
33:95:b7:fd:33:38:d4:a2:e4:df:58:aa:db:41:8a:74:e8:b0:
67:c9:20:44:fc:61:4a:bc:86:cf:97:93:b0:d7:22:60:33:73:
ad:71:40:61:cf:02:27:4e:ca:cc:86:b6:ce:99:e3:75:2b:de:
98:8c:7b:cd:c6:dc:ba:b7:f0:c4:aa:1f:b7:33:4b:fa:25:0f:
6b:2d:e0:5c:8e:1e:76:d1:ac:88:0c:ec:47:b7:bb:a7:26:43:
f4:56:08:d1:78:7c:46:b2:c0:28:14:46:41:5c:fb:87:ad:de:
38:60:af:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:34:39 2026 by rpki-client