Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/EVwjkR6hVxNThr_Z0fwPlocGWeU.roa
File: EVwjkR6hVxNThr_Z0fwPlocGWeU.roa (raw, json)
Hash identifier: NX6iK0MzjY7jygL+6OGYfpemeMf3M6jBYMqjMeWuXLk=
Subject key identifier: 11:5C:23:91:1E:A1:57:13:53:86:BF:D9:D1:FC:0F:96:87:06:59:E5
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01A03DD424BE50AF76CD6E77B1E848B9DA8B
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/EVwjkR6hVxNThr_Z0fwPlocGWeU.roa
Signing time: Wed 26 Aug 2026 11:28:28 +0000
ROA not before: Wed 26 Aug 2026 11:28:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 83.147.5.0/24 maxlen: 24
83.147.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:d4:24:be:50:af:76:cd:6e:77:b1:e8:48:b9:da:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Aug 26 11:28:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=115c23911ea157135386bfd9d1fc0f96870659e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:01:30:5e:70:26:b1:b5:50:01:df:ef:99:
81:0d:6d:d3:bc:36:c8:72:6f:29:86:ef:06:8d:21:
4a:c0:66:7f:ea:4a:99:c3:68:17:1d:9d:8f:e6:07:
e0:1f:f5:9e:09:66:c5:59:ed:e4:b5:10:1a:58:07:
1f:91:fb:c2:b9:58:0f:06:9f:47:9f:72:4e:16:95:
e8:c3:9a:ca:0f:2d:3a:32:9a:52:f1:46:99:a6:7a:
ca:1f:eb:a5:41:28:e2:60:e9:88:41:6d:8c:cf:d7:
68:63:7a:2b:e3:ec:d9:8f:7f:42:1f:7d:e5:f4:17:
35:17:62:d1:c9:98:a6:00:ce:1d:b4:55:15:d2:93:
79:e1:6f:46:29:60:31:b9:ac:78:fb:a4:de:3d:aa:
6a:0c:a9:3d:c2:d3:a4:15:8b:9b:05:ab:83:9b:76:
8e:a5:94:bc:32:dd:6e:67:c3:b3:c2:7a:51:83:f3:
0a:d6:63:1a:7c:11:33:8d:b8:97:75:5d:08:8e:c3:
5e:dc:5a:ee:b6:f3:6a:69:f6:f8:e6:74:ac:24:aa:
fb:40:1f:c9:31:84:4a:e5:14:28:46:90:ac:d9:c7:
8b:c3:d5:ec:fe:00:d9:a4:52:4e:8c:4d:85:73:e0:
be:83:9d:cf:86:96:b1:dd:f2:cf:ba:69:5b:d1:43:
ad:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5C:23:91:1E:A1:57:13:53:86:BF:D9:D1:FC:0F:96:87:06:59:E5
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/EVwjkR6hVxNThr_Z0fwPlocGWeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.5.0/24
83.147.28.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:ac:12:be:12:f4:e5:d1:a2:bc:a0:e7:47:38:db:ea:37:b4:
a5:1b:52:00:ee:cf:1b:76:80:a8:dd:fa:66:62:55:a8:a4:db:
11:a1:19:08:fd:bd:cb:54:1b:ce:82:cd:11:92:32:53:fd:a6:
fc:c8:6d:f5:17:ea:df:67:4a:e7:2e:03:bf:d8:6f:be:e6:12:
89:40:2f:6f:8b:05:14:85:fd:cf:f8:d1:48:33:5f:5b:36:0b:
af:a4:ce:e2:fa:1e:e2:9a:39:95:81:e2:4a:c9:06:43:44:3f:
7e:23:92:b6:42:3d:6f:b0:17:20:ea:82:1f:08:97:de:40:4c:
dc:de:f5:18:f1:f6:2a:52:eb:9b:5a:f3:f6:db:53:e3:5c:01:
a9:a2:b3:ff:29:14:ed:f8:57:2e:63:64:81:d2:5e:0b:ff:7d:
f3:2a:d6:b7:3a:87:18:e6:d7:13:50:c6:5a:e3:74:6f:7d:21:
3b:69:b0:59:55:97:09:9f:81:3c:ea:ff:76:53:c0:da:d7:fe:
cd:1e:8e:c8:65:c7:b6:fd:35:af:30:12:84:e7:a3:aa:eb:93:
14:8b:40:ad:f1:39:35:26:fa:d5:53:4e:3e:c5:e1:6d:eb:12:
6c:02:60:6e:8a:51:a9:c5:d1:97:19:40:21:24:11:a7:3c:43:
ca:c6:c8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:07 2026 by rpki-client