Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/EsGhgEoKrzOToUdMfhn0q6qOLtE.roa
File: EsGhgEoKrzOToUdMfhn0q6qOLtE.roa (raw, json)
Hash identifier: 09SfYfJzyn42o31Z9Cui1huGi9zXwCpeEV6kVwTd7Vg=
Subject key identifier: 12:C1:A1:80:4A:0A:AF:33:93:A1:47:4C:7E:19:F4:AB:AA:8E:2E:D1
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 019FE00BB438761203446B7EE1EAF85F9893
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/EsGhgEoKrzOToUdMfhn0q6qOLtE.roa
Signing time: Sat 08 Aug 2026 06:24:51 +0000
ROA not before: Sat 08 Aug 2026 06:24:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153568
IP address blocks: 83.147.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e0:0b:b4:38:76:12:03:44:6b:7e:e1:ea:f8:5f:98:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Aug 8 06:24:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12c1a1804a0aaf3393a1474c7e19f4abaa8e2ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7b:33:c0:cf:79:00:e4:ee:2d:c1:94:2a:4b:
14:f2:45:f4:95:06:c9:41:1f:ef:fd:75:e5:9d:7b:
75:23:d0:63:77:a2:17:cd:75:d3:c3:cf:30:42:bd:
28:85:23:65:b5:0f:ac:e1:86:5a:29:70:a3:e4:af:
22:d6:6d:92:f6:c2:33:db:ec:d4:04:8c:68:24:33:
81:65:0e:54:f8:75:65:2b:65:44:c5:b2:53:d5:eb:
d8:9b:0a:0a:e3:9a:c0:56:91:ec:ba:bc:3e:24:99:
92:97:11:00:85:0e:34:86:c2:d2:73:84:d2:0d:4e:
9f:f8:bc:88:d0:1e:c2:90:92:09:d3:0c:1c:60:e4:
e9:4b:c0:f1:de:84:00:b3:7e:ba:f3:c6:03:5c:98:
f0:59:8f:66:6f:d0:5d:df:10:c2:ed:cf:65:85:57:
3a:db:a8:a3:53:1d:a1:e3:1f:07:10:9d:3b:74:c0:
d2:c1:65:26:f9:16:b3:30:7d:7b:c6:f1:12:7c:a2:
0c:8b:d6:5e:ce:0b:12:05:87:dd:2c:c2:3a:3d:e2:
53:8f:cc:f3:b3:e2:c2:4a:89:af:8e:b8:11:6e:f2:
cc:34:58:ff:dd:7d:a1:11:10:c0:76:cf:58:fb:ea:
8b:b7:c1:99:0a:da:e9:c8:8c:86:c7:b3:49:95:2f:
73:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C1:A1:80:4A:0A:AF:33:93:A1:47:4C:7E:19:F4:AB:AA:8E:2E:D1
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/EsGhgEoKrzOToUdMfhn0q6qOLtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.5.0/24
Signature Algorithm: sha256WithRSAEncryption
36:71:9c:c3:76:5d:fa:ad:76:74:28:9e:34:64:5d:9d:c3:65:
87:3a:b1:b8:30:30:cb:82:94:56:18:2f:f1:06:85:3a:26:79:
72:72:f1:a4:53:e7:bc:e6:7b:19:55:2e:3d:c7:c3:a1:4e:92:
56:14:0f:59:e4:a5:7d:d0:0f:72:d5:df:7b:f5:3d:0a:a1:e5:
27:c4:61:0a:09:1b:55:8c:d3:52:97:79:f8:0c:47:ff:14:76:
27:a9:26:e7:12:3c:1a:4c:52:87:0f:83:dd:ce:8d:f5:ab:23:
4d:c3:96:b0:7f:18:d9:93:11:30:cd:1b:75:e1:8f:19:17:7c:
6f:77:8a:87:61:97:e3:c8:87:4b:17:5f:e1:ce:30:ba:fd:0a:
49:f4:ba:20:94:2b:90:0e:ea:d7:69:96:7a:12:4b:c9:32:94:
9d:39:c8:c9:b3:00:3e:0e:13:ba:f7:b8:54:97:ef:ad:96:e5:
7e:7b:70:83:79:a1:37:f5:5f:9d:73:2d:74:37:5c:7a:01:d1:
82:d4:96:b1:5f:a4:1a:83:7d:e6:c2:f0:23:71:97:c5:d5:f3:
3b:c8:d9:0e:be:3c:13:b7:b8:48:6b:d1:ed:5c:38:96:6a:5f:
5e:92:ca:2f:6a:e6:ee:15:e4:c8:32:82:02:b3:2e:b9:07:86:
48:36:0a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:02:43 2026 by rpki-client