Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/GrO5jwMIADDsftaLG-dJPY_Erw4.roa
File: GrO5jwMIADDsftaLG-dJPY_Erw4.roa (raw, json)
Hash identifier: 5QAhD/HQGA9PWteLjAjDPbIIL8eVwm7CO+D8gfLYfAY=
Subject key identifier: 1A:B3:B9:8F:03:08:00:30:EC:7E:D6:8B:1B:E7:49:3D:8F:C4:AF:0E
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01A07F646F2D14CB623C82622659BF310C7D
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/GrO5jwMIADDsftaLG-dJPY_Erw4.roa
Signing time: Tue 08 Sep 2026 05:01:23 +0000
ROA not before: Tue 08 Sep 2026 05:01:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.5.0/24 maxlen: 24
83.147.17.0/24 maxlen: 24
83.147.20.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.23.0/24 maxlen: 24
83.147.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:64:6f:2d:14:cb:62:3c:82:62:26:59:bf:31:0c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Sep 8 05:01:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ab3b98f03080030ec7ed68b1be7493d8fc4af0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bd:a6:cf:00:3d:3a:75:40:0c:c3:ff:36:40:
ff:4d:db:89:10:07:6e:c7:3f:42:91:c3:05:e3:88:
1b:67:7d:ee:55:83:49:7c:25:21:c5:ae:ff:d6:9c:
47:df:79:c6:d6:fe:b6:ce:25:b0:00:56:e3:16:81:
2a:b8:b6:94:89:99:10:b3:b0:ba:85:22:d9:10:21:
f4:37:80:27:cb:50:d4:04:8e:a5:b3:76:66:21:c2:
8f:b9:83:4c:4b:43:c8:96:4e:57:55:67:8e:c5:92:
82:ba:45:80:a0:84:be:74:40:ac:b0:54:e2:59:6e:
06:b2:01:03:0b:2b:9c:ac:50:14:b2:51:eb:b4:80:
ad:f3:27:74:ee:d1:72:ec:84:11:d4:84:d5:5a:71:
19:ea:25:5d:ad:4a:68:ed:ea:08:33:bf:a7:78:a7:
66:ee:4a:4d:9f:fd:a4:02:33:4b:6c:a4:98:01:a0:
f5:59:93:ad:52:2b:a6:ea:2a:4b:de:e8:b4:e1:9e:
b2:41:d9:36:19:3f:e7:99:20:fd:2c:05:d7:56:14:
56:13:07:dd:2e:aa:f7:ed:84:04:ff:43:5a:1a:9c:
e7:af:57:dc:38:5e:1a:19:e6:d8:08:6d:05:3d:83:
35:94:30:b6:b1:b6:72:13:2a:47:c5:08:79:fe:d7:
69:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B3:B9:8F:03:08:00:30:EC:7E:D6:8B:1B:E7:49:3D:8F:C4:AF:0E
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/GrO5jwMIADDsftaLG-dJPY_Erw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.5.0/24
83.147.17.0/24
83.147.20.0/23
83.147.23.0/24
83.147.44.0/22
Signature Algorithm: sha256WithRSAEncryption
11:9c:7a:88:03:c6:0e:93:97:20:0e:2d:94:93:2f:51:ba:15:
93:f1:78:f7:94:75:78:a2:2d:e6:e1:91:1b:5b:d8:87:e4:23:
c8:bd:a0:d8:9e:4e:5c:31:8a:7c:c9:39:ec:a2:2f:79:4d:31:
0f:36:ee:fa:0d:c7:9d:8a:21:df:44:23:ea:39:dc:57:59:23:
7b:e2:e3:b3:d4:c8:a3:b7:1b:8c:5e:45:d3:40:b2:80:d0:76:
38:e3:5c:e2:cc:93:a2:05:fc:c0:49:23:45:87:c3:ba:34:e6:
8d:f1:be:37:f7:db:a2:80:eb:e6:e2:50:32:56:07:10:d4:85:
27:1d:fd:03:3b:d0:fb:02:0d:67:9d:1e:b6:1b:73:1f:88:de:
ed:09:49:38:55:06:91:4a:78:23:f7:62:b8:55:b9:e2:7d:4e:
5e:46:d4:aa:2a:f1:36:ac:0b:53:9a:f5:2a:e6:d6:cc:31:01:
c7:1d:75:d3:98:de:33:03:50:2d:b1:2d:7d:20:14:c0:ee:63:
e1:b0:fd:f0:59:bd:7c:0a:82:15:69:39:dc:85:e2:95:c3:46:
10:41:3d:c5:e2:b2:c8:0b:c0:4b:14:d3:70:6e:4b:d6:51:cb:
cf:b0:70:b7:c2:ac:28:98:13:c0:54:1e:7f:ae:2f:38:9d:b2:
71:56:34:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:42:57 2026 by rpki-client