Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/K4ytKEkLKu2OZHC7AAx4VBaJy7k.roa
File: K4ytKEkLKu2OZHC7AAx4VBaJy7k.roa (raw, json)
Hash identifier: axnwtafSELlW/qiUl1heI86IVr05VzuRjNgD33ZZmaw=
Subject key identifier: 2B:8C:AD:28:49:0B:2A:ED:8E:64:70:BB:00:0C:78:54:16:89:CB:B9
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01A0DEBDC7A5125139430C750553103B5126
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/K4ytKEkLKu2OZHC7AAx4VBaJy7k.roa
Signing time: Sat 26 Sep 2026 17:22:54 +0000
ROA not before: Sat 26 Sep 2026 17:22:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.5.0/24 maxlen: 24
83.147.7.0/24 maxlen: 24
83.147.17.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.26.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
83.147.28.0/24 maxlen: 24
83.147.40.0/24 maxlen: 24
83.147.41.0/24 maxlen: 24
83.147.42.0/24 maxlen: 24
83.147.43.0/24 maxlen: 24
83.147.44.0/22 maxlen: 24
83.147.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:bd:c7:a5:12:51:39:43:0c:75:05:53:10:3b:51:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Sep 26 17:22:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b8cad28490b2aed8e6470bb000c78541689cbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:06:90:6d:78:02:c0:96:b5:c5:a4:03:83:22:
19:f2:3f:8f:d8:48:e0:59:90:60:2c:d5:32:0c:c7:
b1:a0:26:df:9a:42:6c:07:bb:3b:a3:9b:2f:db:3d:
5a:84:d8:9f:19:e3:6c:cd:b2:6c:08:2a:6f:a4:96:
a7:d7:f0:4e:b6:f8:bf:d9:aa:cf:06:62:6f:22:7b:
63:39:17:9a:ae:a3:78:f7:49:75:ec:01:51:73:0e:
cb:4d:0b:77:a9:ca:82:fb:04:ca:21:00:68:8d:56:
98:20:e7:e1:2a:fe:e7:7b:ec:87:bb:fb:2f:90:9d:
45:9c:81:6b:8d:29:a8:4a:ec:4a:cc:ac:ea:47:f9:
27:d2:0b:44:c2:6d:cf:30:16:e5:6d:9c:4b:ca:1c:
ca:a2:fe:d5:fe:bb:82:5c:93:72:38:97:32:42:91:
d5:15:7d:8e:28:11:00:ff:ba:eb:7c:09:68:7e:7a:
79:88:9b:74:97:98:16:2d:b3:bb:95:86:a1:34:ab:
99:d7:06:e2:4b:f3:91:80:6b:4b:c5:f7:bc:26:15:
9e:8e:d7:2a:5f:66:ad:26:b3:e5:e3:4d:ea:3b:a9:
90:7e:87:11:b8:8d:31:b8:05:38:b0:91:10:c3:03:
0d:f7:31:c0:af:16:90:f5:25:eb:64:31:79:ca:2d:
52:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8C:AD:28:49:0B:2A:ED:8E:64:70:BB:00:0C:78:54:16:89:CB:B9
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/K4ytKEkLKu2OZHC7AAx4VBaJy7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.5.0/24
83.147.7.0/24
83.147.17.0/24
83.147.21.0/24
83.147.26.0-83.147.28.255
83.147.40.0/21
83.147.62.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ea:5d:1e:a4:b0:1f:9f:eb:b6:e3:2c:cd:12:1a:19:1f:53:
37:8d:5a:e2:63:9a:0a:07:dc:2b:38:18:fd:6a:b2:a0:27:b7:
22:21:cd:0a:be:7f:f4:4f:24:1f:61:7e:83:f3:eb:4d:50:91:
5f:9c:3f:6d:b9:03:ff:13:59:41:45:1b:db:e3:0c:d5:d9:0d:
75:86:e3:50:3d:e1:9a:8d:53:1f:6b:45:39:f4:ba:2c:80:ac:
d3:6e:e7:70:49:4f:98:e3:1f:f5:f9:02:d3:be:83:0f:34:5c:
b9:f3:da:1c:b3:17:80:16:df:a8:e5:ad:04:6b:1b:f1:75:26:
29:4a:58:b6:c4:3f:aa:73:af:97:85:ca:c0:21:be:aa:21:b8:
11:80:54:cb:83:27:83:57:24:ae:6b:54:55:60:1d:a6:b7:7a:
2f:a8:28:1a:30:eb:67:d6:04:0f:f3:e9:f0:b5:e0:72:67:6a:
24:94:fd:33:2c:a8:73:bd:f4:1f:04:a0:17:03:ac:f2:af:92:
99:b7:68:91:25:39:7f:9c:e2:e9:4b:f5:ab:6e:8b:5e:de:d5:
a3:aa:bf:ac:ac:7b:af:ee:b0:1d:36:e7:78:d1:f4:88:f9:60:
8d:1c:22:70:cf:ea:14:7e:c9:42:ba:5f:4b:c6:9d:5c:cb:f6:
9c:3f:ec:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:26:55 2026 by rpki-client