Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Ko2VWdbjajZdpzGLJIkEH55pte4.roa
File: Ko2VWdbjajZdpzGLJIkEH55pte4.roa (raw, json)
Hash identifier: eH1O7Pf4gWepfbGBJJm1sdnb+uqt+d/smJf5mMEmeXU=
Subject key identifier: 2A:8D:95:59:D6:E3:6A:36:5D:A7:31:8B:24:89:04:1F:9E:69:B5:EE
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01A07A7525C8916BBB6DD640A85DAB30479B
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Ko2VWdbjajZdpzGLJIkEH55pte4.roa
Signing time: Mon 07 Sep 2026 06:01:32 +0000
ROA not before: Mon 07 Sep 2026 06:01:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 83.147.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:75:25:c8:91:6b:bb:6d:d6:40:a8:5d:ab:30:47:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Sep 7 06:01:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a8d9559d6e36a365da7318b2489041f9e69b5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:2c:f2:5d:4f:74:26:1a:78:3a:89:80:7b:
85:c1:1b:6b:dc:84:e0:9d:bf:50:b5:d5:73:42:57:
c5:93:5f:28:2c:ee:fc:5e:99:b5:f9:af:7f:bc:22:
65:bf:32:94:1e:86:72:4e:01:f7:52:c7:f2:8d:96:
1c:e4:3a:e5:06:15:4a:2e:5c:3c:7f:09:4f:da:a8:
4d:3f:3c:b7:21:9e:b6:c3:14:18:20:a6:3d:d0:95:
c3:05:b8:a6:e3:1b:36:f4:f3:bc:18:23:16:55:4a:
3b:a9:cb:75:ff:45:ba:e0:1d:3a:64:f7:35:5c:9f:
55:5d:3f:a7:9b:d8:71:ca:2c:c8:63:0b:5f:02:e6:
a7:c5:b4:c2:89:db:63:1a:6d:87:49:d1:0d:6c:1d:
b7:be:d9:25:6b:66:3c:e4:b7:8a:cb:f0:f9:38:d0:
12:7d:3c:80:82:86:ac:c0:61:d9:86:4e:d7:5f:ad:
29:2f:38:1d:09:ce:41:11:7f:d7:00:fb:e0:24:ed:
4e:e8:b8:06:4d:33:e2:eb:c8:20:27:b5:87:4f:87:
15:51:e4:ed:eb:7c:80:c7:af:df:67:ed:2b:cb:d8:
75:b8:57:d3:05:8c:f1:4a:40:2b:51:01:0b:bc:3c:
e9:fd:85:2a:8e:9d:50:52:be:8f:a6:ce:b6:b2:27:
6e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8D:95:59:D6:E3:6A:36:5D:A7:31:8B:24:89:04:1F:9E:69:B5:EE
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Ko2VWdbjajZdpzGLJIkEH55pte4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.28.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e5:53:b5:23:55:1e:54:4a:dd:ed:26:83:fd:97:0f:7d:d5:
10:b2:02:40:3f:13:b2:92:c1:df:d8:a5:df:d7:ac:3b:c4:a2:
21:e4:01:a3:76:13:91:fc:fc:1d:b1:a4:1d:c7:62:92:bd:9a:
fb:e8:81:74:f9:65:50:77:ba:50:d5:a3:0f:0a:5d:2d:ba:a6:
52:4a:d7:38:2f:82:30:c3:d4:61:0e:93:4a:84:c8:dd:2c:87:
34:f2:ba:f3:b7:a9:50:15:3c:49:19:24:1b:ca:5f:4a:8e:64:
c2:97:e7:4e:89:c2:25:a0:39:18:4f:16:0e:2f:6f:bf:cd:fe:
1f:2a:bb:dc:2f:85:4c:b9:d7:79:18:de:f0:ab:e4:25:98:3c:
e2:d1:64:0c:95:aa:3b:06:93:9a:5f:79:a7:36:33:95:ff:14:
96:39:5b:19:69:b8:4b:98:7c:d3:01:02:33:21:9f:cc:f2:aa:
65:1f:38:ef:9f:57:45:5b:41:29:12:09:a5:40:7c:cd:1e:46:
22:de:9c:0e:ea:ea:23:dc:e0:b3:7d:4a:02:ba:cd:92:6a:06:
e0:ce:7d:68:5c:71:92:da:2f:8d:81:c9:27:ca:19:22:4d:96:
a6:42:d6:10:4a:a8:16:61:b8:40:e4:e9:3f:23:d8:ce:83:41:
8b:6f:41:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaB6dSXIkWu7bdZAqF2rMEebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjYwOTA3MDYwMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYThkOTU1OWQ2ZTM2YTM2NWRhNzMxOGIyNDg5MDQxZjllNjliNWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaYs8l1PdCYaeDqJgHuFwRtr3ITg
nb9QtdVzQlfFk18oLO78Xpm1+a9/vCJlvzKUHoZyTgH3UsfyjZYc5DrlBhVKLlw8
fwlP2qhNPzy3IZ62wxQYIKY90JXDBbim4xs29PO8GCMWVUo7qct1/0W64B06ZPc1
XJ9VXT+nm9hxyizIYwtfAuanxbTCidtjGm2HSdENbB23vtkla2Y85LeKy/D5ONAS
fTyAgoaswGHZhk7XX60pLzgdCc5BEX/XAPvgJO1O6LgGTTPi68ggJ7WHT4cVUeTt
63yAx6/fZ+0ry9h1uFfTBYzxSkArUQELvDzp/YUqjp1QUr6Pps62sidu7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCqNlVnW42o2XacxiySJBB+eabXuMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvS28yVldkYmphalpkcHpHTEpJa0VINTVwdGU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU5McMA0G
CSqGSIb3DQEBCwUAA4IBAQBr5VO1I1UeVErd7SaD/ZcPfdUQsgJAPxOyksHf2KXf
16w7xKIh5AGjdhOR/PwdsaQdx2KSvZr76IF0+WVQd7pQ1aMPCl0tuqZSStc4L4Iw
w9RhDpNKhMjdLIc08rrzt6lQFTxJGSQbyl9KjmTCl+dOicIloDkYTxYOL2+/zf4f
KrvcL4VMudd5GN7wq+QlmDzi0WQMlao7BpOaX3mnNjOV/xSWOVsZabhLmHzTAQIz
IZ/M8qplHzjvn1dFW0EpEgmlQHzNHkYi3pwO6uoj3OCzfUoCus2Sagbgzn1oXHGS
2i+NgcknyhkiTZamQtYQSqgWYbhA5Ok/I9jOg0GLb0Er
-----END CERTIFICATE-----
Generated at Thu Sep 10 08:42:48 2026 by rpki-client