Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/MQqUHtHOTk2U6UMlwYzhCLt6goU.roa
File: MQqUHtHOTk2U6UMlwYzhCLt6goU.roa (raw, json)
Hash identifier: Bu2i6Gmyyp5xOfc8xGA3wCJN9hgzXGDYGMAfVwz0ykQ=
Subject key identifier: 31:0A:94:1E:D1:CE:4E:4D:94:E9:43:25:C1:8C:E1:08:BB:7A:82:85
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01A04DE47398479275E1D1C99BAEDC32ADD7
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/MQqUHtHOTk2U6UMlwYzhCLt6goU.roa
Signing time: Sat 29 Aug 2026 14:20:12 +0000
ROA not before: Sat 29 Aug 2026 14:20:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 83.147.41.0/24 maxlen: 24
83.147.43.0/24 maxlen: 24
83.147.44.0/24 maxlen: 24
83.147.45.0/24 maxlen: 24
83.147.46.0/24 maxlen: 24
83.147.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4d:e4:73:98:47:92:75:e1:d1:c9:9b:ae:dc:32:ad:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Aug 29 14:20:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=310a941ed1ce4e4d94e94325c18ce108bb7a8285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:89:09:2f:49:78:f9:70:79:43:06:84:db:
3c:c9:ce:0a:b9:92:b6:f8:a0:28:cc:70:8a:6a:fa:
39:c0:ed:ed:65:17:66:92:7f:35:73:af:6c:ca:28:
c0:10:46:4b:5a:40:0a:4b:e9:89:c8:91:04:96:6c:
6d:0d:3e:54:d5:e2:81:6a:b5:e9:1e:45:b2:9c:7b:
0a:de:c6:68:da:44:83:e6:1f:f6:5f:80:90:68:7f:
20:26:e5:e7:21:6c:1e:cb:6f:10:ce:7d:e6:0f:77:
88:bf:e3:39:9a:13:28:99:10:54:0e:66:99:51:ed:
24:76:32:5d:b8:9e:7e:8a:c7:33:72:35:00:1c:63:
6b:49:a6:7f:17:92:00:c8:f5:33:c0:52:29:e2:0f:
22:72:57:fe:6b:9c:56:15:b3:33:8b:3a:ff:fc:98:
f3:45:45:3e:96:79:bb:5b:f8:f2:8b:78:94:66:41:
f3:51:63:6f:4f:7f:f8:c2:e2:f5:04:5f:6f:f1:da:
a4:3f:b8:14:de:7d:4c:ee:35:f8:b3:3e:50:87:34:
de:97:fc:56:0c:38:da:7a:ac:67:51:58:33:80:09:
c8:85:a1:8b:7a:44:f7:84:3c:ec:b3:09:af:b0:64:
8d:92:72:02:00:ec:64:e6:e5:7f:05:64:32:1a:9c:
78:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0A:94:1E:D1:CE:4E:4D:94:E9:43:25:C1:8C:E1:08:BB:7A:82:85
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/MQqUHtHOTk2U6UMlwYzhCLt6goU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.41.0/24
83.147.43.0-83.147.47.255
Signature Algorithm: sha256WithRSAEncryption
01:18:67:ba:0a:cc:12:de:93:33:ee:84:33:4f:9c:6a:53:19:
9d:e1:ae:0f:4f:b0:81:ea:e1:d4:91:20:f1:85:c2:7d:24:1a:
8c:96:e2:61:bb:7d:d3:80:00:8f:ef:4c:78:87:e1:2e:b8:ab:
75:e1:40:70:9b:e1:0c:51:b7:1b:bb:f2:e0:32:80:aa:5d:36:
84:52:97:96:57:ce:1b:0b:36:49:ea:5a:13:00:28:a4:fc:c8:
7e:c5:95:8d:c5:7c:5c:8b:3e:6d:95:88:a5:56:e1:2a:dd:f1:
c6:bc:ce:5f:fb:41:3f:4d:25:07:c4:9f:cf:01:bb:49:db:cf:
1d:34:5a:fd:fe:dd:70:b1:52:c3:4a:af:01:9a:d9:f2:b1:7f:
8f:4a:8a:f0:6c:2a:d2:5c:90:ec:21:0a:f0:91:2e:3c:6c:af:
c3:dc:04:92:11:96:15:87:6d:82:3d:09:b5:88:14:28:46:0d:
08:0d:d3:9c:2f:f4:93:ec:00:f4:bc:42:dc:bf:73:91:19:ad:
1f:25:71:09:fa:69:01:68:df:7c:f8:b1:ea:e0:3f:7e:bc:de:
e0:b0:e3:35:86:1e:32:95:cd:b8:8f:de:34:16:ae:a2:59:66:
2e:4b:bf:76:38:a7:13:bb:f1:12:a7:1f:30:71:df:35:17:8e:
36:de:b6:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 10 08:12:04 2026 by rpki-client