Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/T1eRVBFG0VKcn8dNfew3GpLsHCc.roa
File: T1eRVBFG0VKcn8dNfew3GpLsHCc.roa (raw, json)
Hash identifier: uAtHGPR/yjaOJ71zDd2B9GFFMr2EFTJzC9UCKML+S2M=
Subject key identifier: 4F:57:91:54:11:46:D1:52:9C:9F:C7:4D:7D:EC:37:1A:92:EC:1C:27
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01A0754FD3EDABFE84FF664343F6629BF5B4
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/T1eRVBFG0VKcn8dNfew3GpLsHCc.roa
Signing time: Sun 06 Sep 2026 06:02:40 +0000
ROA not before: Sun 06 Sep 2026 06:02:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 83.147.7.0/24 maxlen: 24
83.147.40.0/24 maxlen: 24
83.147.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:75:4f:d3:ed:ab:fe:84:ff:66:43:43:f6:62:9b:f5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Sep 6 06:02:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f5791541146d1529c9fc74d7dec371a92ec1c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:9f:50:ee:a4:32:58:c5:71:bc:86:a7:fd:
74:86:ff:e7:de:95:3a:ab:dd:98:14:7e:ec:7f:1d:
72:ec:24:b8:f1:ee:8e:cf:0a:86:5a:64:bd:46:61:
90:ae:46:58:2f:6f:32:d8:1d:6f:82:2f:0e:19:1f:
0c:b7:f2:d2:b5:f2:6e:9b:90:d5:26:e4:0d:52:e0:
ad:2e:40:c1:53:fc:c9:9c:09:98:43:13:9a:67:50:
f1:e2:8b:c4:8a:be:f7:04:54:d2:9f:50:a7:93:cd:
7b:8a:c1:48:b2:d0:7f:e5:f9:19:73:a3:6e:3b:79:
71:8f:8b:d2:2c:4b:11:e4:8e:ff:87:c1:aa:cd:6a:
ee:fc:db:ca:f5:6c:ef:de:81:7d:49:14:84:d5:77:
df:79:76:33:7c:bd:8f:23:86:0b:4f:d3:f6:ee:c9:
f0:6d:91:07:dd:21:a3:b8:f5:06:c7:da:f2:38:64:
4c:f6:b3:2d:a7:c2:09:a9:81:39:a4:06:6d:fb:d9:
b3:48:12:9f:40:48:85:84:46:78:9b:4f:9b:f6:6e:
7c:c0:86:ed:ed:ed:f4:ac:41:26:a7:8e:9c:1b:7b:
3e:30:34:7f:e5:e9:f2:88:a4:37:0b:ff:36:8b:82:
80:01:b6:b6:31:79:5b:60:2b:0d:af:2b:74:46:24:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:57:91:54:11:46:D1:52:9C:9F:C7:4D:7D:EC:37:1A:92:EC:1C:27
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/T1eRVBFG0VKcn8dNfew3GpLsHCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.7.0/24
83.147.40.0/24
83.147.42.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:df:7e:15:11:bc:11:cf:a6:93:7b:1c:ee:ed:b7:5f:eb:bd:
24:2c:fe:1d:31:56:69:85:64:38:bd:3f:49:98:02:89:8c:05:
61:0f:60:ed:68:07:fa:6c:8f:cf:a8:cd:92:30:7c:19:ae:4a:
4f:0c:3f:1e:6c:75:e8:45:13:08:3c:56:71:1a:27:e9:21:71:
70:a9:96:08:32:8e:52:86:9d:44:37:5c:4a:e4:48:ea:ef:38:
54:ef:50:c0:47:9b:f3:04:68:15:65:0a:ba:40:91:10:cf:63:
48:56:96:a0:1c:47:c7:20:7c:3a:4b:77:d1:96:d0:15:fd:2d:
54:b4:98:42:e4:9b:4d:2f:81:e9:a3:00:84:f3:f8:cd:b1:39:
d5:2a:d2:42:64:03:f1:60:08:33:7b:1e:73:ca:97:59:d2:8b:
fb:47:2f:71:d3:2a:76:b4:d9:41:ef:d1:97:7f:17:78:c3:1a:
ef:6a:85:a7:e2:53:3e:e4:f9:a6:bd:e5:32:8c:eb:f6:ee:ba:
c6:26:ce:f8:de:c6:1c:f6:93:70:0c:c2:57:42:50:a6:4f:9d:
61:15:24:4a:41:16:da:32:1d:f7:ca:1e:d5:4c:78:b7:46:28:
45:6b:42:62:b5:10:34:34:f8:4a:ad:76:73:d1:12:1f:f5:28:
2c:a6:fb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:42:52 2026 by rpki-client