Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ZuFtwvbVR_-a9go2moxoWt8Z6xw.roa
File: ZuFtwvbVR_-a9go2moxoWt8Z6xw.roa (raw, json)
Hash identifier: 1zFPJytZBPUxqDlKx106FQQao2y7AHD4VfIJWTWOpS4=
Subject key identifier: 66:E1:6D:C2:F6:D5:47:FF:9A:F6:0A:36:9A:8C:68:5A:DF:19:EB:1C
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01A017EB8BCDFC152C40BF2CABB463779448
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ZuFtwvbVR_-a9go2moxoWt8Z6xw.roa
Signing time: Wed 19 Aug 2026 02:48:27 +0000
ROA not before: Wed 19 Aug 2026 02:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402857
IP address blocks: 83.147.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:17:eb:8b:cd:fc:15:2c:40:bf:2c:ab:b4:63:77:94:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Aug 19 02:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66e16dc2f6d547ff9af60a369a8c685adf19eb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:8a:e7:7e:5c:31:00:bd:38:7c:3a:6d:f4:
39:b6:4b:7f:a4:07:a1:20:58:dc:f7:e6:3a:fc:80:
92:bc:2b:09:5b:37:2d:8e:bb:78:e6:e2:78:89:2d:
71:ea:49:1a:1f:3e:55:85:2b:c2:0b:0c:64:b7:5a:
eb:23:d9:8b:87:88:0f:aa:f7:45:b3:2d:6f:7c:5f:
4d:62:1f:06:dd:c1:ea:09:1c:68:4f:b3:5f:48:e4:
49:90:ef:2a:f3:4d:cb:3f:57:b5:98:f9:6c:08:5e:
48:9d:0d:6d:10:01:42:0f:0d:5e:21:68:75:33:26:
f3:39:cb:35:f9:95:d1:9f:82:9b:cd:72:58:d0:08:
72:b4:c8:45:e5:84:bd:cf:24:18:40:01:b2:18:e4:
44:b3:3e:95:09:9c:7b:6e:79:eb:a3:7c:29:1d:dc:
21:15:da:dd:7d:4c:c5:df:53:81:c1:25:fe:ca:75:
f5:8d:9f:de:bc:99:d6:65:ed:1f:f5:ce:ca:5e:1d:
8c:32:22:59:56:e6:f3:0d:dc:1d:75:cf:b6:2b:75:
d9:0d:f2:9f:dc:be:b2:7b:99:a5:ba:31:3b:dc:a1:
da:14:3c:a8:6d:73:42:3d:55:58:09:e7:7b:48:3b:
0f:38:6f:b1:9b:fd:1f:24:cd:ce:e7:34:f0:2d:b2:
25:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E1:6D:C2:F6:D5:47:FF:9A:F6:0A:36:9A:8C:68:5A:DF:19:EB:1C
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ZuFtwvbVR_-a9go2moxoWt8Z6xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.20.0/24
Signature Algorithm: sha256WithRSAEncryption
94:08:06:37:56:5e:cf:7b:38:b1:db:45:f2:d4:0a:48:bb:7e:
59:96:b6:8f:82:86:5c:d3:cf:cc:a3:bc:61:73:e5:04:60:59:
cb:1b:94:b5:de:53:a6:c6:cd:61:79:d9:e2:06:77:38:4d:15:
c2:88:11:31:1c:c4:6f:8b:7a:14:e8:37:7d:f9:af:66:a5:30:
4e:05:e1:6b:a7:38:92:7c:2b:f2:4b:88:86:54:73:17:b2:97:
dc:00:be:dc:cc:e4:91:90:ca:1f:fa:5c:17:3b:eb:73:ab:dc:
bd:6d:9a:5f:96:90:87:e2:03:03:65:04:14:99:9d:85:f1:1d:
96:5d:a1:d3:a2:f8:5d:dd:47:58:8c:30:ab:79:9f:c2:1c:d5:
0d:fa:f0:d2:e6:bc:4a:75:11:13:cf:34:31:6d:07:2e:2f:a2:
8d:9a:9a:27:d5:38:23:b5:8b:b7:5e:30:a5:b2:99:2c:75:f5:
fc:3d:57:71:cb:b8:6f:c3:b1:6e:35:92:08:43:2e:17:72:91:
64:2d:e4:70:57:52:56:f3:75:ba:ba:a6:a0:38:ba:8f:ab:f8:
4d:cd:56:88:5d:67:b2:9f:b1:e2:bc:5a:4e:7c:3b:14:bd:ba:
18:6c:0a:9e:f7:4e:21:fa:f6:29:70:82:1c:63:c0:f1:b3:79:
4d:cc:fb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:07 2026 by rpki-client