Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/eKPKjABZ2q7PEhZP_nuy0PlVuVQ.roa
File: eKPKjABZ2q7PEhZP_nuy0PlVuVQ.roa (raw, json)
Hash identifier: sRjhu8Nywz81rckDScW5n08RpLVlLSeJTsJiXP3+DTA=
Subject key identifier: 78:A3:CA:8C:00:59:DA:AE:CF:12:16:4F:FE:7B:B2:D0:F9:55:B9:54
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 019E7235779664AA972148A255EB923F1622
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/eKPKjABZ2q7PEhZP_nuy0PlVuVQ.roa
Signing time: Fri 29 May 2026 05:29:27 +0000
ROA not before: Fri 29 May 2026 05:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 83.147.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:72:35:77:96:64:aa:97:21:48:a2:55:eb:92:3f:16:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: May 29 05:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78a3ca8c0059daaecf12164ffe7bb2d0f955b954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:86:b6:ea:21:b7:b0:e2:c6:2d:48:32:64:d9:
22:2f:56:bb:51:5e:8f:35:05:0d:aa:6a:e6:a3:88:
72:63:9c:48:1b:4c:11:cf:4f:c3:b5:de:b5:a8:15:
2a:94:39:98:5c:22:85:92:ae:73:4b:0f:2b:9e:0c:
b1:9d:55:9f:9c:e5:04:46:da:f6:7a:82:53:d1:98:
f0:f0:29:4f:5e:52:6d:d4:a1:65:1b:36:98:08:3f:
90:42:20:91:19:58:3f:82:ed:7d:43:dc:42:1c:e3:
cd:ef:b8:92:66:4a:19:dd:e9:28:27:a1:60:b8:ea:
fe:de:9f:dc:58:5d:4f:d2:8d:e9:28:d2:7c:4c:ce:
83:7b:a6:b3:2e:92:74:10:3a:b4:fa:c6:b9:fa:31:
bc:0b:36:94:85:55:34:05:24:6c:7c:8e:9b:2d:70:
36:62:65:54:15:c3:61:1e:a0:4b:42:50:3d:98:02:
db:40:12:25:a8:4e:b0:dd:97:6c:a4:b8:31:77:af:
7e:da:33:b5:1e:21:14:e9:7e:6b:b4:4c:c1:2e:25:
50:95:fe:0e:70:26:0b:8f:07:63:00:b9:87:04:ab:
6a:69:48:6a:de:7f:9c:85:29:76:89:ef:f0:84:e5:
ea:c2:7c:77:09:1e:d7:69:9f:25:d8:a8:36:d1:47:
4c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A3:CA:8C:00:59:DA:AE:CF:12:16:4F:FE:7B:B2:D0:F9:55:B9:54
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/eKPKjABZ2q7PEhZP_nuy0PlVuVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.40.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:7b:3b:65:bf:94:3f:58:21:d3:d1:67:93:e1:2b:a8:8e:63:
73:29:5e:9f:07:7a:0f:6b:1e:58:73:25:bf:98:db:a0:bf:3e:
dc:c4:10:e9:d2:73:f9:9a:fa:63:2a:84:0a:57:19:84:d5:dd:
4a:3f:d2:ad:5e:89:f6:0b:6e:e1:ac:81:25:10:cc:53:fe:d1:
48:eb:57:0c:34:a0:7a:20:c0:f8:81:41:b6:36:07:bd:c5:82:
a8:95:db:e4:6d:0c:b8:ed:4a:be:83:b9:4c:90:ee:ea:e2:b6:
11:22:42:cd:13:a6:d1:66:6b:f2:eb:e2:b5:15:85:63:de:f0:
9b:f4:bd:31:c8:64:cc:e0:5f:ff:e3:a8:27:7c:3e:d6:78:e7:
4a:04:fa:35:ef:79:b8:b7:28:d2:61:05:89:b7:11:d3:5a:62:
4b:aa:98:d3:64:57:a7:c1:0c:d7:28:ab:b2:ec:9b:c3:84:4a:
22:ef:40:06:42:32:71:4c:15:64:8a:6f:99:7a:e3:31:cf:84:
f2:73:89:0f:2e:7a:b2:99:ba:1b:55:3f:2b:fd:f4:21:b5:cb:
d4:87:48:d2:8f:28:9c:d9:31:a3:cf:46:04:5f:9f:74:5c:33:
24:4f:21:ff:4d:7c:9f:a4:2a:de:c8:1f:c2:14:1a:6f:52:02:
3e:72:ac:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5yNXeWZKqXIUiiVeuSPxYiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjYwNTI5MDUyOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGEzY2E4YzAwNTlkYWFlY2YxMjE2NGZmZTdiYjJkMGY5NTViOTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoa26iG3sOLGLUgyZNkiL1a7UV6P
NQUNqmrmo4hyY5xIG0wRz0/Dtd61qBUqlDmYXCKFkq5zSw8rngyxnVWfnOUERtr2
eoJT0Zjw8ClPXlJt1KFlGzaYCD+QQiCRGVg/gu19Q9xCHOPN77iSZkoZ3ekoJ6Fg
uOr+3p/cWF1P0o3pKNJ8TM6De6azLpJ0EDq0+sa5+jG8CzaUhVU0BSRsfI6bLXA2
YmVUFcNhHqBLQlA9mALbQBIlqE6w3ZdspLgxd69+2jO1HiEU6X5rtEzBLiVQlf4O
cCYLjwdjALmHBKtqaUhq3n+chSl2ie/whOXqwnx3CR7XaZ8l2Kg20UdMmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHijyowAWdquzxIWT/57stD5VblUMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvZUtQS2pBQloycTdQRWhaUF9udXkwUGxWdVZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5MoMA0G
CSqGSIb3DQEBCwUAA4IBAQCPeztlv5Q/WCHT0WeT4SuojmNzKV6fB3oPax5YcyW/
mNugvz7cxBDp0nP5mvpjKoQKVxmE1d1KP9KtXon2C27hrIElEMxT/tFI61cMNKB6
IMD4gUG2Nge9xYKoldvkbQy47Uq+g7lMkO7q4rYRIkLNE6bRZmvy6+K1FYVj3vCb
9L0xyGTM4F//46gnfD7WeOdKBPo173m4tyjSYQWJtxHTWmJLqpjTZFenwQzXKKuy
7JvDhEoi70AGQjJxTBVkim+ZeuMxz4Tyc4kPLnqymbobVT8r/fQhtcvUh0jSjyic
2TGjz0YEX590XDMkTyH/TXyfpCreyB/CFBpvUgI+cqyu
-----END CERTIFICATE-----
Generated at Tue Jun 2 20:50:27 2026 by rpki-client