Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/xBrrrm8iM5FMy_oNJjuloLfdqwU.roa
File: xBrrrm8iM5FMy_oNJjuloLfdqwU.roa (raw, json)
Hash identifier: HeL7OGWNu+RIsp0rXaozPSnjNXw35fe8cI8WJe3MXT0=
Subject key identifier: C4:1A:EB:AE:6F:22:33:91:4C:CB:FA:0D:26:3B:A5:A0:B7:DD:AB:05
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 019FE00BB5099B29C8086408B56B81C06960
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/xBrrrm8iM5FMy_oNJjuloLfdqwU.roa
Signing time: Sat 08 Aug 2026 06:24:51 +0000
ROA not before: Sat 08 Aug 2026 06:24:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153810
IP address blocks: 83.147.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e0:0b:b5:09:9b:29:c8:08:64:08:b5:6b:81:c0:69:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Aug 8 06:24:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c41aebae6f2233914ccbfa0d263ba5a0b7ddab05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9d:57:1c:2d:23:8b:55:b4:62:c3:d6:4e:50:
7d:05:14:e1:f7:c0:0f:66:a7:5b:8f:2b:d4:4a:49:
d8:a8:10:93:a9:c2:68:01:e8:c1:00:da:12:4a:8e:
6f:6a:57:5b:0a:54:85:0a:84:f5:9a:7a:50:71:09:
5b:4a:18:74:5c:fd:91:e1:65:e0:26:7a:2e:94:00:
84:c3:04:c8:22:c9:c6:53:3e:80:9a:6c:2a:a3:9d:
c0:13:b2:60:30:65:c5:6b:1e:c3:31:55:cb:73:6f:
4f:0b:c6:71:c5:6b:25:08:f0:d8:01:ef:53:78:b1:
7e:da:36:15:b7:81:7f:67:9d:c2:72:f8:2f:39:df:
ca:05:90:0a:27:ba:11:48:87:ed:ff:5d:2a:14:4e:
9c:80:4d:aa:c9:67:36:30:f2:38:81:56:b1:a5:5c:
98:28:e8:62:13:2e:4f:19:07:43:ac:a2:6a:07:4f:
55:7e:9e:d2:28:5b:0f:06:d7:10:21:54:3f:99:50:
7c:ba:3a:94:98:2e:24:0d:40:07:11:0d:c7:fc:6d:
ea:c7:76:5e:d9:c3:59:11:08:62:51:5d:29:7c:a9:
7c:f2:f5:b5:64:97:f8:f7:c7:2d:00:1d:7b:64:22:
c0:98:39:1a:22:5b:d1:b0:80:54:f4:15:a3:c9:29:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1A:EB:AE:6F:22:33:91:4C:CB:FA:0D:26:3B:A5:A0:B7:DD:AB:05
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/xBrrrm8iM5FMy_oNJjuloLfdqwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.5.0/24
Signature Algorithm: sha256WithRSAEncryption
35:01:4d:35:98:ce:e6:ab:73:bd:0e:9d:dd:3b:10:97:7c:f0:
c1:ae:db:5f:63:63:16:67:b9:2d:e5:d4:b1:4b:c9:69:f6:35:
58:49:26:c9:1d:8c:97:34:00:bd:a1:49:29:63:85:74:a9:3f:
31:a0:7a:ed:d0:db:0e:a7:43:63:fe:c2:11:c9:4f:bf:af:76:
d8:65:d9:31:4c:c1:d3:10:aa:66:b3:d1:c4:7c:c1:2f:5f:0d:
14:e7:63:a2:ac:d5:b0:0d:91:5f:11:b6:97:f0:40:f3:1f:b9:
77:8a:58:61:28:9e:c1:cd:a1:c3:4b:b7:9c:c2:30:97:2c:50:
4a:ef:6d:98:45:20:c7:6e:73:65:ce:d0:88:2f:f0:36:84:25:
57:a1:1f:4b:bf:02:71:fb:6a:3a:01:42:10:1e:78:cf:8e:ce:
b1:78:d5:31:19:b2:40:d5:b9:0a:27:21:ca:b0:1f:01:82:7b:
f9:58:04:6c:18:1e:03:87:f2:eb:47:62:5f:eb:ee:03:b7:b2:
25:53:63:df:82:c7:28:a8:ba:0f:87:96:17:6e:34:44:11:2d:
32:d8:39:4b:2a:9c:eb:5e:e8:b5:e5:16:ee:ea:86:41:5c:e6:
73:ce:68:3e:3b:32:ce:28:56:32:42:32:ab:b5:eb:78:71:25:
37:95:17:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 06:11:44 2026 by rpki-client