Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/xUqKWdeyL6slovGpMV_P-JwAENQ.roa
File: xUqKWdeyL6slovGpMV_P-JwAENQ.roa (raw, json)
Hash identifier: 3Oi2vrhjWyGz0Wa7DCeuFRh/eiWatyr6VERUU5Q0EHw=
Subject key identifier: C5:4A:8A:59:D7:B2:2F:AB:25:A2:F1:A9:31:5F:CF:F8:9C:00:10:D4
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01A174023446E9E9746F08B45B603E58D6DB
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/xUqKWdeyL6slovGpMV_P-JwAENQ.roa
Signing time: Sun 25 Oct 2026 17:01:03 +0000
ROA not before: Sun 25 Oct 2026 17:01:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.5.0/24 maxlen: 24
83.147.7.0/24 maxlen: 24
83.147.17.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.26.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
83.147.28.0/24 maxlen: 24
83.147.30.0/23 maxlen: 24
83.147.40.0/24 maxlen: 24
83.147.41.0/24 maxlen: 24
83.147.42.0/24 maxlen: 24
83.147.43.0/24 maxlen: 24
83.147.44.0/22 maxlen: 24
83.147.44.0/24 maxlen: 24
83.147.45.0/24 maxlen: 24
83.147.46.0/24 maxlen: 24
83.147.47.0/24 maxlen: 24
83.147.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:02:34:46:e9:e9:74:6f:08:b4:5b:60:3e:58:d6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Oct 25 17:01:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c54a8a59d7b22fab25a2f1a9315fcff89c0010d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:de:85:68:27:25:c1:a1:5b:fa:69:63:31:
81:04:d2:8e:f6:37:27:ee:77:3b:e9:d3:7a:31:16:
e7:4d:ac:67:fa:de:7c:61:ea:7a:50:55:25:06:18:
59:80:89:a8:53:8c:38:f1:82:00:3a:28:1f:47:84:
9f:f7:19:6a:4a:07:0e:1e:3d:84:e3:6d:a3:f2:f3:
01:4d:a9:43:7b:51:b4:0c:ef:ca:c8:02:f1:a5:e2:
df:07:4a:2e:8f:5d:35:aa:59:13:b1:c3:ca:67:bc:
bf:fe:ae:58:ee:6c:f6:37:06:30:3b:c8:dc:06:aa:
ae:16:07:20:46:4f:50:74:70:d9:bf:79:2f:23:80:
b3:60:97:ed:ce:30:db:e8:6a:9c:f9:7a:51:13:de:
c6:ca:99:1f:79:3b:99:6d:52:bc:75:a9:c0:95:56:
0b:e8:b9:ed:47:c3:da:76:65:d0:cf:08:f5:3f:d0:
5e:af:4b:5e:6a:80:4a:32:a7:02:e9:32:b6:36:1c:
09:6e:e1:f2:b7:90:44:86:f7:eb:96:30:95:9f:aa:
f8:cb:2a:1d:c5:38:eb:3a:ac:e2:1d:9a:94:3d:5c:
2c:02:e7:0c:ab:4c:6b:90:2a:4b:02:ed:b5:e8:f8:
c9:6b:42:3a:7e:ab:84:95:46:5b:4d:9f:23:d3:1c:
92:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4A:8A:59:D7:B2:2F:AB:25:A2:F1:A9:31:5F:CF:F8:9C:00:10:D4
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/xUqKWdeyL6slovGpMV_P-JwAENQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.5.0/24
83.147.7.0/24
83.147.17.0/24
83.147.21.0/24
83.147.26.0-83.147.28.255
83.147.30.0/23
83.147.40.0/21
83.147.62.0/24
Signature Algorithm: sha256WithRSAEncryption
be:c5:2e:00:30:15:1e:44:43:17:19:cd:95:d5:bb:c5:c3:63:
39:f5:15:ef:ac:30:b6:b4:d1:87:a4:85:a6:f2:71:e9:af:79:
e8:a0:08:87:da:ac:ce:d5:ac:ae:90:ea:27:e3:e0:60:0a:99:
81:55:41:40:19:ba:9d:71:44:81:48:d6:2f:37:f3:6a:4c:10:
1e:16:a1:ab:21:d2:cf:be:2c:c2:d3:85:14:6f:04:fa:35:bd:
d5:4b:b4:a7:4a:7d:de:6c:91:1e:4e:d3:81:a7:2e:5a:c4:a6:
e0:5f:00:94:f2:22:92:de:f8:9f:e6:16:ab:5d:f3:a8:3a:03:
28:29:12:30:d6:19:a8:dd:8b:3f:0b:ee:14:fc:e1:67:ad:90:
37:1a:31:e8:11:c3:d0:c6:25:a5:7c:9e:44:af:e0:ce:55:25:
b8:5b:46:cd:ee:3e:49:d0:71:b9:05:2e:1a:86:7a:f3:2f:a4:
96:dc:62:9c:70:d0:11:65:20:fc:e6:7c:6f:8c:4b:3b:30:72:
eb:0e:38:91:fd:51:65:c5:b2:4c:94:9c:8e:82:9d:bd:4c:f0:
2c:50:04:c7:2b:ac:a5:3d:65:df:7b:32:20:e6:6d:53:3d:17:
ce:9f:57:05:e1:ac:61:56:b6:a2:a9:67:f6:e3:ec:65:10:0b:
09:db:16:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:26:13 2026 by rpki-client