Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C83GfWLxsJxSkEUU0cNk4xTtTog.roa
File: C83GfWLxsJxSkEUU0cNk4xTtTog.roa (raw, json)
Hash identifier: cOrr2+VxNvpoL8i3pNQ189DVZgJGz03u6bKoOwwnSOU=
Subject key identifier: 0B:CD:C6:7D:62:F1:B0:9C:52:90:45:14:D1:C3:64:E3:14:ED:4E:88
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E633E2D4D7EA70796EBF5EB2164A67FF5
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C83GfWLxsJxSkEUU0cNk4xTtTog.roa
Signing time: Tue 26 May 2026 07:44:39 +0000
ROA not before: Tue 26 May 2026 07:44:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402268
IP address blocks: 82.163.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:3e:2d:4d:7e:a7:07:96:eb:f5:eb:21:64:a6:7f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 26 07:44:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bcdc67d62f1b09c52904514d1c364e314ed4e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d1:20:e6:37:d4:19:fe:78:2d:2f:2b:ed:4b:
26:2c:e7:cc:af:3d:6d:08:1f:5b:91:66:ee:fc:49:
12:2a:a4:32:bc:29:21:56:c8:b5:7f:29:a7:f5:3a:
ed:4e:bf:74:1b:2c:22:ad:64:77:6a:40:92:4f:89:
20:89:9b:1d:4e:83:64:bb:0d:fc:97:26:f2:b0:32:
0c:0e:d8:b8:0e:29:93:f1:9f:f7:fa:41:2a:82:45:
5f:b3:ef:de:27:7c:fe:cf:f2:01:d7:c1:99:27:4d:
1b:ca:55:3f:b9:85:d1:fb:68:57:19:fd:e5:c4:97:
79:bc:20:5a:41:b1:1b:95:d9:63:f7:7f:8b:f7:42:
31:3e:17:9c:a0:65:56:9f:60:7f:91:12:d2:8d:f3:
e4:4d:51:6a:54:02:1a:4c:97:1a:e8:b2:38:13:c8:
2a:c0:49:ee:cc:09:f5:3d:52:e2:72:d0:37:ed:2b:
6d:2b:0b:69:41:c9:45:31:2c:88:b9:57:04:1c:79:
11:f6:ec:fe:a8:20:be:11:c5:30:69:0a:7a:60:3f:
3a:22:8e:da:30:63:57:b4:92:34:ed:9f:5f:81:9c:
d8:6c:81:87:47:3c:2e:f3:42:14:a9:7e:07:1a:a9:
4c:2e:bc:a7:0e:c2:d9:d9:65:e5:f5:4c:ab:67:7f:
cc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CD:C6:7D:62:F1:B0:9C:52:90:45:14:D1:C3:64:E3:14:ED:4E:88
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C83GfWLxsJxSkEUU0cNk4xTtTog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.6.0/24
Signature Algorithm: sha256WithRSAEncryption
89:f1:ff:8c:21:20:a8:24:13:5b:c7:02:f2:e3:14:b9:77:a8:
28:64:cc:45:c4:0c:34:a2:57:42:b4:2b:b2:27:66:70:38:52:
06:b1:8c:16:71:9e:d5:7b:86:ae:ab:0f:da:9c:17:a0:b3:3b:
9c:83:a1:fc:f0:c0:de:d3:9a:d7:a9:bb:79:29:1b:97:c6:e5:
6a:99:54:a5:44:d8:49:11:a8:c7:89:e0:bc:d6:b5:3e:84:26:
bd:68:4c:e6:bb:03:6f:56:df:bd:e1:0f:0f:b5:63:53:7b:34:
f2:41:f9:1a:41:ba:75:e3:75:22:66:9e:a2:2d:1f:79:04:a5:
45:81:6a:7c:e2:96:d0:c8:c4:00:d4:4f:0f:65:74:55:c9:55:
62:32:e7:c2:bf:2d:f0:6c:90:aa:4a:c5:1f:29:24:86:67:be:
8c:74:04:43:e7:63:1c:9e:2e:b8:d8:7e:94:8e:ed:4d:f8:60:
52:76:db:2f:98:d9:71:fb:2d:ed:a2:9e:45:3d:c9:1e:9b:22:
76:0a:76:a9:cb:3b:37:18:4b:00:32:98:49:d2:60:26:0f:1c:
86:39:ec:f4:df:2e:aa:ea:0d:9f:10:d6:03:93:46:e1:1e:9a:
cf:ac:80:54:b1:c7:7d:e0:1d:d2:8a:9b:f0:f5:ff:f1:84:d9:
35:a7:89:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:28:53 2026 by rpki-client