Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/GAthnqDGma0HV1Z_fsMCbyVty3s.roa
File: GAthnqDGma0HV1Z_fsMCbyVty3s.roa (raw, json)
Hash identifier: LNxkjnIdUZAQUAiDHMtSuZXlYFkdVKKJ+PFIvXIC9XU=
Subject key identifier: 18:0B:61:9E:A0:C6:99:AD:07:57:56:7F:7E:C3:02:6F:25:6D:CB:7B
Certificate issuer: /CN=c8528e14b9ba9850562948cd7ac84d2b2b6a371d
Certificate serial: 01A0F2E96F5398B540BF277AB1D403780F5F
Authority key identifier: C8:52:8E:14:B9:BA:98:50:56:29:48:CD:7A:C8:4D:2B:2B:6A:37:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFKOFLm6mFBWKUjNeshNKytqNx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/GAthnqDGma0HV1Z_fsMCbyVty3s.roa
Signing time: Wed 30 Sep 2026 15:22:59 +0000
ROA not before: Wed 30 Sep 2026 15:22:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34572
IP address blocks: 83.173.64.0/18 maxlen: 18
83.173.64.0/19 maxlen: 19
83.173.64.0/21 maxlen: 21
83.173.72.0/21 maxlen: 21
83.173.80.0/21 maxlen: 21
83.173.88.0/21 maxlen: 24
83.173.88.0/22 maxlen: 22
83.173.92.0/22 maxlen: 22
83.173.96.0/21 maxlen: 21
83.173.112.0/22 maxlen: 24
83.173.115.0/24 maxlen: 24
83.173.116.0/24 maxlen: 24
185.170.151.0/24 maxlen: 24
2a02:6100::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFKOFLm6mFBWKUjNeshNKytqNx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:e9:6f:53:98:b5:40:bf:27:7a:b1:d4:03:78:0f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8528e14b9ba9850562948cd7ac84d2b2b6a371d
Validity
Not Before: Sep 30 15:22:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=180b619ea0c699ad0757567f7ec3026f256dcb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:44:d5:74:01:4d:d5:69:be:d8:26:40:28:
86:99:27:44:c6:14:7b:61:0d:a0:47:b9:33:18:3a:
aa:ff:9a:6a:48:ac:ca:b0:54:63:81:f1:13:74:54:
3e:5f:b5:db:34:5d:b3:c3:41:69:29:b4:27:56:9f:
55:e1:86:c4:60:54:f8:55:d2:37:c0:22:5b:0a:5a:
cd:11:ef:40:78:32:a6:64:fc:77:ec:ed:ef:a1:d7:
27:b0:eb:98:f7:b3:fc:c6:ad:d5:df:2c:f7:61:03:
b5:0a:ef:40:9d:de:33:d2:0e:ac:79:74:b0:71:de:
30:14:ea:a6:44:9c:1f:21:82:6a:2b:bf:59:c6:d9:
42:a5:93:88:bc:67:13:9c:b5:b4:92:e2:ca:d9:37:
2c:e7:a4:74:7f:5f:17:84:1e:f1:87:94:2d:73:9f:
1e:fc:5e:58:04:ea:b5:54:64:d3:e1:92:c6:82:8f:
d8:0b:1a:6f:29:d3:8a:ce:df:2c:57:38:f2:1a:c2:
3b:24:c3:fb:a1:c9:83:93:af:7f:2b:b4:43:14:c5:
a1:80:47:9f:f1:72:dc:3d:9c:96:22:9f:02:82:05:
a4:a5:9f:6e:60:ab:a9:ac:85:0f:c3:4d:53:12:30:
0e:78:c8:64:d0:f6:cf:61:f3:33:6f:29:ff:c6:97:
f0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0B:61:9E:A0:C6:99:AD:07:57:56:7F:7E:C3:02:6F:25:6D:CB:7B
X509v3 Authority Key Identifier:
keyid:C8:52:8E:14:B9:BA:98:50:56:29:48:CD:7A:C8:4D:2B:2B:6A:37:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFKOFLm6mFBWKUjNeshNKytqNx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/GAthnqDGma0HV1Z_fsMCbyVty3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.173.64.0/18
185.170.151.0/24
IPv6:
2a02:6100::/32
Signature Algorithm: sha256WithRSAEncryption
99:2d:5b:4f:53:dd:4d:66:8e:a5:08:fb:01:48:85:75:56:27:
56:79:81:58:b2:a3:0a:7a:58:ab:3c:06:67:45:1b:73:b1:be:
99:8c:5b:95:df:68:4c:22:4b:eb:0d:5c:f7:0a:65:cb:32:ff:
4c:f4:a3:20:9d:a2:e6:fd:1c:a1:97:ba:8a:7b:a8:be:19:6f:
da:e3:78:79:9a:bf:dc:fa:fb:37:19:11:1c:5d:97:69:70:0b:
fc:b1:77:a2:8b:d4:28:ec:8f:84:f2:d8:e5:57:6d:a7:24:f5:
39:06:85:55:d5:2c:23:31:71:f8:05:ba:cb:cd:fb:83:ba:ea:
ac:4f:e0:6c:5e:85:fe:09:5f:bc:d1:9f:77:e6:94:0f:32:0f:
6c:ae:7f:dd:70:aa:0d:3a:10:27:1c:8e:f0:b5:17:71:d8:cb:
42:2b:1b:2a:dd:03:f5:8a:64:cf:1e:bc:a2:a3:9e:4b:e8:80:
10:dd:74:f9:34:80:d7:dd:59:68:e4:45:c3:15:b9:ff:02:3a:
79:0c:dd:37:59:4c:3a:13:f0:72:47:e9:78:9c:3d:06:1c:75:
b4:64:51:52:5f:cf:77:54:2d:62:25:3e:05:82:f8:2d:12:ea:
db:2f:72:a1:e8:36:35:a7:03:00:61:df:97:ab:34:c8:3a:64:
ed:bf:0f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:25:36 2026 by rpki-client