Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Yq8C175qyfOagaIkPHI-RN5Ecxg.roa
File: Yq8C175qyfOagaIkPHI-RN5Ecxg.roa (raw, json)
Hash identifier: nopeu03tl6djr5IRMUx9oy69DCxGlQZWpLg5XrpfQmg=
Subject key identifier: 62:AF:02:D7:BE:6A:C9:F3:9A:81:A2:24:3C:72:3E:44:DE:44:73:18
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01A19FF56D2E177FFAE3A4F355A90E99BB52
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Yq8C175qyfOagaIkPHI-RN5Ecxg.roa
Signing time: Tue 03 Nov 2026 05:50:23 +0000
ROA not before: Tue 03 Nov 2026 05:50:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215197
IP address blocks: 83.147.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9f:f5:6d:2e:17:7f:fa:e3:a4:f3:55:a9:0e:99:bb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 3 05:50:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62af02d7be6ac9f39a81a2243c723e44de447318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b5:12:d2:7f:45:38:9f:d9:db:03:03:f0:c3:
8c:dd:90:b3:7c:ca:17:5b:85:e7:76:78:93:dd:81:
24:f9:be:db:ec:52:9a:91:3a:de:0a:f2:33:a3:4c:
88:2d:10:14:53:c9:2f:45:c9:43:12:7c:34:c0:83:
0b:f3:54:2a:cb:60:20:d3:ef:2a:b3:65:39:ef:79:
a7:0b:52:ce:b7:77:bd:e3:b7:e2:12:0b:df:b8:c5:
16:7d:80:3a:04:df:65:2a:8b:13:5e:42:a2:10:2e:
81:29:73:b6:e6:6a:0b:b8:ff:9f:0d:1c:d6:08:5a:
07:b3:14:23:36:6b:6b:6c:46:e5:46:27:df:d0:de:
75:bf:ab:a2:34:30:cc:80:b4:8d:d3:78:a8:0f:37:
cf:bf:40:48:b6:3b:97:1b:a0:96:38:05:94:47:56:
27:4a:be:89:a5:d1:c5:08:c3:50:f1:73:40:73:c9:
23:4e:e6:39:61:a2:2a:0c:e9:a1:d7:85:1d:1f:5c:
c3:35:b8:a9:ad:49:99:e7:4d:d9:b6:92:14:bb:41:
43:d0:79:30:73:c7:dc:d9:78:1c:dd:7a:bd:97:bf:
b5:93:68:65:6b:30:2e:37:89:91:c5:8f:a1:41:58:
00:19:40:4c:33:00:8e:ef:31:35:a7:24:67:65:f9:
1f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AF:02:D7:BE:6A:C9:F3:9A:81:A2:24:3C:72:3E:44:DE:44:73:18
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Yq8C175qyfOagaIkPHI-RN5Ecxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.33.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:79:bd:f5:a2:ae:43:5b:be:5f:c4:fc:a0:ba:b3:2b:34:b0:
02:23:58:5d:fb:d6:74:b7:bf:0f:94:ff:28:80:03:a6:7b:d0:
d1:65:e8:32:67:49:ee:22:cd:56:a3:5f:b4:20:c8:b5:f5:19:
c3:33:9f:69:c2:85:ce:97:e6:59:8e:50:11:ef:cb:7c:4c:21:
54:cd:c1:c0:5f:b1:17:3b:36:e9:3d:ec:59:3c:c0:56:e8:57:
36:9d:51:76:3e:6b:cc:ae:a8:37:ab:56:f0:30:62:98:c5:9d:
aa:c8:c4:af:b7:5d:71:cc:6d:bf:6b:8a:65:75:9a:1f:b0:20:
ce:1d:25:1a:5f:90:1b:bf:fc:eb:b8:16:88:53:6c:39:9e:35:
42:f5:51:10:b1:14:7e:0c:a7:5f:01:8a:da:7e:e2:86:a7:46:
15:96:e8:94:f7:eb:c5:e5:1f:31:13:ca:a0:fe:a5:d9:51:98:
8e:1a:57:35:1b:37:a3:2c:c9:50:28:59:96:03:4c:70:0a:e1:
25:ad:80:41:36:44:80:6c:7b:0f:86:5f:ec:b4:db:47:c8:06:
92:b9:39:0d:4f:70:72:6e:44:66:c7:84:07:39:ad:d7:c5:09:
22:a1:91:8c:df:41:95:fe:e5:35:77:94:3c:bb:52:92:af:fa:
79:ab:83:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:02:25 2026 by rpki-client