Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ffZ0HXRCU69KkrC_IsTqGirgXeg.roa
File: ffZ0HXRCU69KkrC_IsTqGirgXeg.roa (raw, json)
Hash identifier: TVPy6C6itq3wJjA3U2chQquDE+kFBtlHM3dDVye95gw=
Subject key identifier: 7D:F6:74:1D:74:42:53:AF:4A:92:B0:BF:22:C4:EA:1A:2A:E0:5D:E8
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01A0B301FDDEE2F42F85D5E16099B364CFFD
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ffZ0HXRCU69KkrC_IsTqGirgXeg.roa
Signing time: Fri 18 Sep 2026 05:34:07 +0000
ROA not before: Fri 18 Sep 2026 05:34:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.5.0/24 maxlen: 24
83.147.17.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.26.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
83.147.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:01:fd:de:e2:f4:2f:85:d5:e1:60:99:b3:64:cf:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Sep 18 05:34:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7df6741d744253af4a92b0bf22c4ea1a2ae05de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dd:cd:cf:a3:20:b4:81:44:8f:81:09:b8:2c:
77:e2:d4:d4:a9:cf:f5:58:82:9a:53:71:89:ba:fc:
3d:ad:5d:d4:6d:fe:9c:12:5e:6a:ff:c3:5a:10:29:
2e:41:de:f7:05:96:10:45:00:ee:fa:a6:c7:86:60:
4a:64:42:11:58:38:ff:3e:a8:45:d3:bd:7a:bc:65:
95:21:46:d3:87:f2:37:49:11:11:89:91:f5:27:9b:
7b:9a:df:6c:a6:79:b7:c9:53:80:d1:26:10:e4:9f:
55:8a:24:f5:20:7e:df:7e:db:e7:30:89:8f:7b:2b:
10:64:ac:93:75:9e:0f:c3:3d:89:fd:b1:8f:c5:81:
b0:0e:c2:9b:56:47:26:df:1b:af:78:17:4b:f4:ed:
6b:33:94:30:d5:5e:1a:e9:fc:52:31:73:69:3f:59:
41:c9:04:68:85:71:11:53:50:e1:d8:90:0b:92:53:
76:a9:25:b3:8b:9e:6a:c4:25:82:fb:f0:cd:0a:4e:
f6:f3:14:1e:a2:df:d8:85:23:29:45:ba:1a:d0:b5:
93:25:42:d9:f8:bf:81:6a:4c:40:d8:15:3c:13:ba:
a0:49:72:45:75:7c:1e:c8:6d:a1:5d:9d:22:81:f4:
58:f9:bd:21:eb:f8:d2:9c:cb:de:b7:a7:0e:81:f1:
08:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F6:74:1D:74:42:53:AF:4A:92:B0:BF:22:C4:EA:1A:2A:E0:5D:E8
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ffZ0HXRCU69KkrC_IsTqGirgXeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.5.0/24
83.147.17.0/24
83.147.21.0/24
83.147.26.0/23
83.147.44.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:a4:7b:d7:45:a1:79:2f:d6:9e:4e:5c:4c:9b:01:1f:76:08:
93:d8:8a:d7:fd:14:b0:08:e6:1d:d8:68:24:ef:4a:35:ff:27:
5e:ad:71:c4:57:1a:a8:c7:d1:fe:2a:d1:84:04:44:fd:0c:aa:
56:05:d2:71:9a:c3:7b:62:0c:d4:64:c3:63:c0:2d:0b:7e:fc:
6d:3b:4e:cc:a1:32:aa:1f:7c:33:8c:c3:ca:8c:2a:53:82:8a:
46:85:40:f2:88:a2:58:19:19:c1:fb:d1:b2:ae:37:13:d4:12:
5f:e0:26:43:e2:9e:23:80:61:db:8f:8e:ce:05:35:d1:15:e8:
42:c1:d8:cc:d0:75:d5:5d:cf:82:f4:2a:17:cf:8b:b8:c9:ee:
15:5a:92:38:71:90:3c:9f:a2:aa:fa:58:4e:fb:b4:16:71:8d:
60:e1:86:7e:97:cc:d6:d2:44:62:e1:63:57:25:38:18:75:fb:
6e:ab:d9:55:3b:09:f0:7a:50:31:0f:fb:14:0d:2a:82:e8:44:
71:97:67:e0:fc:2d:32:52:31:1f:a3:05:f4:1e:4a:fe:e7:63:
a0:15:05:2d:53:76:4d:45:36:f1:2b:65:c2:db:21:f5:6d:a8:
de:74:c4:d0:fa:cf:0f:60:c3:dc:0f:45:54:18:23:39:eb:9a:
2c:3f:cb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:47:59 2026 by rpki-client