Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/osv7rAYIOhaj9-sIDC6cHNqDKfw.roa
File: osv7rAYIOhaj9-sIDC6cHNqDKfw.roa (raw, json)
Hash identifier: GqJZAyRotD8USHo+AYiS2/NF1zO6vL06s6UQimfs+tk=
Subject key identifier: A2:CB:FB:AC:06:08:3A:16:A3:F7:EB:08:0C:2E:9C:1C:DA:83:29:FC
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01A1A50B08E1A3B6118E57CB4E19D793EBFB
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/osv7rAYIOhaj9-sIDC6cHNqDKfw.roa
Signing time: Wed 04 Nov 2026 05:32:06 +0000
ROA not before: Wed 04 Nov 2026 05:32:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.5.0/24 maxlen: 24
83.147.7.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.26.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
83.147.28.0/24 maxlen: 24
83.147.30.0/23 maxlen: 24
83.147.40.0/24 maxlen: 24
83.147.41.0/24 maxlen: 24
83.147.42.0/24 maxlen: 24
83.147.43.0/24 maxlen: 24
83.147.44.0/22 maxlen: 24
83.147.44.0/24 maxlen: 24
83.147.46.0/24 maxlen: 24
83.147.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:0b:08:e1:a3:b6:11:8e:57:cb:4e:19:d7:93:eb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 4 05:32:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2cbfbac06083a16a3f7eb080c2e9c1cda8329fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b3:41:5d:7b:ed:e9:b4:a0:6b:21:93:39:67:
1c:dc:ee:d4:a6:4a:d8:17:0a:f6:f2:2a:62:cc:3e:
0b:b3:8d:e3:51:ad:db:c2:5b:9f:f3:c6:de:72:17:
e3:53:bb:5e:92:f3:c7:a0:76:a2:69:0a:18:c1:fc:
46:30:2b:cf:49:87:4e:d6:35:bd:12:76:5d:2e:3c:
a5:69:03:31:cf:1d:f6:02:91:e1:95:70:31:ab:b4:
22:e7:c3:a9:5f:ab:11:9d:24:f6:a4:b1:ce:d7:a7:
98:9d:bc:81:e1:5a:93:30:2c:a3:ad:1c:31:bc:50:
6b:7c:72:55:fa:4c:6c:ea:ee:8c:8e:f0:1a:34:0c:
58:97:c1:eb:54:22:5d:18:9e:48:d3:eb:1a:4a:7e:
de:4d:89:b9:d1:da:de:68:a8:65:73:48:10:72:7e:
1c:b2:e3:a8:0b:c4:e4:b3:7c:4a:c4:81:1d:a6:78:
cd:ce:b6:3e:b3:1c:b1:44:f5:b7:67:e0:79:29:93:
94:78:ae:fb:00:87:69:bd:5d:49:fa:64:ca:03:6a:
47:45:07:90:d2:f8:2d:93:b0:ca:3c:b4:bb:d7:41:
ce:0a:5f:d8:f1:0c:3c:9a:29:2f:8d:26:44:8f:aa:
b1:cc:c6:3d:d2:d7:f3:52:3b:3d:b8:8d:04:f8:c7:
94:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CB:FB:AC:06:08:3A:16:A3:F7:EB:08:0C:2E:9C:1C:DA:83:29:FC
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/osv7rAYIOhaj9-sIDC6cHNqDKfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.5.0/24
83.147.7.0/24
83.147.21.0/24
83.147.26.0-83.147.28.255
83.147.30.0/23
83.147.40.0/21
Signature Algorithm: sha256WithRSAEncryption
b2:06:57:ba:c3:84:05:78:e9:8f:e4:cf:42:b6:5f:d5:52:38:
ec:29:16:ba:df:9f:38:fd:40:93:0a:9a:4e:ec:e0:54:47:5f:
9c:ac:51:3c:b2:f5:df:9f:1b:86:0d:42:68:83:91:72:48:75:
21:30:08:bd:89:3e:27:0c:56:9d:c0:8b:ba:a9:4d:b9:30:d0:
9c:f0:03:32:ec:18:ba:53:75:57:b7:4e:39:15:1e:02:61:1d:
82:dc:b2:22:28:27:42:33:7d:e3:15:87:78:2e:e6:9c:64:de:
1d:30:19:25:2a:33:b9:1f:a3:02:2d:6d:57:fe:c7:3f:1d:0c:
80:8a:61:ec:43:2b:86:2f:13:61:ec:c0:4c:4c:65:d1:5d:7e:
e6:7f:0d:54:99:2f:05:da:5b:9a:9f:fa:6a:d1:51:eb:d5:04:
f6:69:4f:7c:95:bc:ae:95:2b:15:c1:b1:c3:3a:e6:36:3e:21:
01:e9:d0:ce:46:50:e1:bc:93:23:f8:c9:4e:0c:4e:fd:07:86:
30:e3:bb:2e:01:ae:e8:70:74:6e:ef:5d:14:44:c2:57:91:8c:
94:2a:8c:e7:08:e4:5e:89:2a:0f:cc:db:c1:58:b5:3d:ba:b6:
d2:ad:fe:12:3d:7d:22:30:c4:83:11:03:77:05:c7:d8:b3:dd:
f1:58:9f:8a
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAaGlCwjho7YRjlfLThnXk+v7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjYxMTA0MDUzMjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmNiZmJhYzA2MDgzYTE2YTNmN2ViMDgwYzJlOWMxY2RhODMyOWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bNBXXvt6bSgayGTOWcc3O7UpkrY
Fwr28ipizD4Ls43jUa3bwluf88bechfjU7tekvPHoHaiaQoYwfxGMCvPSYdO1jW9
EnZdLjylaQMxzx32ApHhlXAxq7Qi58OpX6sRnST2pLHO16eYnbyB4VqTMCyjrRwx
vFBrfHJV+kxs6u6MjvAaNAxYl8HrVCJdGJ5I0+saSn7eTYm50dreaKhlc0gQcn4c
suOoC8Tks3xKxIEdpnjNzrY+sxyxRPW3Z+B5KZOUeK77AIdpvV1J+mTKA2pHRQeQ
0vgtk7DKPLS710HOCl/Y8Qw8mikvjSZEj6qxzMY90tfzUjs9uI0E+MeU8QIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFKLL+6wGCDoWo/frCAwunBzagyn8MB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvb3N2N3JBWUlPaGFqOS1zSURDNmNITnFES2Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQCU5MAAwQA
U5MFAwQAU5MHAwQAU5MVMAwDBAFTkxoDBABTkxwDBAFTkx4DBANTkygwDQYJKoZI
hvcNAQELBQADggEBALIGV7rDhAV46Y/kz0K2X9VSOOwpFrrfnzj9QJMKmk7s4FRH
X5ysUTyy9d+fG4YNQmiDkXJIdSEwCL2JPicMVp3Ai7qpTbkw0JzwAzLsGLpTdVe3
TjkVHgJhHYLcsiIoJ0IzfeMVh3gu5pxk3h0wGSUqM7kfowItbVf+xz8dDICKYexD
K4YvE2HswExMZdFdfuZ/DVSZLwXaW5qf+mrRUevVBPZpT3yVvK6VKxXBscM65jY+
IQHp0M5GUOG8kyP4yU4MTv0HhjDjuy4BruhwdG7vXRREwleRjJQqjOcI5F6JKg/M
28FYtT26ttKt/hI9fSIwxIMRA3cFx9iz3fFYn4o=
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:05:58 2026 by rpki-client