Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/47xkWnrIUB_j1TqpoRepDZ7NLpc.roa
File: 47xkWnrIUB_j1TqpoRepDZ7NLpc.roa (raw, json)
Hash identifier: EdLvqub2w6o7cqpTXnk7ZfHL9LQiKqXm0wipsfY473A=
Subject key identifier: E3:BC:64:5A:7A:C8:50:1F:E3:D5:3A:A9:A1:17:A9:0D:9E:CD:2E:97
Certificate issuer: /CN=78883b618b6b006571059f1cf3a11fca5a875e36
Certificate serial: 01A0A57CB079F030BA77E3B097413CBA9443
Authority key identifier: 78:88:3B:61:8B:6B:00:65:71:05:9F:1C:F3:A1:1F:CA:5A:87:5E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIg7YYtrAGVxBZ8c86EfylqHXjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/47xkWnrIUB_j1TqpoRepDZ7NLpc.roa
Signing time: Tue 15 Sep 2026 14:33:27 +0000
ROA not before: Tue 15 Sep 2026 14:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209843
IP address blocks: 82.215.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/eIg7YYtrAGVxBZ8c86EfylqHXjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/eIg7YYtrAGVxBZ8c86EfylqHXjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIg7YYtrAGVxBZ8c86EfylqHXjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:7c:b0:79:f0:30:ba:77:e3:b0:97:41:3c:ba:94:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78883b618b6b006571059f1cf3a11fca5a875e36
Validity
Not Before: Sep 15 14:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3bc645a7ac8501fe3d53aa9a117a90d9ecd2e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:c5:dc:09:6f:74:81:95:f7:f7:a4:eb:25:
f9:bb:52:e3:1d:c8:4d:b9:77:14:db:54:5e:90:c2:
49:a8:1e:5a:18:a2:ae:cd:96:62:da:b8:ad:42:ba:
71:22:18:07:27:e4:3e:56:07:bd:ee:3c:9b:cb:39:
30:ce:d0:e6:d2:75:32:7d:67:50:4a:c0:ce:57:bd:
c3:9b:74:bf:e0:d1:1b:eb:2a:ab:ec:16:1e:10:a1:
45:67:27:3a:49:d4:e3:7d:07:30:3e:bd:49:e6:15:
f1:7c:39:02:d9:1f:bc:ec:58:b5:29:05:b7:74:07:
0b:df:f7:be:4b:24:b8:6b:2f:94:62:8a:48:1c:31:
e0:5f:33:b2:3b:60:b4:4f:11:f5:40:ab:97:e3:7b:
9b:2e:fc:1f:9f:a9:94:53:dc:40:a3:fe:28:50:0a:
47:85:ab:5e:4d:2c:7b:8c:59:e8:5d:02:c1:77:5e:
d2:89:ba:29:c3:80:dc:6a:ee:01:9b:60:9f:79:b1:
ff:a3:8c:58:5c:f7:45:aa:03:49:d4:19:19:b8:b2:
9e:0a:65:da:82:c0:fd:c2:35:c7:e1:37:2d:6d:8d:
2c:e2:31:cc:57:d0:37:dc:39:1f:18:d8:fc:84:92:
a3:f9:bb:4d:9d:11:1e:67:cd:25:2c:97:b5:8f:46:
5c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BC:64:5A:7A:C8:50:1F:E3:D5:3A:A9:A1:17:A9:0D:9E:CD:2E:97
X509v3 Authority Key Identifier:
keyid:78:88:3B:61:8B:6B:00:65:71:05:9F:1C:F3:A1:1F:CA:5A:87:5E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIg7YYtrAGVxBZ8c86EfylqHXjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/47xkWnrIUB_j1TqpoRepDZ7NLpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/eIg7YYtrAGVxBZ8c86EfylqHXjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.76.0/24
Signature Algorithm: sha256WithRSAEncryption
76:2b:e7:d2:17:e2:76:ef:f1:5c:16:64:58:9f:13:8b:06:47:
77:15:21:26:b8:b7:ef:cd:60:42:1a:14:24:c5:7b:46:69:90:
76:31:a0:b5:b8:82:19:55:c0:95:d1:92:4d:e9:b9:b8:f5:22:
9b:59:49:ec:f3:7b:f1:20:c6:76:49:9b:0b:60:bb:9b:31:ac:
e3:1f:84:89:99:6a:53:ab:b6:c2:fa:00:79:7a:23:a7:68:d9:
35:20:95:9e:5a:b5:50:df:74:66:20:c3:fe:ff:10:a8:79:7d:
25:54:98:ed:a6:21:6e:37:6a:d7:49:78:ed:1d:d7:ab:c0:95:
17:28:58:10:79:80:99:9e:ce:ca:78:7a:98:fe:18:6b:45:e8:
71:96:b2:3a:e6:a3:a0:cf:f8:69:02:18:5f:43:f2:05:a6:cb:
34:57:c4:91:9a:49:87:f7:34:d2:35:50:c6:eb:d2:5c:7f:74:
85:cf:6f:a1:df:7c:3c:b5:77:d2:7b:b5:6e:de:68:67:7a:34:
6a:73:5d:e1:a2:d2:5b:cd:be:cc:49:45:41:37:9e:50:61:8b:
3e:2c:e4:c9:7c:ec:99:97:f6:4b:a3:d6:12:7f:6e:66:ee:bf:
c7:cc:52:b1:19:1c:6f:cc:c8:29:4c:89:d8:18:30:97:22:2c:
55:74:32:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:03:11 2026 by rpki-client