Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/83juuidbqsnUvKpGJHVrEv2JlUA.roa
File: 83juuidbqsnUvKpGJHVrEv2JlUA.roa (raw, json)
Hash identifier: iXonloz6Sxmjl01Plu1HC3/Q6qL8IKYvIIBaggc6K1Y=
Subject key identifier: F3:78:EE:BA:27:5B:AA:C9:D4:BC:AA:46:24:75:6B:12:FD:89:95:40
Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Certificate serial: 01A077CEDC8324B830BAF621F3F8234B0D7A
Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/83juuidbqsnUvKpGJHVrEv2JlUA.roa
Signing time: Sun 06 Sep 2026 17:40:40 +0000
ROA not before: Sun 06 Sep 2026 17:40:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48198
IP address blocks: 176.65.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:77:ce:dc:83:24:b8:30:ba:f6:21:f3:f8:23:4b:0d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Validity
Not Before: Sep 6 17:40:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f378eeba275baac9d4bcaa4624756b12fd899540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f7:c4:f5:34:24:e6:a0:96:56:75:0e:de:4c:
ee:7a:bf:9e:00:d5:5f:43:7a:c0:e0:a0:d5:ab:35:
84:47:c0:8f:38:cd:02:92:81:0a:1d:70:66:42:7b:
35:9f:1a:dc:44:2e:ee:52:42:82:5a:ef:c6:73:96:
c5:50:c9:27:7f:48:4b:8f:98:2e:08:ed:73:b9:d7:
34:d2:d8:4c:64:6e:8b:ba:85:5a:e4:7c:90:26:31:
d5:5b:ab:f4:a8:54:24:22:c6:7c:41:f7:f4:f0:27:
89:65:b9:84:5a:4b:2a:a8:52:60:8c:2e:bf:d7:b8:
80:c2:91:7e:fc:90:49:ed:ee:16:3b:8c:b8:b6:3d:
11:9e:78:65:a7:ff:36:14:4a:5b:d4:61:13:93:47:
cb:ad:d9:6e:31:31:bd:c6:26:94:73:c1:6a:ad:bc:
43:e8:77:4e:f6:cc:24:42:3d:3d:f9:6e:ce:c9:61:
2e:fb:8f:2f:55:d7:b5:66:e7:d0:1e:9b:7a:1f:27:
c3:89:99:3a:1d:b7:c4:28:52:c3:3a:ea:bf:4c:34:
ef:2b:ee:27:86:84:9d:86:71:af:18:fe:84:fc:f5:
26:19:dc:0d:33:cc:91:f7:d2:e3:4b:e4:b3:37:1b:
18:d8:ca:da:a5:07:42:bf:88:b1:bc:98:42:15:70:
a5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:78:EE:BA:27:5B:AA:C9:D4:BC:AA:46:24:75:6B:12:FD:89:95:40
X509v3 Authority Key Identifier:
keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/83juuidbqsnUvKpGJHVrEv2JlUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.65.143.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:1f:c2:d1:f0:5e:4b:35:11:da:e3:c8:c5:ef:4a:bf:82:ae:
11:2f:13:66:c3:ad:f2:23:16:01:2d:88:77:c7:e0:35:7a:81:
79:18:53:72:91:2a:c8:ac:73:a9:b0:93:65:eb:fe:11:b7:c9:
83:f5:28:ba:36:ae:85:00:0a:eb:93:32:80:ad:81:58:94:91:
71:73:81:15:fc:86:f4:5a:10:c8:e2:3e:a6:2c:3f:e6:c4:fb:
46:87:cd:f9:e8:0f:de:80:2d:4b:41:4a:23:8a:32:b7:a3:6d:
c4:73:c1:94:77:9a:7a:87:a8:99:af:16:00:98:5f:e0:01:71:
41:29:ad:4e:f4:e6:2d:5f:c1:cf:ff:96:9c:89:e1:1b:e6:c0:
8c:95:65:b9:30:bd:4c:4b:5b:89:af:24:d5:c4:51:d8:6b:d6:
31:66:15:3e:b7:4e:b8:60:b7:ff:19:36:fd:61:dd:fc:d8:0d:
7a:8b:14:a7:32:b5:8f:d4:0e:b9:f2:3a:df:7b:12:74:20:4e:
66:8c:b9:17:a8:c5:6d:b7:a9:a8:fc:3b:a0:de:8b:24:de:46:
0e:38:cf:e1:e1:f3:89:2d:76:19:d2:bf:27:f5:cc:c3:9a:a7:
d0:64:ce:c5:e1:9d:d0:a5:77:f2:f3:50:2f:4c:bc:3a:ed:ad:
84:6c:f5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:21:55 2026 by rpki-client