Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/83GF1EPpQbpFcmXpmxHY38r3lMI.roa
File: 83GF1EPpQbpFcmXpmxHY38r3lMI.roa (raw, json)
Hash identifier: UZiB8MlI8mOHWARYjqzZAD/5QJPZX320H0hVfxUdIAg=
Subject key identifier: F3:71:85:D4:43:E9:41:BA:45:72:65:E9:9B:11:D8:DF:CA:F7:94:C2
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0CEF5B7930502C235C7762DC08817F3BB
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/83GF1EPpQbpFcmXpmxHY38r3lMI.roa
Signing time: Wed 23 Sep 2026 15:50:04 +0000
ROA not before: Wed 23 Sep 2026 15:50:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219005
IP address blocks: 212.212.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:f5:b7:93:05:02:c2:35:c7:76:2d:c0:88:17:f3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 23 15:50:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f37185d443e941ba457265e99b11d8dfcaf794c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:cf:7f:9e:20:1d:29:aa:c3:76:74:c5:e7:
6c:8f:82:1b:ae:fb:c4:bb:53:be:64:a4:2c:19:f3:
f5:19:d1:ce:a4:44:85:c9:88:44:2f:d1:ee:3e:89:
19:18:b1:84:5d:88:67:c6:3e:44:e7:4f:4d:6f:5d:
df:14:ce:cb:ba:78:63:0a:f3:68:ca:5a:af:bd:6f:
0b:ed:73:a4:09:c5:55:ba:02:01:62:0a:aa:c5:18:
bf:e2:08:34:6d:cd:fd:77:d1:1e:77:52:68:5f:e4:
fb:1a:50:e6:eb:b9:f8:f0:7a:ca:a9:01:6f:e5:59:
db:cb:9c:01:3f:bf:bf:c7:77:bc:53:ab:ea:1f:64:
2c:a0:51:b6:38:03:1b:b1:ac:5f:65:c8:6a:c1:5f:
fe:40:25:bd:62:cf:73:3a:c7:6d:df:19:eb:c6:1c:
44:23:de:b1:5f:40:51:09:8a:12:37:1f:9c:4d:06:
c4:28:04:06:ef:16:f0:7c:cc:96:25:63:75:1f:0c:
64:10:d2:b8:b2:86:0e:2a:4a:a1:51:2f:23:fa:ac:
36:db:b5:a6:f2:f5:bc:27:bc:ac:df:82:6a:15:a6:
78:16:48:76:fe:50:b9:c1:5f:02:bf:a4:c1:5a:28:
d1:e9:9a:df:4f:7b:91:58:0e:1c:1d:26:7b:95:0f:
59:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:71:85:D4:43:E9:41:BA:45:72:65:E9:9B:11:D8:DF:CA:F7:94:C2
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/83GF1EPpQbpFcmXpmxHY38r3lMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.212.26.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:29:e3:72:ce:5a:ef:ba:30:c3:88:cc:89:ff:ff:7c:2e:e9:
a5:f4:95:d5:25:14:f5:26:cb:39:25:d5:d2:c4:0f:19:29:ac:
c3:01:b2:f9:a5:c7:16:65:d8:f7:d2:be:85:0f:c3:dc:c7:22:
50:bd:5f:ce:c4:32:4f:94:f7:7e:c2:33:14:03:a8:be:c4:ab:
7c:b6:93:14:79:c0:a0:c6:55:7e:a8:03:5b:36:02:0b:ae:92:
5c:53:16:c3:14:dd:db:20:68:91:47:dd:3e:f4:ff:df:e8:25:
24:9c:2b:6c:38:67:b5:35:90:ad:ac:7c:30:12:9d:00:4b:2f:
99:f3:e3:6e:17:7e:a1:17:12:79:27:e9:34:5b:d7:1c:1e:0f:
b0:72:bf:8a:aa:40:83:5e:de:88:04:93:6b:06:48:b8:99:65:
7f:39:d8:3a:a5:87:0e:34:45:61:e1:9b:58:ee:5e:51:8c:26:
b2:37:59:c1:73:73:46:3b:cb:d4:d8:29:5b:9a:24:63:cd:ba:
0f:12:73:b2:b6:70:05:27:a6:38:14:e5:f8:cc:4f:d6:a0:5f:
5e:93:73:49:01:f7:88:af:dd:97:96:91:2d:56:77:2a:93:db:
76:9f:ca:73:38:aa:51:09:84:bb:a6:78:ed:68:11:83:16:15:
3c:c3:67:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:43:19 2026 by rpki-client