Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/pPpBqCzBnHPNT5yoII_XyWraCp0.roa
File: pPpBqCzBnHPNT5yoII_XyWraCp0.roa (raw, json)
Hash identifier: Bco4qt1MMOqcSlE3VTwAyh8x4L3Es84ii+IIgs4gkTA=
Subject key identifier: A4:FA:41:A8:2C:C1:9C:73:CD:4F:9C:A8:20:8F:D7:C9:6A:DA:0A:9D
Certificate issuer: /CN=4587a688a89a989949416a819cc4a80dea454c9d
Certificate serial: 01A0817320C5C0AC47D5BF3556003AA428F3
Authority key identifier: 45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/pPpBqCzBnHPNT5yoII_XyWraCp0.roa
Signing time: Tue 08 Sep 2026 14:36:40 +0000
ROA not before: Tue 08 Sep 2026 14:36:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30914
IP address blocks: 83.98.0.0/19 maxlen: 19
83.98.64.0/20 maxlen: 20
83.98.96.0/19 maxlen: 19
185.173.64.0/23 maxlen: 23
185.173.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:73:20:c5:c0:ac:47:d5:bf:35:56:00:3a:a4:28:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4587a688a89a989949416a819cc4a80dea454c9d
Validity
Not Before: Sep 8 14:36:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4fa41a82cc19c73cd4f9ca8208fd7c96ada0a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0f:8f:9b:65:6f:20:ca:fd:d2:c1:40:7b:f0:
52:3d:09:75:c9:78:04:a9:0b:07:82:a0:bb:2d:c3:
bd:09:37:88:55:48:20:be:ac:c8:5b:74:78:da:7b:
96:a7:c3:de:da:11:5a:76:58:53:be:ea:06:36:51:
97:6f:4a:72:cc:ff:5c:ee:4f:28:38:bd:c4:88:53:
e4:52:ee:2c:5d:1e:87:6f:fb:22:a2:e8:89:57:af:
df:34:93:d4:ff:0a:1e:c3:47:c6:98:c7:68:d0:a5:
36:67:7c:fc:89:4e:8c:4d:35:f2:65:2d:97:89:5e:
f3:66:29:55:37:fe:e3:e3:8d:cb:42:d5:9c:b9:22:
0d:b1:c3:7e:0d:ad:de:ed:41:4f:f6:a9:7f:77:70:
33:a0:01:30:bb:6f:b0:ea:59:3b:98:8a:39:5d:ec:
32:9f:ca:17:2d:47:9f:a2:e8:37:f1:e2:ae:34:6e:
4a:72:d8:68:e2:cf:a0:b6:2d:ce:24:0c:2a:c9:c5:
09:e8:d8:61:04:b7:d6:17:95:33:a1:7d:73:7d:e2:
22:d1:73:13:ea:1a:c8:3a:b6:d4:c9:a8:b9:4c:da:
94:b1:ca:d3:9d:87:fb:fc:8a:6c:ad:4e:33:0d:d0:
19:46:34:fd:8b:3f:be:24:da:ff:13:b0:9c:c0:bd:
7c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FA:41:A8:2C:C1:9C:73:CD:4F:9C:A8:20:8F:D7:C9:6A:DA:0A:9D
X509v3 Authority Key Identifier:
keyid:45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/pPpBqCzBnHPNT5yoII_XyWraCp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.0.0/19
83.98.64.0/20
83.98.96.0/19
185.173.64.0-185.173.66.255
Signature Algorithm: sha256WithRSAEncryption
a6:86:ec:68:4b:0e:30:d5:e8:44:39:cf:6f:26:6a:1b:75:1e:
61:8a:02:51:a3:5c:d7:09:58:fc:a6:9e:47:d0:0d:89:3b:bc:
a3:a9:9e:b4:7b:d9:a2:d3:79:7a:25:85:6d:44:1c:c1:2b:5c:
12:c7:fe:d5:98:dc:3b:8c:a8:3e:24:df:6a:ae:10:d2:19:17:
58:75:a4:bb:0c:df:83:56:28:90:4b:98:1b:5d:2c:cd:8d:9e:
03:d3:51:b8:62:1f:16:c6:6d:87:e7:bb:77:d5:a1:cc:ac:48:
ea:e6:93:df:cc:5d:41:16:59:73:21:79:eb:b7:69:94:62:cf:
42:f8:f3:85:bb:2c:0e:02:92:6a:51:37:9c:09:b2:c9:c2:f8:
76:61:9c:64:f6:c1:b7:a4:9f:4e:00:7c:64:63:af:73:02:b2:
6c:49:39:15:e1:4e:8e:33:08:35:24:3a:90:85:ab:0c:f0:18:
f1:77:a7:98:16:b0:17:6f:22:76:4b:97:d5:a7:37:0b:3f:df:
40:36:ea:cb:48:c1:2a:6b:51:9d:51:a1:18:01:c7:67:16:b5:
77:10:0a:1c:88:86:9e:4b:63:0c:aa:e8:29:c7:83:0e:41:02:
22:e0:57:c7:56:60:fe:0e:0f:59:00:e9:89:5d:d9:5b:41:b7:
21:73:10:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:53:18 2026 by rpki-client