Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/AdgSMzHPUmuKzAlrtS53QR76t1s.roa
File: AdgSMzHPUmuKzAlrtS53QR76t1s.roa (raw, json)
Hash identifier: nKsP5GbM2QK6ia47o/bGf3bfq0W9Ls05zVJw81d/vE0=
Subject key identifier: 01:D8:12:33:31:CF:52:6B:8A:CC:09:6B:B5:2E:77:41:1E:FA:B7:5B
Certificate issuer: /CN=c8528e14b9ba9850562948cd7ac84d2b2b6a371d
Certificate serial: 019F236835190C1A41B1802F37602C449CCB
Authority key identifier: C8:52:8E:14:B9:BA:98:50:56:29:48:CD:7A:C8:4D:2B:2B:6A:37:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFKOFLm6mFBWKUjNeshNKytqNx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/AdgSMzHPUmuKzAlrtS53QR76t1s.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39830
IP address blocks: 83.173.124.0/23 maxlen: 24
83.173.124.0/24 maxlen: 24
83.173.125.0/24 maxlen: 24
83.173.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFKOFLm6mFBWKUjNeshNKytqNx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:35:19:0c:1a:41:b1:80:2f:37:60:2c:44:9c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8528e14b9ba9850562948cd7ac84d2b2b6a371d
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01d8123331cf526b8acc096bb52e77411efab75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:69:18:0e:70:2f:0b:91:7b:78:09:13:ba:ae:
ed:2a:12:dd:f9:03:35:24:4c:5e:73:9c:af:59:66:
82:d0:ee:e7:2e:c2:d6:54:15:2e:58:41:7a:3d:17:
47:ea:24:58:cb:f0:06:b2:35:70:61:7b:17:41:d7:
d7:88:bd:bd:73:d8:d4:c6:26:9b:5d:71:6f:80:92:
ef:a3:35:99:c2:ca:2d:f6:5b:1c:eb:39:4e:33:44:
db:db:2c:3d:ee:2d:c6:2f:eb:25:78:68:0c:4f:ed:
0e:3b:05:dc:b2:96:40:4d:61:f7:a8:e5:e2:03:d7:
56:48:dd:ae:7f:cd:b1:17:5d:bc:80:c0:ad:56:47:
44:9c:33:da:55:79:c2:7d:03:aa:fe:76:43:e7:02:
59:00:4f:3c:f1:c9:a2:15:e5:70:1b:38:5f:22:c1:
f6:cd:71:8a:be:15:2d:3b:78:96:fa:63:f8:0c:23:
e5:25:c8:18:eb:07:1e:e5:85:d3:12:fb:94:cd:6d:
f4:59:29:f0:f9:a1:e5:aa:d1:7e:e9:e4:f2:9c:9b:
a1:56:18:bc:eb:07:00:64:cb:12:87:56:d3:48:09:
5a:80:6e:fb:6d:53:d6:41:c3:ba:96:f6:0c:53:3a:
16:c8:6a:04:bb:10:ca:30:39:4a:68:c7:70:17:d7:
41:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D8:12:33:31:CF:52:6B:8A:CC:09:6B:B5:2E:77:41:1E:FA:B7:5B
X509v3 Authority Key Identifier:
keyid:C8:52:8E:14:B9:BA:98:50:56:29:48:CD:7A:C8:4D:2B:2B:6A:37:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFKOFLm6mFBWKUjNeshNKytqNx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/AdgSMzHPUmuKzAlrtS53QR76t1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.173.124.0-83.173.126.255
Signature Algorithm: sha256WithRSAEncryption
21:12:9f:e5:af:66:e4:39:92:6e:33:8e:7b:2a:b0:8f:72:dc:
fd:92:ca:04:58:c5:b2:6b:a1:57:b8:a2:7d:60:33:34:73:ba:
74:ae:db:a3:c2:9b:4d:4e:91:a1:ed:3f:62:71:92:bf:d1:80:
2a:05:ee:74:fb:df:7a:83:62:3a:9f:bc:06:08:98:17:ae:0c:
40:c9:cc:fa:d2:84:9b:43:b1:dc:04:dd:00:ff:ae:86:f4:52:
b8:3f:9a:4b:30:07:79:3e:9e:2d:0d:05:a4:b5:b4:8b:1b:39:
c6:7f:06:22:3a:05:12:06:18:56:82:7f:b2:09:f3:d7:b8:9f:
74:02:75:24:ad:f0:b1:e6:c5:2f:f6:4b:e6:e2:3f:c1:b7:43:
13:54:ac:57:a4:70:f7:53:a6:b3:c7:28:19:88:59:a1:ea:a6:
4b:7a:e5:d1:b5:d4:18:db:3b:69:e0:56:dc:96:18:e3:de:71:
d0:b7:5d:b9:35:5c:29:c9:08:b5:a4:9a:68:48:c7:fb:2b:44:
33:91:73:7b:d2:dd:50:9d:bf:54:a0:82:4a:eb:eb:c4:5a:29:
66:59:45:f8:5c:b2:83:77:0a:53:54:49:4b:ba:42:95:41:73:
a3:fe:af:fd:cb:19:87:ae:e7:27:9d:9f:e1:48:a5:1e:3c:a4:
12:f2:34:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:48:51 2026 by rpki-client