Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/S3l9n0dTP3FXhNcpLdf8YCRxkuo.roa
File: S3l9n0dTP3FXhNcpLdf8YCRxkuo.roa (raw, json)
Hash identifier: bOQ4f+wL3ADi6V1m/4nIBmXdvzaUBsd7Lu728OmlsTo=
Subject key identifier: 4B:79:7D:9F:47:53:3F:71:57:84:D7:29:2D:D7:FC:60:24:71:92:EA
Certificate issuer: /CN=c8528e14b9ba9850562948cd7ac84d2b2b6a371d
Certificate serial: 019F23683493FC037A168537D94F9BC950D6
Authority key identifier: C8:52:8E:14:B9:BA:98:50:56:29:48:CD:7A:C8:4D:2B:2B:6A:37:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFKOFLm6mFBWKUjNeshNKytqNx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/S3l9n0dTP3FXhNcpLdf8YCRxkuo.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34572
IP address blocks: 83.173.64.0/19 maxlen: 19
83.173.64.0/21 maxlen: 21
83.173.72.0/21 maxlen: 21
83.173.80.0/21 maxlen: 21
83.173.88.0/21 maxlen: 24
83.173.96.0/21 maxlen: 21
83.173.112.0/22 maxlen: 24
83.173.115.0/24 maxlen: 24
83.173.116.0/24 maxlen: 24
185.170.151.0/24 maxlen: 24
2a02:6100::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFKOFLm6mFBWKUjNeshNKytqNx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:34:93:fc:03:7a:16:85:37:d9:4f:9b:c9:50:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8528e14b9ba9850562948cd7ac84d2b2b6a371d
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b797d9f47533f715784d7292dd7fc60247192ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:de:88:b7:a9:87:27:2d:3f:fb:64:c2:1b:
46:56:15:6d:ed:ee:f8:d1:b7:f4:94:86:42:d7:a1:
14:04:2a:f4:10:8a:d9:68:22:0e:b1:62:16:be:43:
3f:ac:62:4a:af:e8:5b:f6:88:47:4f:f6:43:81:1b:
c4:84:ee:46:9b:d4:30:34:79:c2:53:72:70:44:df:
76:97:cd:3c:86:b2:34:81:bd:1c:99:b7:2d:60:99:
94:fb:db:be:93:7f:3c:24:ff:ba:37:56:0b:15:99:
70:7d:9b:a9:30:1e:f6:70:a7:eb:ed:96:8c:41:05:
26:e5:61:f8:6e:62:69:39:42:4a:5c:90:49:ec:d4:
98:60:c6:e5:31:13:c2:3e:51:8c:d9:78:92:ca:12:
d4:42:7a:bb:da:c0:da:26:31:9f:fb:18:34:7e:e1:
91:c9:e1:fc:fb:ef:75:c1:f8:0d:1c:f5:2c:d5:ae:
86:a7:8c:02:10:aa:a5:9f:08:0f:0e:ca:58:cd:90:
fd:30:2e:9e:e7:fd:ee:70:dc:66:40:1c:98:28:6d:
d1:c0:24:5b:4b:5f:b1:61:af:57:6a:c0:d7:4b:33:
3e:d4:df:31:06:1b:fb:59:4c:39:c8:66:f4:a8:98:
57:82:b9:34:0d:a1:56:f4:ee:5e:c1:7f:c0:62:71:
42:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:79:7D:9F:47:53:3F:71:57:84:D7:29:2D:D7:FC:60:24:71:92:EA
X509v3 Authority Key Identifier:
keyid:C8:52:8E:14:B9:BA:98:50:56:29:48:CD:7A:C8:4D:2B:2B:6A:37:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFKOFLm6mFBWKUjNeshNKytqNx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/S3l9n0dTP3FXhNcpLdf8YCRxkuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.173.64.0-83.173.103.255
83.173.112.0-83.173.116.255
185.170.151.0/24
IPv6:
2a02:6100::/32
Signature Algorithm: sha256WithRSAEncryption
2d:c9:02:36:75:11:91:d9:e8:bc:27:6c:f3:a0:a9:7e:ce:e4:
16:a2:e1:9d:cc:66:47:98:6f:7d:75:24:3b:91:f2:60:2c:f7:
8c:f6:2a:53:8f:b6:b2:ac:ca:9f:a6:1d:e4:40:33:fb:71:3f:
ad:f0:a8:c2:05:bd:3a:9c:ce:08:8f:59:3c:9c:78:99:cc:c9:
a4:b2:9e:e4:53:d6:97:96:04:c8:2d:f9:2a:b5:84:3a:de:72:
1c:ca:dc:92:0a:69:fc:2a:ae:25:2c:93:cd:3a:c0:a9:72:2b:
02:20:bd:17:8b:3c:62:a8:dd:0a:36:ae:18:f5:8c:1e:79:49:
d9:be:8e:f1:04:bf:8a:b6:db:45:03:b6:b0:78:8d:da:d8:bb:
3f:45:20:b7:7a:77:6a:4f:b3:cf:ac:ea:ed:ed:05:39:d5:9c:
7c:43:a8:f1:14:ca:2f:e4:58:bd:c5:ca:6f:3e:4a:de:7e:b5:
90:5e:31:b0:e5:d8:9b:90:82:29:00:d0:8e:92:80:03:4d:d0:
65:cd:84:4e:c0:d5:a7:63:6e:8a:d3:64:98:aa:1f:29:af:e7:
78:74:8a:7a:94:c6:5c:b3:4c:cb:17:12:26:a0:be:4c:0e:af:
d7:4f:9b:5f:21:f7:60:0c:cb:03:9b:5d:77:5c:16:91:2a:62:
09:ae:f9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:07 2026 by rpki-client