Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/2cdPGUqWayMoC8AjapDtjCy2Eyk.roa
File: 2cdPGUqWayMoC8AjapDtjCy2Eyk.roa (raw, json)
Hash identifier: zgdWg0Un106wWMBqFjwFV8iVRBPYz82mUjaUTeC/msY=
Subject key identifier: D9:C7:4F:19:4A:96:6B:23:28:0B:C0:23:6A:90:ED:8C:2C:B6:13:29
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01998469FDC016DAF725290CB5A53E401E55
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/2cdPGUqWayMoC8AjapDtjCy2Eyk.roa
Signing time: Fri 26 Sep 2025 05:06:02 +0000
ROA not before: Fri 26 Sep 2025 05:06:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 83.147.4.0/22 maxlen: 24
83.147.16.0/22 maxlen: 24
83.147.20.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.22.0/24 maxlen: 24
83.147.26.0/23 maxlen: 24
83.147.26.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
83.147.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:84:69:fd:c0:16:da:f7:25:29:0c:b5:a5:3e:40:1e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Sep 26 05:06:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9c74f194a966b23280bc0236a90ed8c2cb61329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:94:f2:45:dd:cc:26:9a:d3:d2:db:7d:85:d4:
7d:c5:85:1e:18:33:01:a3:5b:d5:8f:6d:74:5c:73:
7e:59:3e:78:59:c1:11:38:d7:36:de:d5:73:16:97:
a9:11:80:81:da:cf:13:ff:57:39:4b:5d:da:6d:89:
af:0d:11:c7:bc:17:50:1f:7c:a8:45:2f:fc:e6:fb:
35:44:2d:b2:57:43:95:e6:db:05:22:46:82:25:28:
f9:e2:2d:91:61:7c:12:c7:f2:4f:96:8c:c9:9b:8a:
dd:8d:58:cd:d8:6c:d4:57:43:57:d6:87:5d:06:1b:
1a:4b:3a:36:3a:c7:5d:38:a6:a4:d5:97:82:ec:bd:
ef:57:b2:88:f6:c9:d0:12:45:df:68:67:7f:74:d5:
da:84:b3:65:f8:c2:8d:08:c9:cf:de:e5:68:b8:87:
02:33:a2:8a:68:c9:27:49:de:01:1f:a4:a3:7f:0e:
2c:55:04:2c:aa:93:24:9d:5f:6a:16:4e:16:54:e2:
62:f5:ac:ca:e4:01:ae:ed:32:c4:39:04:2a:c8:0d:
08:e9:8a:03:f6:9a:91:0e:ed:55:ba:a7:d3:c9:63:
0b:cd:a3:e0:5c:24:de:3b:d4:df:b5:cc:6b:01:ff:
f3:3c:a3:4d:19:ee:39:96:3f:59:ca:ba:8a:e2:8a:
a0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C7:4F:19:4A:96:6B:23:28:0B:C0:23:6A:90:ED:8C:2C:B6:13:29
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/2cdPGUqWayMoC8AjapDtjCy2Eyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.4.0/22
83.147.16.0-83.147.22.255
83.147.26.0-83.147.28.255
Signature Algorithm: sha256WithRSAEncryption
31:91:be:18:d0:db:ec:13:9a:d1:35:bb:1f:24:c3:cf:da:2f:
ed:fa:5a:06:68:f7:7f:af:6c:3c:77:31:98:68:80:df:12:6d:
42:fb:65:6d:eb:06:4d:3c:47:2b:1b:67:ff:34:09:ea:86:ab:
28:b3:a6:20:af:94:17:3e:68:f4:01:fd:f9:61:45:05:71:46:
f4:6b:29:49:90:38:d6:39:d7:69:31:ba:90:0c:33:98:0b:6e:
3e:f4:8d:20:b0:31:b2:ef:0f:c0:c4:a4:9b:ed:fb:c0:e5:8d:
28:e9:f6:f5:d5:08:dd:e3:7e:ba:54:ba:a6:54:fc:c1:97:5d:
ba:73:a5:2d:b5:e7:3d:b8:2e:11:36:ae:8c:c4:58:c8:8c:27:
86:55:dd:1d:d4:53:18:a2:54:08:66:0d:cf:4d:54:6a:dd:ed:
22:74:b6:6c:bf:2c:83:da:14:f5:df:4a:cc:5e:3a:cc:df:08:
25:40:34:f7:16:f9:2a:94:38:07:8b:ff:10:0f:9e:2a:dd:09:
94:26:f4:16:7d:38:2b:49:86:88:c0:fe:de:d3:3b:34:1c:6f:
23:d4:8e:87:c9:13:fa:d6:59:51:6c:5a:fa:f0:69:57:2a:ec:
59:e9:dd:2a:dd:ce:2f:37:f4:79:5a:21:c5:8a:40:45:f1:9f:
1f:b5:22:d7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZmEaf3AFtr3JSkMtaU+QB5VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjUwOTI2MDUwNjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWM3NGYxOTRhOTY2YjIzMjgwYmMwMjM2YTkwZWQ4YzJjYjYxMzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZTyRd3MJprT0tt9hdR9xYUeGDMB
o1vVj210XHN+WT54WcERONc23tVzFpepEYCB2s8T/1c5S13abYmvDRHHvBdQH3yo
RS/85vs1RC2yV0OV5tsFIkaCJSj54i2RYXwSx/JPlozJm4rdjVjN2GzUV0NX1odd
BhsaSzo2OsddOKak1ZeC7L3vV7KI9snQEkXfaGd/dNXahLNl+MKNCMnP3uVouIcC
M6KKaMknSd4BH6Sjfw4sVQQsqpMknV9qFk4WVOJi9azK5AGu7TLEOQQqyA0I6YoD
9pqRDu1VuqfTyWMLzaPgXCTeO9TftcxrAf/zPKNNGe45lj9ZyrqK4oqggwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNnHTxlKlmsjKAvAI2qQ7YwsthMpMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvMmNkUEdVcVdheU1vQzhBamFwRHRqQ3kyRXlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQCU5MEMAwD
BARTkxADBABTkxYwDAMEAVOTGgMEAFOTHDANBgkqhkiG9w0BAQsFAAOCAQEAMZG+
GNDb7BOa0TW7HyTDz9ov7fpaBmj3f69sPHcxmGiA3xJtQvtlbesGTTxHKxtn/zQJ
6oarKLOmIK+UFz5o9AH9+WFFBXFG9GspSZA41jnXaTG6kAwzmAtuPvSNILAxsu8P
wMSkm+37wOWNKOn29dUI3eN+ulS6plT8wZddunOlLbXnPbguETaujMRYyIwnhlXd
HdRTGKJUCGYNz01Uat3tInS2bL8sg9oU9d9KzF46zN8IJUA09xb5KpQ4B4v/EA+e
Kt0JlCb0Fn04K0mGiMD+3tM7NBxvI9SOh8kT+tZZUWxa+vBpVyrsWendKt3OLzf0
eVohxYpARfGfH7Ui1w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:13 2025 by rpki-client