Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/2gbFKJ0nqUHzapt__2eHr8W8Bg4.roa
File: 2gbFKJ0nqUHzapt__2eHr8W8Bg4.roa (raw, json)
Hash identifier: qZeLni3Q5JjJGxy8oDD1trgs7MLI0qv3fQ3YEIYR3x4=
Subject key identifier: DA:06:C5:28:9D:27:A9:41:F3:6A:9B:7F:FF:67:87:AF:C5:BC:06:0E
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 019DDD6C353FC982A4E03ABB59201B4DD6CD
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/2gbFKJ0nqUHzapt__2eHr8W8Bg4.roa
Signing time: Thu 30 Apr 2026 08:05:49 +0000
ROA not before: Thu 30 Apr 2026 08:05:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 83.147.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:6c:35:3f:c9:82:a4:e0:3a:bb:59:20:1b:4d:d6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Apr 30 08:05:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da06c5289d27a941f36a9b7fff6787afc5bc060e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d5:30:4f:ac:7a:fa:66:a0:85:80:62:85:b2:
92:3f:f9:12:7d:72:a6:6b:2b:d0:69:82:a1:e8:1c:
0b:a5:f1:7e:d7:7c:8c:6c:eb:b5:94:f9:25:ed:42:
12:b3:15:73:8d:d4:4c:0a:83:8b:c6:ac:7b:c0:16:
dd:78:22:c5:96:c0:c1:b1:c7:ee:2c:bf:03:48:4c:
ca:73:32:31:5e:76:1f:e5:46:8f:8c:58:b7:96:54:
bb:79:8e:71:cc:3c:95:77:54:8f:b2:21:bd:fc:b1:
f7:b5:a5:a2:44:17:e0:20:4b:98:3c:73:10:e0:91:
aa:b6:b2:b6:ee:2b:d4:c1:a3:d2:6b:32:48:8b:59:
34:d7:66:86:6c:29:39:62:e9:d1:77:b9:69:42:55:
d5:10:86:f6:7e:90:db:5b:34:c6:a0:10:c5:99:0d:
b7:ee:85:e2:8e:2f:63:ce:b1:86:71:64:f6:d9:de:
51:bf:08:a4:e4:ea:c1:04:73:d6:04:16:99:d8:9b:
62:e9:fa:68:16:71:e2:3b:d1:2c:00:ed:2a:7f:1b:
5a:6f:ff:2f:82:f9:39:04:26:9a:08:6a:e0:dc:19:
7d:46:43:af:8f:4e:7b:9a:73:12:0e:01:88:94:73:
5b:0d:d8:19:c1:7e:22:92:3d:15:6c:a1:64:dc:c4:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:06:C5:28:9D:27:A9:41:F3:6A:9B:7F:FF:67:87:AF:C5:BC:06:0E
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/2gbFKJ0nqUHzapt__2eHr8W8Bg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
Signature Algorithm: sha256WithRSAEncryption
11:b4:45:c9:df:9c:93:98:3f:0f:1e:50:19:ee:e0:56:68:fa:
20:44:fd:39:6d:5d:33:f2:38:8b:d0:c0:04:f8:cd:c3:ab:d1:
9d:30:87:0f:7d:99:4a:1e:48:59:4e:a7:31:df:80:d3:f0:93:
24:1b:c8:7c:42:1a:b0:d7:2d:d5:6d:71:5d:b8:58:49:59:3f:
83:e4:db:c9:36:88:46:2c:29:c6:1d:33:5c:e4:db:c4:95:6b:
a7:24:a6:7d:86:78:d6:6a:38:c6:a0:44:8c:7e:cf:e3:9e:23:
7d:77:d2:ee:f6:2c:d8:d7:d3:18:7e:8e:83:76:61:8b:7d:a7:
d0:86:d3:f5:2b:67:24:3a:9b:fb:d6:d4:cf:33:e2:42:58:03:
ca:36:ec:d4:f4:83:1a:75:a3:b9:7e:4e:41:fe:f8:1d:fe:d8:
6b:c0:79:77:41:a6:05:e0:da:36:f9:80:f1:89:d5:74:ff:45:
78:be:41:59:75:9f:d4:14:63:33:80:85:47:9f:1b:17:15:3f:
90:7a:e5:c7:f9:bd:c2:c1:63:1f:52:a7:f9:25:c3:66:df:57:
d1:9d:ae:b3:45:0d:0c:15:ee:6c:7a:94:ce:8e:c7:62:f0:00:
f2:e9:87:24:e9:07:81:ad:b5:04:40:2f:b3:93:fc:9c:b5:90:
fd:2c:ae:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:15 2026 by rpki-client