Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/KRtX5cKPE6AxAzShRn5b_9e8G30.roa
File: KRtX5cKPE6AxAzShRn5b_9e8G30.roa (raw, json)
Hash identifier: vHizpffJEzrEgKRGfyzCmvFG6REIK7np300LcfZvZYc=
Subject key identifier: 29:1B:57:E5:C2:8F:13:A0:31:03:34:A1:46:7E:5B:FF:D7:BC:1B:7D
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01A0CCFE3605077BAF6F513C3AFBC41CCB05
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/KRtX5cKPE6AxAzShRn5b_9e8G30.roa
Signing time: Wed 23 Sep 2026 06:40:07 +0000
ROA not before: Wed 23 Sep 2026 06:40:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.5.0/24 maxlen: 24
83.147.17.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.26.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
83.147.40.0/24 maxlen: 24
83.147.41.0/24 maxlen: 24
83.147.42.0/24 maxlen: 24
83.147.43.0/24 maxlen: 24
83.147.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:fe:36:05:07:7b:af:6f:51:3c:3a:fb:c4:1c:cb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Sep 23 06:40:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=291b57e5c28f13a0310334a1467e5bffd7bc1b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:21:c6:29:44:2e:b6:4a:90:a8:69:87:a9:
ac:73:65:70:17:e7:61:23:fb:ae:45:b8:b1:5d:70:
37:7e:88:46:ef:1f:7e:52:a6:69:48:32:02:4c:9f:
ab:5d:c8:d6:07:fe:e5:76:7d:76:ed:49:14:22:b0:
00:4c:9a:48:fb:ef:f1:38:79:8a:61:7c:24:16:a8:
16:bd:19:a5:6b:8a:19:68:a7:1d:fb:bd:30:75:4f:
f3:65:51:af:30:27:7c:bf:75:e4:91:78:bb:4e:d8:
83:d2:69:e2:0e:86:2c:e8:98:6d:d7:56:5f:9e:e9:
88:6c:11:c8:25:e7:04:af:57:2e:97:64:ab:45:0f:
0d:d4:f8:15:a5:00:25:94:52:63:a6:e8:15:6e:8e:
a0:b8:f3:46:99:f1:ff:a5:80:45:54:80:e5:b2:a4:
33:08:bc:48:54:61:80:18:d0:4e:95:af:a3:36:cc:
25:f2:5a:ec:ce:30:cd:87:b6:35:46:ae:89:ad:83:
1c:3f:e3:21:6c:ff:36:cd:8d:25:6d:1f:8e:d0:14:
48:d4:c7:72:98:bf:a8:4b:ac:ea:97:91:73:d1:cd:
e7:a2:7a:19:3f:86:24:ae:74:5f:2f:09:d3:8c:78:
39:07:17:e9:b2:90:58:bf:69:38:76:7c:24:5b:ca:
cd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1B:57:E5:C2:8F:13:A0:31:03:34:A1:46:7E:5B:FF:D7:BC:1B:7D
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/KRtX5cKPE6AxAzShRn5b_9e8G30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.5.0/24
83.147.17.0/24
83.147.21.0/24
83.147.26.0/23
83.147.40.0/21
Signature Algorithm: sha256WithRSAEncryption
35:3f:53:45:05:c7:33:3a:43:57:15:56:9d:f7:88:c8:4e:97:
54:44:f6:d5:b2:f3:6b:1a:8e:14:88:91:53:9c:04:af:12:92:
00:0f:91:29:50:f1:0e:03:3c:ff:37:7f:b0:eb:99:8a:10:77:
d9:98:5c:be:b8:c5:14:ff:b4:c3:03:37:e0:23:25:d5:2c:7d:
74:88:2b:fc:b4:dd:32:e9:fc:7b:3e:ad:ce:7c:1f:ac:27:53:
1b:7c:de:e5:c5:69:d1:3b:de:25:fd:d8:25:a2:df:f4:72:08:
02:06:3c:b1:4b:d4:38:7a:e4:2f:c5:47:3b:5e:ab:52:b0:ae:
b5:43:96:d7:a0:0f:32:d9:da:56:fc:be:94:39:33:6b:cd:c7:
41:50:f9:7f:27:a3:54:a5:56:c9:df:34:63:f2:cb:e8:11:a3:
17:d5:b4:aa:12:b6:38:8f:33:c6:e1:e6:ea:6f:22:89:df:22:
df:90:cc:2e:44:04:54:7c:d7:0c:7a:ea:76:40:d2:bd:76:75:
59:e4:2b:e8:f0:39:9a:e1:c4:1f:8c:f2:62:5d:b7:88:6d:0c:
7d:57:48:2d:4c:c2:ec:76:b1:f8:53:e3:6e:c8:33:75:61:fd:
6e:8f:8a:d0:61:b1:7a:61:cc:88:28:34:f0:e9:7c:23:5b:64:
c3:8b:ab:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:54:48 2026 by rpki-client