Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/jHhucjS6rzq4LN2rvyS2iskgBNI.roa
File: jHhucjS6rzq4LN2rvyS2iskgBNI.roa (raw, json)
Hash identifier: g+Y6tR/dGzmgE/vp6Szul5aJGQ4akHMTRzBjCgyoRzU=
Subject key identifier: 8C:78:6E:72:34:BA:AF:3A:B8:2C:DD:AB:BF:24:B6:8A:C9:20:04:D2
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01A0CC704EA2D579A59BAE98E0322E300D58
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/jHhucjS6rzq4LN2rvyS2iskgBNI.roa
Signing time: Wed 23 Sep 2026 04:05:07 +0000
ROA not before: Wed 23 Sep 2026 04:05:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 83.147.44.0/24 maxlen: 24
83.147.45.0/24 maxlen: 24
83.147.46.0/24 maxlen: 24
83.147.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:70:4e:a2:d5:79:a5:9b:ae:98:e0:32:2e:30:0d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Sep 23 04:05:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c786e7234baaf3ab82cddabbf24b68ac92004d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:bf:4f:ba:7a:2a:d4:8f:71:28:42:1a:82:
95:e9:3a:2e:d6:2a:d5:73:e4:82:b5:22:08:27:65:
af:c3:02:40:96:ff:4b:13:d6:52:1e:47:73:d9:a7:
26:09:85:91:3c:ed:2f:bf:27:08:c9:d0:7f:3c:e8:
1c:5f:b3:82:0e:e3:83:3e:a6:cb:bd:bd:1e:d5:69:
c2:06:a2:4c:a4:a1:c7:66:c8:49:49:27:d2:cc:c2:
54:05:30:58:b8:92:59:bf:56:fc:03:2d:8a:4d:9d:
ec:71:20:6b:6e:40:65:61:9b:5f:a3:7f:55:89:67:
f3:48:f1:04:97:e8:b6:0b:06:21:0d:ab:b0:f4:f0:
5f:7a:cf:fa:a5:5e:43:53:60:54:c0:70:14:78:59:
91:7a:d7:dd:e8:51:de:10:e9:a7:63:54:ff:cc:cf:
2b:4c:71:e8:55:e6:8c:2d:23:3a:57:6c:12:83:05:
39:29:89:50:31:78:e8:ff:ae:6a:bc:24:69:3a:9c:
ee:5f:6a:90:78:82:e8:59:00:5f:94:1a:70:97:ca:
dc:1c:c6:35:ce:6f:d2:4d:68:e1:79:6f:24:e6:11:
4c:3e:b6:35:a7:b8:2d:a4:9c:6f:0c:f3:c4:59:6e:
83:2c:a0:ba:57:0f:0f:9c:c2:36:72:25:99:56:67:
43:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:78:6E:72:34:BA:AF:3A:B8:2C:DD:AB:BF:24:B6:8A:C9:20:04:D2
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/jHhucjS6rzq4LN2rvyS2iskgBNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.44.0/22
Signature Algorithm: sha256WithRSAEncryption
45:d3:99:22:8d:5e:d2:36:71:28:b2:ca:76:6f:53:7a:68:b2:
01:a0:f8:68:5f:d3:7b:70:87:38:bc:77:67:d4:f5:ab:b3:b0:
40:8f:89:c2:0f:cf:5a:8d:db:ce:6a:ab:a3:c8:a9:18:6c:bc:
f7:f5:5e:97:a6:c5:3b:e4:09:ba:f6:6a:7a:14:e3:8c:fb:20:
b9:de:80:fb:a6:a4:c4:ed:c6:68:ae:c4:06:d8:a5:32:2e:17:
e7:ac:34:b7:97:d6:5f:bf:b1:c3:f3:f5:9d:3d:b5:66:2d:d2:
4b:76:11:bd:22:34:1f:1f:33:f4:c7:8a:44:0f:ce:9e:b4:65:
bb:68:6b:f5:cf:f1:bb:29:77:82:18:5c:13:23:8f:6a:b9:d6:
b4:dd:12:6e:ce:c8:cc:f2:4f:aa:f1:c8:61:18:f0:3c:89:e6:
5c:3d:28:a2:31:01:7e:69:c2:7d:5b:e0:09:be:81:60:c8:aa:
d4:1a:53:88:f7:d5:e3:b4:e4:b7:72:eb:31:b6:32:d2:b2:d6:
64:51:b2:75:94:e9:74:49:27:64:67:88:c4:fd:fe:d8:d7:99:
1b:a6:16:78:ef:db:08:65:a3:a2:2e:fb:37:ff:7b:5d:a1:02:
5e:86:28:c2:15:0c:8f:5d:a4:42:83:8a:96:34:f8:08:e0:d8:
23:8b:2e:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDMcE6i1Xmlm66Y4DIuMA1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjYwOTIzMDQwNTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Yzc4NmU3MjM0YmFhZjNhYjgyY2RkYWJiZjI0YjY4YWM5MjAwNGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7q/T7p6KtSPcShCGoKV6Tou1irV
c+SCtSIIJ2WvwwJAlv9LE9ZSHkdz2acmCYWRPO0vvycIydB/POgcX7OCDuODPqbL
vb0e1WnCBqJMpKHHZshJSSfSzMJUBTBYuJJZv1b8Ay2KTZ3scSBrbkBlYZtfo39V
iWfzSPEEl+i2CwYhDauw9PBfes/6pV5DU2BUwHAUeFmRetfd6FHeEOmnY1T/zM8r
THHoVeaMLSM6V2wSgwU5KYlQMXjo/65qvCRpOpzuX2qQeILoWQBflBpwl8rcHMY1
zm/STWjheW8k5hFMPrY1p7gtpJxvDPPEWW6DLKC6Vw8PnMI2ciWZVmdDawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIx4bnI0uq86uCzdq78ktorJIATSMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvakhodWNqUzZyenE0TE4ycnZ5UzJpc2tnQk5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5MsMA0G
CSqGSIb3DQEBCwUAA4IBAQBF05kijV7SNnEossp2b1N6aLIBoPhoX9N7cIc4vHdn
1PWrs7BAj4nCD89ajdvOaqujyKkYbLz39V6XpsU75Am69mp6FOOM+yC53oD7pqTE
7cZorsQG2KUyLhfnrDS3l9Zfv7HD8/WdPbVmLdJLdhG9IjQfHzP0x4pED86etGW7
aGv1z/G7KXeCGFwTI49quda03RJuzsjM8k+q8chhGPA8ieZcPSiiMQF+acJ9W+AJ
voFgyKrUGlOI99XjtOS3cusxtjLSstZkUbJ1lOl0SSdkZ4jE/f7Y15kbphZ479sI
ZaOiLvs3/3tdoQJehijCFQyPXaRCg4qWNPgI4Ngjiy55
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:31:50 2026 by rpki-client