Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/0k-1e23Nnsj5tw_awEN0WvPaAY0.roa
File: 0k-1e23Nnsj5tw_awEN0WvPaAY0.roa (raw, json)
Hash identifier: BtLailLpSoIf7271BKNE7tm6wk0WQ2XZ6vsIZUFj/0A=
Subject key identifier: D2:4F:B5:7B:6D:CD:9E:C8:F9:B7:0F:DA:C0:43:74:5A:F3:DA:01:8D
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A0476CD46196909714A5A07B91E80A99D2
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/0k-1e23Nnsj5tw_awEN0WvPaAY0.roa
Signing time: Fri 28 Aug 2026 08:11:49 +0000
ROA not before: Fri 28 Aug 2026 08:11:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 213.189.17.0/24 maxlen: 24
213.189.24.0/24 maxlen: 24
213.189.25.0/24 maxlen: 24
213.189.26.0/24 maxlen: 24
213.214.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:6c:d4:61:96:90:97:14:a5:a0:7b:91:e8:0a:99:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Aug 28 08:11:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d24fb57b6dcd9ec8f9b70fdac043745af3da018d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:3e:5c:1e:fe:0a:b8:13:c2:14:51:20:07:
85:62:3a:54:25:5a:f7:e8:9b:b6:6a:21:60:c8:00:
90:f8:51:c5:65:14:f8:60:d8:d0:9d:fa:3a:97:70:
60:62:e5:82:53:7a:b8:c2:59:59:7f:bd:6e:3a:43:
02:d0:ee:3c:74:47:2c:9c:e3:0d:11:b0:40:5f:b4:
d3:be:3e:c3:a4:4e:76:75:98:e1:2e:5b:62:b8:e3:
45:9b:34:e6:39:6b:72:c4:cb:de:b6:ce:76:c3:fb:
a4:0a:63:91:10:ba:21:dd:87:0a:51:a3:fb:f6:0b:
3a:55:1e:1f:4d:59:85:1a:33:d1:9f:34:7a:8b:f6:
13:c2:5e:89:af:15:30:dc:10:5b:a1:2f:81:44:e0:
e9:1b:72:db:72:ac:41:59:6e:b9:83:a5:4b:7c:21:
4e:53:83:6d:75:e7:99:e5:83:83:92:e4:0c:8c:1a:
75:af:bb:75:ba:28:c4:e9:2e:d2:05:e9:80:be:a3:
3b:c4:da:1b:7c:7e:d4:11:00:ca:c2:64:01:36:de:
e8:19:c6:2d:a3:60:a6:20:43:4b:81:a2:1e:0b:18:
82:c1:a1:54:f6:7b:7b:00:4a:85:4f:3d:b4:d0:82:
75:ef:11:42:de:a4:b0:cf:9a:b5:9a:90:7c:00:ba:
df:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4F:B5:7B:6D:CD:9E:C8:F9:B7:0F:DA:C0:43:74:5A:F3:DA:01:8D
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/0k-1e23Nnsj5tw_awEN0WvPaAY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.189.17.0/24
213.189.24.0-213.189.26.255
213.214.104.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:9a:32:a2:5f:73:86:a7:19:94:df:d6:37:12:98:e4:4f:79:
6c:4c:bd:73:4d:e8:32:84:69:30:c9:04:d0:69:1a:06:fc:b2:
62:e5:9d:41:5e:44:b3:29:74:6e:ee:1e:63:4a:ed:d3:8d:df:
6d:da:ab:93:35:0f:9c:c3:61:83:a8:94:d5:99:5b:fd:c9:e0:
f2:0f:b2:50:5d:33:25:74:c8:1a:a4:a6:59:ed:eb:1b:42:f1:
da:b3:6a:e7:54:ae:2e:29:61:ed:29:60:39:9f:63:da:1d:07:
78:44:95:72:47:25:55:41:c0:64:fb:68:8a:3e:bb:cb:06:cf:
6a:40:27:cd:47:a6:c5:0a:9d:76:8c:71:c4:50:5a:e4:fe:a3:
79:c2:c4:02:85:1e:d7:07:fb:29:d7:cf:ee:2f:28:bd:95:0b:
91:08:c1:c5:03:96:c4:99:ae:01:f0:2d:d2:2b:65:dd:77:2c:
eb:0a:72:b5:bf:6c:17:9e:af:d7:4d:cc:dd:4f:c7:ca:8d:09:
69:23:ff:10:35:33:13:a0:f5:2d:b2:43:a3:78:83:63:cc:5e:
0a:c1:d8:29:12:e8:d6:62:8a:a8:1c:69:7f:eb:ff:fc:87:81:
6c:3f:fd:33:73:99:3b:9a:d2:1c:d3:0c:a0:fc:74:22:ae:f4:
5f:0a:75:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:20:12 2026 by rpki-client