Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/1-0zBT1lgylSb8x2-aAc9ZqBqBVk.roa
File: 1-0zBT1lgylSb8x2-aAc9ZqBqBVk.roa (raw, json)
Hash identifier: 5CRP7SsSnCJL5rSj4NtE2ZZEkcwBzexSUUdMCu4JfX8=
Subject key identifier: FB:4C:C1:4F:59:60:CA:54:9B:F3:1D:BE:68:07:3D:66:A0:6A:05:59
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A066844A9616D9584CAB9D79B246E6A079
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/1-0zBT1lgylSb8x2-aAc9ZqBqBVk.roa
Signing time: Thu 03 Sep 2026 09:05:40 +0000
ROA not before: Thu 03 Sep 2026 09:05:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215728
IP address blocks: 89.30.142.0/24 maxlen: 24
89.30.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:84:4a:96:16:d9:58:4c:ab:9d:79:b2:46:e6:a0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 3 09:05:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb4cc14f5960ca549bf31dbe68073d66a06a0559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:62:dc:d4:33:aa:8c:5a:bf:38:ff:17:55:
8a:bf:13:92:61:b8:0b:fa:0b:32:77:bb:7e:fe:ca:
3f:9a:02:50:fd:1a:91:ba:36:dc:a5:e0:5d:e8:87:
c2:03:35:03:e3:23:90:57:2d:29:d8:55:f2:0b:4a:
49:96:e0:5c:8a:fd:dd:78:83:cc:e3:5a:94:a9:47:
46:0f:30:f7:94:e6:0a:df:dd:09:7f:28:e0:37:27:
8e:75:21:56:d3:21:77:0a:e8:eb:f1:4b:20:e5:bc:
c2:4c:ac:9e:4f:e7:f2:eb:d3:32:03:95:93:be:39:
b3:f0:b3:ec:a8:a9:24:62:00:a7:fc:ab:00:2b:76:
46:91:ae:ec:57:ba:c9:67:1a:ec:f2:33:84:86:97:
4e:28:46:5b:2b:5e:19:f3:71:5c:48:7a:cd:db:d0:
a1:3e:cf:00:d3:75:98:25:9c:d5:c2:ab:26:5b:ec:
3d:cc:17:86:a7:da:24:e1:41:a4:ef:be:43:a7:37:
06:63:49:21:14:f4:d4:bb:59:c7:08:2a:51:83:b1:
5a:15:8a:e6:b5:ec:38:c8:f0:f8:43:10:57:e8:ad:
b9:93:2a:b5:b8:53:27:19:cc:cf:be:60:b4:3b:c2:
ad:5f:5f:a9:e9:3a:3d:ac:b6:5f:d7:b9:47:69:18:
c3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4C:C1:4F:59:60:CA:54:9B:F3:1D:BE:68:07:3D:66:A0:6A:05:59
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/1-0zBT1lgylSb8x2-aAc9ZqBqBVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.142.0/24
89.30.201.0/24
Signature Algorithm: sha256WithRSAEncryption
26:e0:7c:22:f6:c8:d5:c8:fd:94:87:e1:b6:88:31:fd:30:ba:
96:fb:43:49:52:96:d6:cb:20:49:27:c5:01:c3:67:c6:91:26:
10:48:6f:02:67:46:00:f2:d1:9a:cd:a2:de:6e:5d:36:5d:6f:
62:45:ad:24:68:f4:95:2b:f8:08:25:42:a6:31:cc:a8:4b:75:
25:08:89:01:a2:a9:46:a3:cc:57:ed:f6:b8:ca:41:e7:6e:bd:
2e:9f:33:6b:79:3f:9c:90:1f:8e:39:e5:08:9e:f5:34:eb:7c:
4b:44:3c:15:65:a3:e7:a5:5b:6d:b5:0c:5a:f1:8f:52:52:a5:
cd:3c:35:59:73:e7:41:8d:dd:bc:cd:fe:45:69:0a:af:06:d8:
9b:00:40:0c:37:11:59:fe:65:e5:c4:aa:71:a9:1e:c4:de:40:
a0:38:98:aa:51:c4:c0:be:b2:3a:1f:da:cb:25:6c:98:9b:57:
b1:d0:06:4d:42:7b:39:73:d3:04:e0:40:f1:de:df:dc:3d:f6:
2e:8c:4b:19:27:4f:1c:aa:17:d4:4c:e3:ba:22:cf:e6:36:95:
42:a0:73:ce:da:7d:07:89:f5:a1:9d:00:a8:2c:44:c3:bc:4e:
61:d3:97:32:27:75:d1:16:98:b2:9c:59:7c:4f:a8:49:ce:28:
20:f5:b0:ad
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAaBmhEqWFtlYTKudebJG5qB5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYwOTAzMDkwNTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjRjYzE0ZjU5NjBjYTU0OWJmMzFkYmU2ODA3M2Q2NmEwNmEwNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbVi3NQzqoxavzj/F1WKvxOSYbgL
+gsyd7t+/so/mgJQ/RqRujbcpeBd6IfCAzUD4yOQVy0p2FXyC0pJluBciv3deIPM
41qUqUdGDzD3lOYK390JfyjgNyeOdSFW0yF3Cujr8Usg5bzCTKyeT+fy69MyA5WT
vjmz8LPsqKkkYgCn/KsAK3ZGka7sV7rJZxrs8jOEhpdOKEZbK14Z83FcSHrN29Ch
Ps8A03WYJZzVwqsmW+w9zBeGp9ok4UGk775DpzcGY0khFPTUu1nHCCpRg7FaFYrm
tew4yPD4QxBX6K25kyq1uFMnGczPvmC0O8KtX1+p6To9rLZf17lHaRjDkwIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPtMwU9ZYMpUm/MdvmgHPWagagVZMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvMS0wekJUMWxneWxTYjh4Mi1hQWM5WnFCcUJWay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTMvYzI3ZmE2LWIyYjAtNGRjYi1hODk5LTEwMzBjZGJlNmJk
NC8xL1F3RldWQWdsZU1TVWJOSjc0ZWlhUGRkV0w2US5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFkejgME
AFkeyTANBgkqhkiG9w0BAQsFAAOCAQEAJuB8IvbI1cj9lIfhtogx/TC6lvtDSVKW
1ssgSSfFAcNnxpEmEEhvAmdGAPLRms2i3m5dNl1vYkWtJGj0lSv4CCVCpjHMqEt1
JQiJAaKpRqPMV+32uMpB5269Lp8za3k/nJAfjjnlCJ71NOt8S0Q8FWWj56VbbbUM
WvGPUlKlzTw1WXPnQY3dvM3+RWkKrwbYmwBADDcRWf5l5cSqcakexN5AoDiYqlHE
wL6yOh/ayyVsmJtXsdAGTUJ7OXPTBOBA8d7f3D32LoxLGSdPHKoX1EzjuiLP5jaV
QqBzztp9B4n1oZ0AqCxEw7xOYdOXMid10RaYspxZfE+oSc4oIPWwrQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 12:24:26 2026 by rpki-client