Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/1-vh62pLkI4535D0pAtXH9FXjCMw.roa
File: 1-vh62pLkI4535D0pAtXH9FXjCMw.roa (raw, json)
Hash identifier: nO+2RwtShmUkDBsm9vm3aPspsP/a0wV4ejQQ7otQc3o=
Subject key identifier: FA:F8:7A:DA:92:E4:23:8E:77:E4:3D:29:02:D5:C7:F4:55:E3:08:CC
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A022F971FCFFF6FDE70A61BCDA43CCF87F
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/1-vh62pLkI4535D0pAtXH9FXjCMw.roa
Signing time: Fri 21 Aug 2026 06:19:28 +0000
ROA not before: Fri 21 Aug 2026 06:19:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 89.30.137.0/24 maxlen: 24
89.30.173.0/24 maxlen: 24
89.30.174.0/24 maxlen: 24
89.30.175.0/24 maxlen: 24
213.189.16.0/24 maxlen: 24
213.214.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:22:f9:71:fc:ff:f6:fd:e7:0a:61:bc:da:43:cc:f8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Aug 21 06:19:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=faf87ada92e4238e77e43d2902d5c7f455e308cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:28:77:a7:65:61:26:8c:dd:d5:23:92:6a:93:
8f:04:1a:86:2a:3b:dc:98:8a:5c:50:7d:da:fd:2f:
d5:b9:66:4b:5d:55:ec:0f:4b:99:bf:fb:3b:d9:12:
85:f0:06:50:c1:ff:66:9d:f3:ba:5a:c5:2c:55:6c:
4f:20:49:c6:ef:ea:26:40:cd:e3:cf:a1:8f:da:fc:
4e:fe:77:ff:35:36:e0:ec:63:d5:ad:a4:82:ba:00:
1f:0c:e4:1d:e4:b7:19:e9:b5:1d:d2:42:19:e5:a1:
b2:bd:91:d3:77:83:54:a9:c0:ed:a0:fc:4c:50:1d:
99:2b:87:72:7c:a5:c9:10:51:a3:71:1a:4e:4c:14:
8d:47:68:b1:74:9f:77:c6:ea:76:04:02:c4:38:0c:
10:ac:23:80:18:b6:b5:e6:20:bf:bf:09:1b:90:f8:
82:f1:a5:5d:db:7a:2c:0c:f6:00:62:56:1f:40:bb:
7e:33:50:2f:19:30:ff:0b:11:7a:54:73:47:06:56:
0b:87:e7:d6:56:ad:fb:08:93:78:19:75:0d:22:b3:
75:4a:fb:68:71:ec:3d:0b:1a:c0:34:6a:a1:a3:86:
84:90:b8:60:27:3b:dc:67:4a:e7:f5:d1:07:82:08:
a6:3d:e7:76:86:71:b6:28:57:99:85:25:bc:22:81:
ae:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F8:7A:DA:92:E4:23:8E:77:E4:3D:29:02:D5:C7:F4:55:E3:08:CC
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/1-vh62pLkI4535D0pAtXH9FXjCMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.137.0/24
89.30.173.0-89.30.175.255
213.189.16.0/24
213.214.108.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:2d:17:25:89:14:0f:27:bd:e0:7e:80:ad:cf:8f:f1:eb:a7:
1a:a9:3c:03:64:72:d6:cd:37:d5:7f:14:57:82:41:a1:da:84:
0a:a5:47:d8:f7:b0:80:72:d5:9a:92:4f:f4:9a:4e:31:b2:ca:
52:51:1b:32:2e:b5:70:77:1b:9a:6e:3a:6a:d4:c9:c5:6e:7d:
7a:d7:2c:04:eb:70:07:38:e7:85:61:79:05:fd:2f:6a:25:d0:
8d:92:20:8c:54:f9:63:52:32:74:b4:07:fa:74:be:f9:87:b3:
ff:d8:db:a9:43:d6:f0:0b:ee:18:82:7a:21:e5:8e:8a:22:69:
1e:3f:85:d5:fe:14:ed:58:68:e8:61:2c:a0:28:6f:58:5d:08:
f4:86:e7:ee:b0:6c:9f:4a:2e:15:dd:a3:37:46:dc:a4:f0:59:
36:c3:45:a6:8b:cc:75:7e:8a:86:3e:af:f5:02:46:6f:f0:8a:
0e:45:d7:4f:9c:46:9b:e7:d1:d7:df:42:7b:4f:d4:5a:ce:5b:
4a:ce:53:66:ee:cd:93:e3:98:b8:39:54:47:54:9e:34:39:d0:
f2:1b:84:10:a2:eb:0b:de:d4:04:19:17:e6:84:54:54:13:7d:
f3:5d:e3:43:41:52:79:0e:5c:fc:46:a8:e9:6b:58:2f:2c:40:
3d:b1:80:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:31:37 2026 by rpki-client