Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/12xCLSUF_Loq09QVMGwwZ_HsjG4.roa
File: 12xCLSUF_Loq09QVMGwwZ_HsjG4.roa (raw, json)
Hash identifier: o1ff57ROPr5n/T1159c2N0eMkrIG67OK/zOCTFl7+dU=
Subject key identifier: D7:6C:42:2D:25:05:FC:BA:2A:D3:D4:15:30:6C:30:67:F1:EC:8C:6E
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A152C6ADAE376597AE88F4A62AD7276FDB
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/12xCLSUF_Loq09QVMGwwZ_HsjG4.roa
Signing time: Mon 19 Oct 2026 06:08:34 +0000
ROA not before: Mon 19 Oct 2026 06:08:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218383
IP address blocks: 89.30.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:c6:ad:ae:37:65:97:ae:88:f4:a6:2a:d7:27:6f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Oct 19 06:08:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d76c422d2505fcba2ad3d415306c3067f1ec8c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0e:83:c0:82:1f:8b:02:58:19:46:d6:6c:61:
bf:ed:ac:55:85:38:2d:fb:7d:78:8f:0a:69:2c:36:
a8:b8:5b:04:fe:30:37:bd:66:9e:a2:3f:59:10:cf:
6c:a5:37:b4:83:7f:30:94:3e:03:55:76:dc:52:b6:
33:64:77:e8:26:83:4c:0f:c6:98:59:38:df:b9:77:
55:af:90:41:0b:f0:ac:74:30:f7:9a:f4:65:71:ec:
d2:04:f1:f2:fd:96:99:74:c9:a5:1c:b9:e7:63:0e:
c0:71:37:ff:c8:2c:7d:20:e1:78:00:9d:61:00:9c:
43:18:d7:0e:cc:03:be:87:bf:99:d0:e7:66:74:fe:
ff:d0:17:63:fd:5b:5a:36:0a:15:c5:a9:7d:7f:d7:
ee:83:2e:3c:66:98:ba:ef:52:8a:68:ba:bf:3d:7c:
8b:a5:6d:99:3e:41:c4:99:b8:6b:aa:a1:ac:f0:ff:
a1:9e:b3:53:67:6c:bb:cf:73:78:11:fb:72:80:de:
31:bf:e5:8f:28:17:65:ce:42:1a:b2:e2:c7:66:94:
70:92:d4:cc:d4:5d:06:26:91:27:1c:e6:a6:66:9a:
2b:d6:5a:8c:6e:a6:d4:3b:2b:06:6f:ec:98:81:5b:
8e:be:bb:33:bd:3f:10:0e:7b:ae:20:14:6a:8a:0b:
fe:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6C:42:2D:25:05:FC:BA:2A:D3:D4:15:30:6C:30:67:F1:EC:8C:6E
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/12xCLSUF_Loq09QVMGwwZ_HsjG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.241.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d4:be:e9:bf:ec:7d:c1:20:68:0e:c2:29:92:d0:f3:6a:87:
30:e2:0d:5a:c5:a8:b7:7e:ce:97:4d:72:27:63:76:4f:d0:01:
58:61:a5:b4:ef:8a:24:4c:92:f8:5f:5c:c9:29:32:86:36:57:
25:83:6f:7f:c7:ff:ce:08:96:02:aa:0f:7c:96:48:2a:06:19:
df:2c:03:38:8f:c8:5d:0c:98:d6:8e:10:64:ea:ef:88:b1:8e:
97:9a:90:a0:86:92:4c:9b:6d:4a:e8:f5:c5:cc:84:d0:a2:c0:
30:d6:a1:53:4a:d9:28:e6:b4:73:c8:88:0d:b8:2c:65:04:3a:
dd:9a:33:02:d9:07:a0:fa:66:c2:b5:05:e5:8e:5b:aa:a0:a5:
01:90:2d:e3:0e:5c:cc:41:f7:57:d2:05:8d:18:64:44:4e:5b:
37:7b:6e:84:ee:80:a6:ae:6e:ea:e8:f8:41:e6:56:67:82:56:
ab:d2:38:41:89:27:1c:66:e9:65:dc:22:60:9a:f2:5b:72:36:
e8:d4:5a:cf:4c:b6:26:06:2f:2c:aa:18:3e:29:dc:dd:73:33:
31:69:c0:c6:02:08:0c:a4:30:ee:cd:33:15:8b:21:c5:0b:f5:
f6:ce:19:d9:51:74:c1:93:e3:cb:76:66:df:1c:1f:7d:75:87:
ff:28:99:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFSxq2uN2WXroj0pirXJ2/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYxMDE5MDYwODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzZjNDIyZDI1MDVmY2JhMmFkM2Q0MTUzMDZjMzA2N2YxZWM4YzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA6DwIIfiwJYGUbWbGG/7axVhTgt
+314jwppLDaouFsE/jA3vWaeoj9ZEM9spTe0g38wlD4DVXbcUrYzZHfoJoNMD8aY
WTjfuXdVr5BBC/CsdDD3mvRlcezSBPHy/ZaZdMmlHLnnYw7AcTf/yCx9IOF4AJ1h
AJxDGNcOzAO+h7+Z0OdmdP7/0Bdj/VtaNgoVxal9f9fugy48Zpi671KKaLq/PXyL
pW2ZPkHEmbhrqqGs8P+hnrNTZ2y7z3N4EftygN4xv+WPKBdlzkIasuLHZpRwktTM
1F0GJpEnHOamZpor1lqMbqbUOysGb+yYgVuOvrszvT8QDnuuIBRqigv+hQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNdsQi0lBfy6KtPUFTBsMGfx7IxuMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvMTJ4Q0xTVUZfTG9xMDlRVk1Hd3daX0hzakc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWR7xMA0G
CSqGSIb3DQEBCwUAA4IBAQAy1L7pv+x9wSBoDsIpktDzaocw4g1axai3fs6XTXIn
Y3ZP0AFYYaW074okTJL4X1zJKTKGNlclg29/x//OCJYCqg98lkgqBhnfLAM4j8hd
DJjWjhBk6u+IsY6XmpCghpJMm21K6PXFzITQosAw1qFTStko5rRzyIgNuCxlBDrd
mjMC2Qeg+mbCtQXljluqoKUBkC3jDlzMQfdX0gWNGGRETls3e26E7oCmrm7q6PhB
5lZnglar0jhBiSccZull3CJgmvJbcjbo1FrPTLYmBi8sqhg+KdzdczMxacDGAggM
pDDuzTMViyHFC/X2zhnZUXTBk+PLdmbfHB99dYf/KJnX
-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:30 2026 by rpki-client