Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/2su1OmEi5KP_LdfsM5v45_0VCLw.roa
File: 2su1OmEi5KP_LdfsM5v45_0VCLw.roa (raw, json)
Hash identifier: QTGseynPqwydZo2CnraFRvY/SY3UbfIeUuRwjyAOZM8=
Subject key identifier: DA:CB:B5:3A:61:22:E4:A3:FF:2D:D7:EC:33:9B:F8:E7:FD:15:08:BC
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A0D9E0A95AD34F0329FB982443DB9C4EB9
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/2su1OmEi5KP_LdfsM5v45_0VCLw.roa
Signing time: Fri 25 Sep 2026 18:42:54 +0000
ROA not before: Fri 25 Sep 2026 18:42:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.92.142.0/24 maxlen: 24
85.92.143.0/24 maxlen: 24
89.30.137.0/24 maxlen: 24
89.30.165.0/24 maxlen: 24
89.30.174.0/24 maxlen: 24
89.30.175.0/24 maxlen: 24
89.30.183.0/24 maxlen: 24
89.30.186.0/24 maxlen: 24
89.30.187.0/24 maxlen: 24
89.30.188.0/24 maxlen: 24
89.30.190.0/24 maxlen: 24
89.30.191.0/24 maxlen: 24
89.30.204.0/24 maxlen: 24
89.30.205.0/24 maxlen: 24
89.30.240.0/24 maxlen: 24
89.30.241.0/24 maxlen: 24
89.30.242.0/24 maxlen: 24
89.30.243.0/24 maxlen: 24
89.30.247.0/24 maxlen: 24
213.189.19.0/24 maxlen: 24
213.214.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:e0:a9:5a:d3:4f:03:29:fb:98:24:43:db:9c:4e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 25 18:42:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dacbb53a6122e4a3ff2dd7ec339bf8e7fd1508bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:54:a9:e8:de:c0:98:a7:3c:af:7c:1a:0d:41:
37:1a:1b:8d:ad:da:5d:f5:ec:69:27:94:d0:e6:08:
69:1d:91:ee:0f:3a:e9:a0:1b:78:8f:ac:0a:55:d2:
c5:99:b8:f1:8f:12:99:b9:00:df:99:36:a6:11:2c:
e9:cd:a5:d7:1b:40:41:a4:dc:92:9b:ef:b2:94:68:
79:13:93:fe:55:d6:29:d0:c8:6e:17:28:ac:8d:1f:
88:ca:bc:15:71:43:96:81:1b:62:5c:fe:82:52:5a:
7b:6c:a5:ee:ba:9a:e0:b7:5b:9c:fd:5c:c8:d9:ae:
2d:cf:83:00:c0:37:c1:08:94:39:39:da:70:a1:50:
2b:b9:26:c8:c3:fc:b0:e2:f3:cc:e7:d6:34:1b:8f:
d0:68:6b:a6:26:68:3d:5b:33:e2:84:71:be:44:f0:
ab:74:02:d5:1d:57:0f:b7:53:0c:84:2c:67:a4:7a:
af:23:74:65:9e:cf:5d:2e:6e:4b:f2:13:5c:5d:0e:
5f:50:15:5f:28:45:6b:ab:8c:3c:c3:ec:1d:40:3a:
f4:b1:b9:0e:d2:7c:56:19:4b:4c:fd:bd:a0:96:ba:
99:08:7f:90:67:a1:78:b8:4f:53:f2:9b:44:d1:73:
01:6a:10:d5:55:59:1c:8f:56:19:d5:c0:15:5e:eb:
cc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CB:B5:3A:61:22:E4:A3:FF:2D:D7:EC:33:9B:F8:E7:FD:15:08:BC
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/2su1OmEi5KP_LdfsM5v45_0VCLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.142.0/23
89.30.137.0/24
89.30.165.0/24
89.30.174.0/23
89.30.183.0/24
89.30.186.0-89.30.188.255
89.30.190.0/23
89.30.204.0/23
89.30.240.0/22
89.30.247.0/24
213.189.19.0/24
213.214.108.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:3a:37:92:35:56:fe:dd:a3:90:27:36:c1:6c:4e:f4:89:86:
15:a6:7a:f7:72:b3:0e:d9:e8:d6:5f:03:dd:78:fc:8a:60:27:
8b:2c:7c:21:b5:2b:9a:c4:5d:20:c5:65:34:9d:4d:02:f4:df:
78:88:23:00:54:b8:84:06:c6:8e:a5:f7:3e:90:a7:0a:6b:62:
0a:e3:af:01:f5:f4:0e:8f:79:6f:9f:95:dc:f3:84:5a:fa:88:
e3:a6:47:6c:99:7f:a5:23:ce:94:5e:f2:89:c6:cb:16:21:02:
b2:0c:4f:09:ef:ca:a3:eb:71:4e:60:9e:df:97:cb:2c:76:46:
8c:40:ec:9c:d0:38:dd:4c:45:60:5b:54:7a:eb:8a:ff:1c:5b:
70:42:72:20:9b:b8:5f:5d:6b:4e:a8:e2:1e:e5:3e:aa:e4:cc:
f4:a0:b0:48:d1:46:80:d0:ad:e3:64:31:dd:03:8b:67:df:6c:
1e:29:25:24:40:a6:ad:3e:e9:dd:13:ac:97:22:d4:1d:ec:da:
14:9a:b1:1c:bd:19:9d:67:a6:ed:33:b8:73:a4:12:9c:34:be:
87:81:db:f1:23:eb:b5:ff:47:37:d9:b1:ad:af:85:22:69:6b:
ba:0c:9c:9c:53:03:51:94:fe:f6:65:07:18:a6:ec:79:d3:d3:
cb:49:6c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:33:19 2026 by rpki-client