Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/4QROmXWJYe_EpsEYlXC-KG4BcRw.roa
File: 4QROmXWJYe_EpsEYlXC-KG4BcRw.roa (raw, json)
Hash identifier: z8NnYhZGrikuzleJLgxpGeS7wCSDhUQ3l7pz5OvOn/s=
Subject key identifier: E1:04:4E:99:75:89:61:EF:C4:A6:C1:18:95:70:BE:28:6E:01:71:1C
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F269459AC44520934DD189FFFE0A9BD01
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/4QROmXWJYe_EpsEYlXC-KG4BcRw.roa
Signing time: Fri 03 Jul 2026 06:04:44 +0000
ROA not before: Fri 03 Jul 2026 06:04:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63793
IP address blocks: 89.30.138.0/24 maxlen: 24
89.30.162.0/24 maxlen: 24
89.30.190.0/24 maxlen: 24
89.30.199.0/24 maxlen: 24
89.30.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:94:59:ac:44:52:09:34:dd:18:9f:ff:e0:a9:bd:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 3 06:04:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1044e99758961efc4a6c1189570be286e01711c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:e0:c1:1d:31:2f:da:89:56:bf:5e:1a:60:
74:9e:1a:be:a0:b7:19:79:90:f8:14:4a:e5:7f:c1:
0e:55:ab:c1:08:e5:23:91:90:b2:2c:33:69:db:69:
3c:94:f9:97:62:c2:8d:93:cb:16:07:2d:50:07:68:
e4:e5:27:5b:cc:0c:b4:c8:2c:dd:6b:3a:e3:6e:66:
39:68:f2:43:ea:26:4f:bb:0d:a2:c6:76:88:f7:2b:
1a:9a:de:09:77:bb:84:ca:6f:1a:49:46:2a:27:41:
b1:7c:82:57:71:e3:88:25:57:7a:18:b0:03:41:64:
ec:c1:2e:8d:9a:49:59:fd:96:ff:16:42:d1:6b:64:
de:7e:1a:dd:10:c3:f9:e3:a6:06:66:8e:7f:f5:66:
00:8b:34:18:0f:81:7a:98:c6:54:6d:58:b9:47:c5:
39:9c:1c:04:62:72:ba:29:d7:81:51:37:e3:de:58:
ce:8b:c4:9c:c8:f4:e0:fe:73:05:07:b5:0f:4a:31:
95:2a:ba:8b:b1:06:3e:27:4f:23:50:59:5b:d8:6d:
cd:8a:90:3f:2e:76:dc:e6:0b:32:a9:b0:48:37:78:
83:34:cb:1e:c6:ea:30:c5:eb:86:e4:30:e6:14:e5:
23:55:f4:03:7f:3d:57:12:11:e8:81:02:37:03:f7:
d6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:04:4E:99:75:89:61:EF:C4:A6:C1:18:95:70:BE:28:6E:01:71:1C
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/4QROmXWJYe_EpsEYlXC-KG4BcRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.138.0/24
89.30.162.0/24
89.30.190.0/24
89.30.199.0/24
89.30.247.0/24
Signature Algorithm: sha256WithRSAEncryption
99:5c:26:e5:53:c2:1f:42:6a:dd:6e:83:53:dc:5e:5e:ef:2f:
60:22:2c:56:19:7a:2d:c8:b3:eb:73:66:ce:98:2b:ab:16:33:
08:71:76:d9:1c:65:10:b3:72:71:50:81:19:1c:6c:b9:10:a0:
38:b1:6a:f2:8b:ce:2c:e2:f5:63:dc:d3:d8:0c:fa:53:79:a9:
8c:ff:c0:9f:63:52:f2:a1:5c:36:5e:b6:8a:c3:11:9f:31:68:
26:6c:a5:ca:2d:2f:57:35:84:f6:32:ce:19:9d:14:8f:6b:c6:
31:71:c3:b3:8f:d1:5b:95:b0:8c:f3:20:c6:9b:24:71:aa:7e:
d9:39:85:1d:a7:ac:ff:83:63:63:c0:81:fd:b1:c0:1c:c1:5d:
5e:5c:1d:33:4b:86:bd:36:a3:73:1d:49:f4:3e:e8:15:52:48:
14:5a:e7:41:e4:ab:2d:07:f8:55:b3:d1:7b:a8:6c:a2:7d:b5:
90:3e:6a:3c:e3:72:d2:7b:ff:fa:bd:82:80:97:38:6a:71:40:
3b:f2:d1:e6:1a:9b:c8:4c:75:ee:12:50:ed:00:a6:92:a8:60:
0a:e1:1c:01:65:54:94:51:33:80:60:26:8e:de:c1:64:cd:3d:
05:9b:7a:44:0d:75:15:06:ab:04:4c:50:d0:75:44:68:44:e4:
b9:16:36:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:37 2026 by rpki-client