Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/4sdM2Ij2cKTZcjTQDwS5CUZKGM8.roa
File: 4sdM2Ij2cKTZcjTQDwS5CUZKGM8.roa (raw, json)
Hash identifier: p6d+T9unm13i17/+Ku4D32irYqiCGUYExQ9+4mlQvAo=
Subject key identifier: E2:C7:4C:D8:88:F6:70:A4:D9:72:34:D0:0F:04:B9:09:46:4A:18:CF
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A07B3FB5B56C2E2E5330531BBD26F63D5E
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/4sdM2Ij2cKTZcjTQDwS5CUZKGM8.roa
Signing time: Mon 07 Sep 2026 09:42:47 +0000
ROA not before: Mon 07 Sep 2026 09:42:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 85.92.141.0/24 maxlen: 24
89.30.174.0/24 maxlen: 24
89.30.175.0/24 maxlen: 24
89.30.199.0/24 maxlen: 24
89.30.206.0/24 maxlen: 24
213.247.44.0/24 maxlen: 24
213.247.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:3f:b5:b5:6c:2e:2e:53:30:53:1b:bd:26:f6:3d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 7 09:42:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2c74cd888f670a4d97234d00f04b909464a18cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:71:75:c7:8e:99:78:ee:68:9c:ee:3e:fa:29:
62:e6:06:1c:ce:e7:fc:a3:ef:37:54:60:c9:1c:1b:
d0:b1:35:1c:35:18:93:80:df:fc:ec:c3:c0:af:da:
bd:a3:7f:c9:67:29:f1:c1:1f:66:50:83:0e:43:e0:
16:3a:65:4e:e0:2a:ac:eb:b0:de:ca:17:10:b1:1a:
b0:01:8f:85:0d:4d:f9:f4:f1:95:5c:6a:b0:c4:70:
31:90:85:07:6a:cd:31:b6:9a:ef:9c:f7:2a:d5:d2:
6a:f0:6a:80:47:0d:a5:1f:20:c5:5b:16:9b:ce:ca:
8d:01:9b:d3:3d:96:b1:d1:b4:3c:dc:3e:6d:42:3d:
d2:9f:aa:fa:56:93:c6:0f:9f:47:60:13:57:01:a0:
0c:37:e6:a8:6b:fe:b6:83:67:e0:54:e4:83:be:09:
a8:f2:16:1e:cd:a6:6c:31:e7:ab:ef:6d:5e:17:f4:
46:80:0f:24:1b:41:06:3b:3a:07:fa:f3:ec:37:13:
d1:0e:7c:a1:00:2e:3e:03:1a:7e:27:67:e3:fe:fc:
23:83:f8:d3:a7:f6:bc:88:14:32:12:27:ee:d2:78:
de:02:e5:8b:cc:eb:0f:5a:18:51:52:25:b8:29:39:
50:aa:5d:2b:aa:35:5b:c3:01:ac:b1:d4:a0:b0:cc:
cf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C7:4C:D8:88:F6:70:A4:D9:72:34:D0:0F:04:B9:09:46:4A:18:CF
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/4sdM2Ij2cKTZcjTQDwS5CUZKGM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.141.0/24
89.30.174.0/23
89.30.199.0/24
89.30.206.0/24
213.247.44.0/24
213.247.50.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:9f:42:43:56:3f:6d:61:1c:41:f8:40:52:47:38:b2:36:ff:
46:8f:e7:50:a0:11:81:55:44:68:23:31:ce:96:ce:7e:06:92:
38:df:74:82:ed:58:65:de:bf:00:cb:58:4f:48:cd:ee:00:6a:
fa:05:2c:88:c1:b4:42:15:c0:e5:1b:fe:94:70:ad:72:6d:5c:
7b:da:b0:ab:64:9e:bb:22:3f:40:f9:45:84:a6:17:68:7b:ac:
78:fa:59:ee:ef:3b:4a:d0:bc:46:f8:9d:4c:81:f7:fe:0f:83:
54:ad:ba:bb:58:ab:d0:72:91:e3:5f:19:ad:a1:fb:d9:70:9e:
28:e7:7a:60:7b:48:63:b5:5a:30:e9:fb:46:cd:86:a2:53:68:
1b:58:e0:1a:c4:4b:48:53:77:37:26:a1:ff:76:7a:4b:50:e4:
bd:97:84:bf:f0:7a:8e:2c:66:fc:f7:d1:98:18:ba:8e:9f:c8:
7d:7e:0b:e4:08:b9:10:87:be:09:ab:56:05:95:f4:fe:98:be:
fd:a3:42:c4:e9:78:ff:33:10:e4:a8:51:f0:b3:cb:ff:9b:42:
8b:3b:44:af:59:33:ef:7b:9a:cc:4b:b7:f3:f8:11:ba:a2:60:
e9:b4:44:a6:12:4a:9a:cc:87:d4:57:57:16:27:16:0b:20:ed:
1a:7f:14:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:52:41 2026 by rpki-client