Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/8GKbEAU2x-D5p0L7_y0JAaOdQ0w.roa
File: 8GKbEAU2x-D5p0L7_y0JAaOdQ0w.roa (raw, json)
Hash identifier: GR6LXciMxGGBbksVF9Wb/Z+rhj6RDMI7dXRYorRxeZs=
Subject key identifier: F0:62:9B:10:05:36:C7:E0:F9:A7:42:FB:FF:2D:09:01:A3:9D:43:4C
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F26945F0A30033F06B58099F6E049224B
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/8GKbEAU2x-D5p0L7_y0JAaOdQ0w.roa
Signing time: Fri 03 Jul 2026 06:04:45 +0000
ROA not before: Fri 03 Jul 2026 06:04:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402221
IP address blocks: 89.30.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:94:5f:0a:30:03:3f:06:b5:80:99:f6:e0:49:22:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 3 06:04:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0629b100536c7e0f9a742fbff2d0901a39d434c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:1b:ee:c6:36:78:6d:d7:29:c1:a6:8b:bf:
eb:ba:00:c0:ef:df:34:5b:97:de:b0:d6:92:e1:cb:
d0:71:95:19:a2:af:a7:2d:b9:21:a6:f7:b5:62:58:
04:e7:cc:65:ba:84:19:75:bc:77:8b:d2:93:42:0a:
0a:cb:af:84:7a:32:b5:22:3a:97:0b:ec:b4:b9:3c:
9b:02:c4:a6:b1:50:f7:01:6d:5f:27:b5:6e:46:bc:
90:8f:fd:ec:36:bd:26:87:fc:c5:35:15:e3:5a:32:
34:72:e2:66:97:28:82:f2:cc:2a:ea:73:e3:49:71:
cf:dd:64:c9:41:75:da:cb:1d:91:c6:f5:18:ea:47:
93:59:8c:b0:80:4e:31:54:7b:85:44:10:c5:d0:71:
28:f5:f4:d8:d1:32:98:4f:c2:bc:1d:38:31:a0:2d:
f2:43:96:e5:23:da:43:81:df:f8:3c:ba:6d:ce:74:
18:b5:51:79:d7:3b:f3:e4:9f:2a:db:8b:96:88:f2:
6f:64:d2:92:6d:48:c1:e7:68:ca:c5:7d:47:e6:c8:
33:05:05:2a:a5:4a:65:36:45:38:de:16:82:17:fc:
55:2e:d0:5b:cd:2a:87:de:af:07:07:86:b3:e5:e5:
6b:be:1d:f4:e6:a5:80:f2:7c:17:d1:46:a7:c0:93:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:62:9B:10:05:36:C7:E0:F9:A7:42:FB:FF:2D:09:01:A3:9D:43:4C
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/8GKbEAU2x-D5p0L7_y0JAaOdQ0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.200.0/24
Signature Algorithm: sha256WithRSAEncryption
56:56:36:83:a7:fa:15:9f:d8:bd:0a:8b:fa:5f:29:44:6a:c0:
bf:b4:d0:3c:79:9d:64:49:01:21:92:d5:20:e9:51:b5:a2:76:
c5:e1:c7:fa:02:54:13:b0:58:49:a6:14:8f:8f:cf:c9:8a:c6:
d0:32:42:29:ec:3b:00:9d:e2:0d:56:2c:4b:ae:e3:f7:52:e7:
28:03:9a:e9:e1:53:d3:97:d7:0a:96:a3:9b:60:b1:af:f8:be:
72:33:51:a5:f2:c1:d2:13:10:8f:bd:54:91:ec:43:09:e8:41:
a1:33:e0:01:e1:4d:26:71:34:04:39:9c:28:bd:e5:9e:45:cd:
cb:b0:8d:60:a6:46:a1:3e:20:49:1e:bc:ea:4c:74:d5:c9:39:
96:20:28:4a:34:0a:59:2e:3a:26:7c:7b:f0:ee:a3:1a:10:62:
5e:f3:6a:67:38:e9:d0:c1:c4:0d:1e:35:a4:b1:02:81:bb:56:
ba:fa:ca:eb:66:9f:7b:49:e8:d8:d8:61:b5:a7:88:3b:5c:62:
54:0a:f5:ac:7b:06:b1:07:e9:9e:98:19:82:c5:be:d2:da:2c:
01:65:ae:fe:32:62:0d:4d:bf:b7:d0:88:e1:8f:8e:e8:ff:c9:
3a:d7:29:85:bd:f5:34:d2:9f:ee:d8:0a:71:df:bc:58:8a:35:
44:9a:ea:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8mlF8KMAM/BrWAmfbgSSJLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYwNzAzMDYwNDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDYyOWIxMDA1MzZjN2UwZjlhNzQyZmJmZjJkMDkwMWEzOWQ0MzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4Ab7sY2eG3XKcGmi7/rugDA7980
W5fesNaS4cvQcZUZoq+nLbkhpve1YlgE58xluoQZdbx3i9KTQgoKy6+EejK1IjqX
C+y0uTybAsSmsVD3AW1fJ7VuRryQj/3sNr0mh/zFNRXjWjI0cuJmlyiC8swq6nPj
SXHP3WTJQXXayx2RxvUY6keTWYywgE4xVHuFRBDF0HEo9fTY0TKYT8K8HTgxoC3y
Q5blI9pDgd/4PLptznQYtVF51zvz5J8q24uWiPJvZNKSbUjB52jKxX1H5sgzBQUq
pUplNkU43haCF/xVLtBbzSqH3q8HB4az5eVrvh305qWA8nwX0UanwJNWdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPBimxAFNsfg+adC+/8tCQGjnUNMMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvOEdLYkVBVTJ4LUQ1cDBMN195MEpBYU9kUTB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWR7IMA0G
CSqGSIb3DQEBCwUAA4IBAQBWVjaDp/oVn9i9Cov6XylEasC/tNA8eZ1kSQEhktUg
6VG1onbF4cf6AlQTsFhJphSPj8/JisbQMkIp7DsAneINVixLruP3UucoA5rp4VPT
l9cKlqObYLGv+L5yM1Gl8sHSExCPvVSR7EMJ6EGhM+AB4U0mcTQEOZwoveWeRc3L
sI1gpkahPiBJHrzqTHTVyTmWIChKNApZLjomfHvw7qMaEGJe82pnOOnQwcQNHjWk
sQKBu1a6+srrZp97SejY2GG1p4g7XGJUCvWsewaxB+memBmCxb7S2iwBZa7+MmIN
Tb+30Ijhj47o/8k61ymFvfU00p/u2Apx37xYijVEmuqY
-----END CERTIFICATE-----
Generated at Mon Jul 6 22:11:57 2026 by rpki-client