Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/8WvuVHfrKiqm58ncBUbhJtDUAlA.roa
File: 8WvuVHfrKiqm58ncBUbhJtDUAlA.roa (raw, json)
Hash identifier: YXJPCq9y+4Q48oB8ztWgqpdSUGgVi6ahHrCFlwCyIE4=
Subject key identifier: F1:6B:EE:54:77:EB:2A:2A:A6:E7:C9:DC:05:46:E1:26:D0:D4:02:50
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A166F271BA17A3D47A59A3F446904F41D1
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/8WvuVHfrKiqm58ncBUbhJtDUAlA.roa
Signing time: Fri 23 Oct 2026 04:08:47 +0000
ROA not before: Fri 23 Oct 2026 04:08:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 89.30.240.0/24 maxlen: 24
213.189.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:f2:71:ba:17:a3:d4:7a:59:a3:f4:46:90:4f:41:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Oct 23 04:08:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f16bee5477eb2a2aa6e7c9dc0546e126d0d40250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dd:90:d7:8f:fa:e3:44:14:47:c7:2d:5c:b9:
61:4a:99:51:54:f7:e0:3a:6a:c4:78:0a:5a:cb:05:
02:63:ba:e1:d6:8b:04:6c:25:8a:97:19:74:9b:19:
c8:6f:26:d1:f9:20:a3:7f:95:7b:32:5a:1b:1b:c7:
d2:ce:5b:58:71:17:5a:14:aa:38:89:0c:2a:19:2a:
4d:13:1b:79:b4:b7:3c:9f:26:02:68:62:8c:cb:c9:
e8:cb:85:16:d7:1b:c7:30:1c:e8:9b:b1:8e:b8:d2:
a1:15:a1:15:92:30:c0:08:2b:c9:25:b9:e5:cd:85:
0c:80:63:a2:a4:71:d4:3f:57:23:d1:86:db:9b:cd:
85:3f:68:3f:21:55:9b:0c:09:9b:4f:80:0a:54:11:
3b:9f:40:96:2d:c8:55:ec:b6:fe:e8:a2:b7:e9:3b:
94:f8:38:be:9f:ac:e4:27:de:72:34:1e:d3:85:bf:
77:67:a4:29:e1:f7:fa:92:9c:b4:78:c2:b9:ad:a1:
8d:c2:a7:ce:c7:5d:f7:f4:ab:b4:6b:62:87:de:09:
66:44:cf:38:d8:7e:93:1c:cd:a4:fe:78:f7:b2:83:
43:2f:d7:ca:f8:e0:aa:61:d4:05:46:8e:0a:84:a0:
b3:eb:df:22:42:57:32:40:0d:48:c8:7c:12:39:3a:
30:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6B:EE:54:77:EB:2A:2A:A6:E7:C9:DC:05:46:E1:26:D0:D4:02:50
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/8WvuVHfrKiqm58ncBUbhJtDUAlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.240.0/24
213.189.26.0/24
Signature Algorithm: sha256WithRSAEncryption
61:68:f8:a3:ac:87:2d:9e:ee:a0:99:4a:60:3b:0e:7c:07:62:
97:cc:97:13:c5:32:66:00:5f:46:e1:45:c7:24:c7:95:a5:b0:
94:34:a7:53:d5:96:e8:39:0c:94:49:7f:42:75:20:e3:3b:fb:
fe:d9:3a:e6:26:5d:6a:80:99:36:42:f6:be:50:b6:06:be:f3:
1a:3d:d7:23:43:18:17:7a:3f:19:7a:6a:f7:6b:ea:d6:67:88:
29:74:ec:0e:e9:e2:28:ff:8c:bb:e7:85:69:90:21:8b:40:62:
a4:c2:01:de:4d:02:0f:41:f5:49:b8:47:86:4e:dc:13:74:87:
73:93:27:03:d9:53:22:55:9e:5d:d5:12:e0:80:60:1b:80:b5:
01:80:96:8f:5a:44:e4:0b:3c:3b:01:01:1f:c4:94:4c:7a:9b:
3f:2b:8a:83:36:d6:1d:87:1f:66:bd:31:d7:72:da:25:d9:b1:
2a:22:58:fb:44:7b:7f:56:46:f4:6f:25:4c:5b:f0:14:42:59:
03:93:4b:4a:72:d1:3a:1c:50:05:56:c0:92:4f:aa:17:07:c2:
97:83:15:f8:48:b0:6f:96:8c:ea:41:49:f8:33:60:51:4d:22:
ca:cb:4c:e2:92:b5:ac:ba:98:49:3a:c2:25:4c:8b:32:88:f3:
b7:32:55:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:19 2026 by rpki-client