Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/8d1aydDuAEXfQxk3W61T0a2FlkU.roa
File: 8d1aydDuAEXfQxk3W61T0a2FlkU.roa (raw, json)
Hash identifier: 8cEwTeGphfNoRcWbQQHMMDzfPHsfDPvaBz9Pwfy3hzg=
Subject key identifier: F1:DD:5A:C9:D0:EE:00:45:DF:43:19:37:5B:AD:53:D1:AD:85:96:45
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A090B83A2C041C2DD9E795AA7136FFABD7
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/8d1aydDuAEXfQxk3W61T0a2FlkU.roa
Signing time: Fri 11 Sep 2026 13:46:27 +0000
ROA not before: Fri 11 Sep 2026 13:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 89.30.202.0/24 maxlen: 24
89.30.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:b8:3a:2c:04:1c:2d:d9:e7:95:aa:71:36:ff:ab:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 11 13:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1dd5ac9d0ee0045df4319375bad53d1ad859645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:ab:55:e8:66:8c:1b:2f:38:8b:3c:7a:cc:
f6:69:17:db:d5:ef:41:b4:91:ca:0e:75:90:5a:dc:
61:b7:ec:6a:4c:56:8e:f1:71:c6:28:f2:6c:a9:b4:
b8:11:72:df:d5:d9:42:5f:16:48:41:4c:4d:47:a4:
ef:98:21:98:67:6f:7a:95:e2:dc:67:f5:d5:b1:f7:
bc:7c:1e:5a:f4:ae:f7:15:06:53:a6:36:be:cf:15:
39:84:e8:bb:d6:6f:22:60:83:5b:8c:1c:af:0f:46:
dc:82:b7:73:36:df:ef:cb:7c:72:8c:27:37:97:f8:
15:bc:8f:5e:d5:da:c5:54:28:f8:64:a8:d4:94:5f:
6d:60:f9:0f:10:4e:5e:18:7f:fc:1d:98:b3:f8:d3:
21:b4:93:bd:5c:02:11:15:cb:ad:8d:88:0d:9d:94:
17:f0:1d:37:22:23:ed:04:1b:7c:e7:b3:d4:3a:bc:
c1:58:c3:53:82:4e:0b:3a:02:da:f6:50:33:d6:c7:
21:1b:bd:0c:df:3d:50:81:30:63:31:68:1f:15:e2:
8d:81:56:ce:1d:99:b9:53:b5:83:72:c1:b6:0d:10:
cd:9f:96:77:94:e1:8f:ed:36:23:ed:fd:2b:2d:98:
2f:0a:b6:0e:c0:74:42:3e:15:bc:44:84:74:38:97:
3d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DD:5A:C9:D0:EE:00:45:DF:43:19:37:5B:AD:53:D1:AD:85:96:45
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/8d1aydDuAEXfQxk3W61T0a2FlkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.202.0/23
Signature Algorithm: sha256WithRSAEncryption
45:7f:2b:9c:d8:05:08:60:22:ec:49:7f:f6:43:44:2a:52:76:
b1:35:e5:a6:45:36:b4:94:e6:eb:49:49:f8:af:7e:fb:8c:8c:
b9:a8:fe:02:40:e4:f0:d6:8f:b9:c6:0c:4f:46:87:da:47:9b:
f9:fa:26:00:9b:c5:db:f3:a0:50:8d:57:ee:8e:20:cd:01:eb:
5e:91:fb:d2:89:62:67:83:8b:55:6f:7d:f0:aa:80:69:80:01:
47:a5:2b:f6:df:7e:de:c1:66:7b:e4:ad:12:40:8e:ef:22:39:
30:3b:84:f1:66:4a:8b:0c:00:5b:70:d5:0d:f8:76:22:de:16:
5a:24:74:cb:77:86:63:fc:1a:99:3e:d9:95:71:09:1e:72:e6:
d6:70:8e:32:7a:27:f3:5b:89:8c:1e:a0:01:62:af:4a:2a:26:
07:4b:9d:76:bf:6d:ab:e1:11:3e:16:78:27:d1:fa:b0:71:c1:
1d:5f:09:dd:c3:7a:40:68:76:f4:73:b0:d8:79:55:e6:1f:f1:
a2:c2:a1:7f:55:1f:82:4f:74:36:c6:a5:32:a4:46:c1:f1:99:
c3:c3:b7:f5:a7:c0:23:03:31:e4:aa:dc:26:a1:35:07:f5:41:
47:20:31:6c:15:6d:21:d7:cc:64:96:d7:29:fe:97:26:46:fd:
09:7a:16:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 05:32:19 2026 by rpki-client