Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/97KYtrmVEj0vjRAsjTzwyRqF5Xs.roa
File: 97KYtrmVEj0vjRAsjTzwyRqF5Xs.roa (raw, json)
Hash identifier: 30sSgdSqvaMNie8ypo8Ednq/dEbPXei5Vh6S02VdFBU=
Subject key identifier: F7:B2:98:B6:B9:95:12:3D:2F:8D:10:2C:8D:3C:F0:C9:1A:85:E5:7B
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A02A0C5AFA4E812C5A4D7FBAEB3727A831
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/97KYtrmVEj0vjRAsjTzwyRqF5Xs.roa
Signing time: Sat 22 Aug 2026 15:17:27 +0000
ROA not before: Sat 22 Aug 2026 15:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 5.100.231.0/24 maxlen: 24
85.92.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2a:0c:5a:fa:4e:81:2c:5a:4d:7f:ba:eb:37:27:a8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Aug 22 15:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7b298b6b995123d2f8d102c8d3cf0c91a85e57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a9:06:62:62:ec:d8:6b:87:4c:6f:fd:35:a8:
7e:34:f1:93:30:57:9f:37:49:19:cd:3d:77:fd:be:
b0:a1:5b:84:24:06:4e:c6:7c:d4:50:12:91:1f:e6:
63:63:03:b1:ce:05:6e:48:cb:cd:2a:29:9b:47:f7:
f1:38:cb:25:84:98:28:eb:42:30:99:c0:85:f7:11:
20:10:2c:5b:c0:7f:3d:6b:cb:1b:cc:80:dd:e2:a9:
28:33:b3:60:36:24:22:ae:ca:29:b8:0d:36:e6:7d:
8c:be:12:83:79:a2:3f:eb:86:ce:32:9e:3e:38:3b:
0a:f9:73:1d:e2:21:78:39:65:9d:cc:ee:ad:7a:12:
4c:cb:25:e5:08:11:90:1f:f0:40:79:a9:4b:b7:4c:
6f:eb:49:39:34:05:52:dc:9c:88:9c:a2:d8:97:87:
2c:b3:d3:8b:fe:09:cb:c3:98:e7:00:c1:d3:aa:63:
aa:13:dd:bb:6c:62:44:e8:69:2b:9f:ce:12:c0:c3:
6b:e7:4a:6b:94:5c:22:09:0d:6a:1b:14:a9:74:a1:
de:7e:ed:da:19:e2:d7:87:76:12:ff:b2:cf:46:85:
84:20:ed:22:d5:59:84:04:aa:91:41:44:f2:a0:1d:
bc:5b:70:12:77:fd:93:e4:09:29:9e:f8:3c:17:9d:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B2:98:B6:B9:95:12:3D:2F:8D:10:2C:8D:3C:F0:C9:1A:85:E5:7B
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/97KYtrmVEj0vjRAsjTzwyRqF5Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.231.0/24
85.92.142.0/24
Signature Algorithm: sha256WithRSAEncryption
38:5d:53:65:45:dd:42:50:d5:9c:c4:87:c3:9c:b0:a9:f1:8a:
f3:90:7d:f6:5e:09:a7:16:c8:96:71:ab:37:53:91:1b:7d:62:
83:34:75:f9:66:7d:1b:08:53:7a:f4:b2:eb:de:9f:d5:7e:e9:
c4:ee:2f:13:90:a9:2a:7e:cf:07:f4:9d:8d:92:7f:9c:b0:90:
3f:e6:2f:a0:21:48:af:69:a5:c2:b2:19:05:4a:ad:3a:1d:c8:
e2:f4:07:e4:57:e2:12:72:05:ca:fa:51:4d:03:0e:44:a7:12:
4f:ce:f3:e5:03:c9:de:08:3d:ea:1a:ad:51:ca:29:8a:21:0d:
ba:50:94:4e:0d:e2:a7:c4:54:2e:28:af:ab:3d:2a:ca:3b:4b:
92:53:f8:b4:6d:f1:f8:c6:44:45:87:03:75:23:70:b5:b5:e2:
b0:e5:06:6b:b2:db:19:8f:58:da:46:22:c2:df:46:02:c4:83:
c0:19:f2:46:0c:8d:ad:d1:b0:49:ad:1c:c7:d7:6b:4e:1d:f5:
d2:12:8a:1a:b6:03:8d:5c:d3:a7:0f:fa:34:25:47:53:78:a3:
53:69:c6:42:ca:c5:11:74:06:e1:8f:9a:51:cd:09:4d:c1:42:
bd:98:f8:d4:3e:bf:36:cc:0f:c9:98:3e:53:27:4a:9c:03:4f:
c7:2c:30:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:46 2026 by rpki-client