Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/EXM8zv4hDMV5vpuDDhitBb0YsJk.roa
File: EXM8zv4hDMV5vpuDDhitBb0YsJk.roa (raw, json)
Hash identifier: dWnBV6uZ6yoWCEmneHJfdW94pJqTaIBLN9AwRXQDpQY=
Subject key identifier: 11:73:3C:CE:FE:21:0C:C5:79:BE:9B:83:0E:18:AD:05:BD:18:B0:99
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019E69508CCCC3BEA05818363E26A1097A84
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/EXM8zv4hDMV5vpuDDhitBb0YsJk.roa
Signing time: Wed 27 May 2026 12:02:27 +0000
ROA not before: Wed 27 May 2026 12:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16278
IP address blocks: 89.30.224.0/22 maxlen: 24
2a02:20b2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:69:50:8c:cc:c3:be:a0:58:18:36:3e:26:a1:09:7a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: May 27 12:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11733ccefe210cc579be9b830e18ad05bd18b099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:09:16:11:61:38:0e:56:4b:89:28:86:f3:
41:2b:61:24:38:e2:27:57:47:d8:02:0e:2b:c3:41:
3a:bf:7a:e4:28:85:c5:15:d8:a7:aa:7e:77:10:62:
cb:ac:f4:d6:00:7f:c7:62:d2:0b:dc:ab:fb:4c:69:
72:6f:62:3e:76:fe:84:0f:e3:e9:e5:db:b1:3b:fc:
cb:39:3e:0c:32:20:a7:8c:db:31:41:c1:d4:fe:e9:
f6:4e:ef:db:8f:0f:00:26:bd:07:43:db:ee:3c:43:
f9:ab:10:04:93:8d:ee:e5:0d:28:24:74:7f:6b:81:
c9:1f:03:dd:1a:a1:e7:5b:cb:8d:1c:7c:22:ac:a5:
e7:eb:e3:b6:17:06:e1:cc:96:5c:0e:ba:2d:cf:51:
f6:d9:d1:b1:bd:43:83:37:34:9c:dc:7d:89:7d:9c:
6b:20:72:00:05:f7:01:5e:a5:9b:94:06:18:16:11:
cc:bd:97:a5:24:50:c7:c3:3f:27:ac:c8:8d:48:0a:
ef:5d:59:b2:d0:11:52:cb:53:10:9b:23:6c:60:e0:
6c:a5:3d:74:2e:ea:50:24:37:bf:a4:82:f4:b7:c8:
22:57:71:6f:90:4f:fd:57:9c:e8:9d:86:73:e6:18:
33:56:39:f2:52:f9:c7:1e:0d:8b:68:0b:67:17:e9:
bd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:73:3C:CE:FE:21:0C:C5:79:BE:9B:83:0E:18:AD:05:BD:18:B0:99
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/EXM8zv4hDMV5vpuDDhitBb0YsJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.224.0/22
IPv6:
2a02:20b2::/32
Signature Algorithm: sha256WithRSAEncryption
08:46:38:b3:c1:e2:58:3c:6e:f6:5d:26:d6:bc:af:c8:55:99:
46:df:3b:c3:bc:70:3c:d2:5b:7f:4a:1b:87:d9:df:bd:a4:81:
de:b2:b6:29:23:fd:7d:05:e0:8a:05:7b:a4:e5:48:f0:b1:f5:
73:e1:7b:84:5e:50:b1:ef:c7:04:eb:d0:f4:63:44:48:8b:38:
ef:47:9b:a7:e0:35:4b:31:78:26:3f:ff:63:92:08:b3:b1:82:
b5:63:16:b6:c0:99:18:f2:57:2c:64:62:f4:82:60:01:85:f8:
9c:79:4e:1e:25:8f:5e:42:8e:ea:41:b6:db:c8:75:9b:f3:63:
8e:bb:ce:1c:33:f3:51:91:62:00:dd:53:1f:51:91:02:49:aa:
6c:bd:7f:fa:2c:81:e8:20:0e:d9:b1:7a:4d:ff:98:b4:29:13:
14:08:7c:ac:6c:cf:d7:d4:7d:c0:d6:3b:77:93:36:06:7b:1f:
67:17:22:2d:ce:c7:78:c6:03:6b:77:35:7e:57:8a:2a:74:33:
ed:58:4d:ae:05:f1:c2:a6:26:bb:cd:c8:df:45:0b:e0:bd:fe:
1a:98:6b:44:96:40:ec:04:79:88:d3:2f:06:fe:ca:76:c6:75:
7c:d2:0e:a5:32:f4:ec:68:3f:ed:d2:56:4f:5e:f0:36:07:cf:
07:79:2d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:04:20 2026 by rpki-client