Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/JjaZurkudx-UKkST6atudJj3AIU.roa
File: JjaZurkudx-UKkST6atudJj3AIU.roa (raw, json)
Hash identifier: dRfqQWg4++hOM2BitZpArCb7fIVbWUXdPwFxajSITpU=
Subject key identifier: 26:36:99:BA:B9:2E:77:1F:94:2A:44:93:E9:AB:6E:74:98:F7:00:85
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A042CFCC81D840276090EF3BBF6FA3411E
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/JjaZurkudx-UKkST6atudJj3AIU.roa
Signing time: Thu 27 Aug 2026 10:41:49 +0000
ROA not before: Thu 27 Aug 2026 10:41:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402315
IP address blocks: 89.30.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:cf:cc:81:d8:40:27:60:90:ef:3b:bf:6f:a3:41:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Aug 27 10:41:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=263699bab92e771f942a4493e9ab6e7498f70085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:29:b8:74:7c:54:13:68:18:29:a6:ab:5d:b4:
bd:3e:55:21:be:1e:d8:25:07:d0:57:63:ef:e5:8f:
06:a6:31:1c:22:51:5a:f3:35:16:f9:cf:96:14:0a:
eb:48:97:0e:ab:a4:cf:0d:42:fe:10:9a:b9:73:4a:
9d:53:c1:1f:4d:91:df:01:47:06:40:ec:00:af:f5:
b2:d3:d1:61:51:72:1d:40:bc:cb:91:21:4c:fb:e1:
3e:05:6b:e6:52:9a:73:80:cc:66:1f:eb:1b:17:18:
09:91:4f:de:b4:48:84:fb:ba:6b:d5:98:a1:51:4a:
53:0d:14:e2:be:e9:43:76:0e:43:9d:4a:07:60:10:
10:bf:10:2a:5c:e8:4b:17:01:c1:25:a4:7d:ee:9d:
dd:a5:b9:32:f6:d7:2c:b3:97:0b:bb:86:d3:b8:67:
6a:03:e3:40:92:0f:b5:d6:0c:48:16:36:7e:99:52:
7e:f3:6b:9b:c6:3b:fa:7c:a9:03:3b:89:f7:06:f1:
f2:c5:0b:62:7d:d1:77:88:bb:47:d4:e1:d9:ce:99:
bc:35:bd:31:42:2e:23:e4:1f:a6:a7:61:68:67:e8:
60:05:d2:a2:18:b4:50:d6:60:70:2b:a1:ef:dd:0d:
b3:de:20:b6:fc:f2:89:98:05:05:c7:7b:ee:03:6c:
e9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:36:99:BA:B9:2E:77:1F:94:2A:44:93:E9:AB:6E:74:98:F7:00:85
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/JjaZurkudx-UKkST6atudJj3AIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.245.0/24
Signature Algorithm: sha256WithRSAEncryption
79:92:40:e8:e9:1a:c7:6a:10:19:9e:49:d6:75:c1:ff:2d:c4:
04:51:90:8d:4c:c1:4a:2f:32:57:b8:fe:01:3a:dc:60:88:ff:
9b:f3:dd:27:66:26:a8:25:8c:e1:42:92:37:ca:0d:95:be:8a:
b2:da:54:46:50:4f:e5:9b:5f:21:4a:7c:1d:cb:14:2d:21:35:
79:ea:bc:f8:fd:d3:0d:ae:e7:3d:14:74:0c:91:48:1e:e0:94:
d4:03:59:f3:19:cd:4f:b0:b4:2e:ff:31:ba:d9:f9:85:34:8d:
8d:0d:74:26:fc:5e:bb:95:7b:e8:16:64:b7:f9:3b:b9:71:02:
75:69:e6:16:b3:c2:0d:06:58:59:2a:53:e3:a8:1b:89:84:57:
58:62:81:21:a2:e5:df:25:ad:f4:ed:07:b9:07:b4:4e:d0:9e:
dd:d6:fe:2b:d3:4e:a9:ad:15:d5:23:b9:1c:5c:c6:2b:74:86:
f4:f2:b2:10:a7:12:e7:e4:d6:66:7c:84:6f:a7:36:aa:94:6e:
ee:2f:87:9d:3c:57:2d:82:af:ae:d5:9e:f7:20:fc:6c:a6:8a:
7b:c4:21:1d:c8:b1:76:61:41:a6:3d:0d:b3:53:40:22:c4:1e:
5c:30:b0:60:ce:24:46:82:17:83:d6:61:8c:ce:b7:18:de:cc:
e5:36:07:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:07 2026 by rpki-client