Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/Jx-zSBaAtSzGRnoxua09_B35hu8.roa
File: Jx-zSBaAtSzGRnoxua09_B35hu8.roa (raw, json)
Hash identifier: ygx6YAI4Qrh2nCUmG7dLJ2U8ftvHeQnhJCeN0vQjB9w=
Subject key identifier: 27:1F:B3:48:16:80:B5:2C:C6:46:7A:31:B9:AD:3D:FC:1D:F9:86:EF
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A1517E017EB25FD5873B86F8705948DCC6
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/Jx-zSBaAtSzGRnoxua09_B35hu8.roa
Signing time: Mon 19 Oct 2026 00:09:34 +0000
ROA not before: Mon 19 Oct 2026 00:09:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 89.30.167.0/24 maxlen: 24
89.30.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:7e:01:7e:b2:5f:d5:87:3b:86:f8:70:59:48:dc:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Oct 19 00:09:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=271fb3481680b52cc6467a31b9ad3dfc1df986ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a6:7d:8a:ee:6f:3f:f9:5f:5f:1c:cd:96:59:
e1:67:93:fc:28:4f:e2:e8:75:c2:56:81:6a:b0:13:
61:a0:59:3d:da:4b:c6:55:58:91:f0:32:0d:9c:30:
62:a3:19:b0:e2:fd:a6:f2:a8:9f:a2:88:7b:cf:b1:
69:5c:89:d4:d1:9e:89:35:bf:9f:07:70:35:9d:36:
41:36:ce:ff:fc:43:b6:1c:ed:b5:20:43:77:00:1d:
3e:92:2e:4c:91:ce:0e:69:2b:5f:d4:6b:c4:aa:6f:
bb:42:9e:e1:c1:9d:2c:09:c9:62:7d:db:e5:e9:e7:
6c:ee:01:0d:e9:02:84:b3:24:a0:a2:cb:8c:fa:d4:
50:03:67:20:e5:aa:2f:32:f5:df:bd:83:ce:d6:aa:
2f:db:5f:72:79:81:57:d8:35:cb:a4:46:6b:d2:e0:
b1:1e:50:8f:df:fd:d0:e8:1c:d6:be:c8:a4:f6:20:
48:f8:25:60:7d:6c:c6:0d:ce:88:93:93:19:61:09:
3d:b3:df:6d:8b:b4:c5:f7:a2:c9:16:ac:d3:48:36:
14:ff:9b:6c:0c:6c:c6:82:28:cb:f4:ad:7d:00:93:
1d:d4:29:0e:5c:d0:93:8d:50:d6:da:c6:ed:f5:fe:
a4:1a:5b:95:ae:8b:0a:a5:63:33:e5:55:a6:b2:c5:
c4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1F:B3:48:16:80:B5:2C:C6:46:7A:31:B9:AD:3D:FC:1D:F9:86:EF
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/Jx-zSBaAtSzGRnoxua09_B35hu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.167.0/24
89.30.180.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ea:ea:e3:51:f9:9b:6f:9c:ca:29:3c:fa:61:5e:3c:f1:c8:
ea:e1:f7:9a:7f:6c:6b:5e:0c:f5:bd:57:6d:48:b0:29:57:d5:
92:0b:b6:2d:ce:da:ab:2e:d7:f7:b0:ee:b2:0b:66:41:d5:ad:
aa:6d:5b:9a:5d:03:39:13:c6:c3:96:6a:3b:8e:c4:22:a4:93:
c2:0c:56:7f:ac:11:3a:d3:0a:47:3c:81:6e:1a:ec:17:2e:be:
f0:d6:dc:53:5f:a0:2b:b1:fa:d3:a0:33:98:94:bc:4b:d5:fe:
a2:df:68:93:86:16:64:b6:63:41:d5:39:d2:07:e4:d2:f0:fb:
fa:74:1b:13:9a:06:ab:c4:36:88:9f:d9:b7:67:08:2d:8f:8b:
5d:6e:80:a2:67:b4:47:31:0e:90:2b:ac:33:64:a5:88:f7:f7:
cb:e2:11:fa:1e:fd:3c:06:80:43:e5:4a:2b:71:b3:7b:42:ff:
d1:41:64:b8:38:15:f5:ee:5e:58:7d:3e:f2:13:f2:64:b6:38:
1b:51:d6:88:4f:b6:3b:78:4f:2b:7d:0b:e1:96:97:84:e8:52:
19:f6:12:7b:b7:fe:2e:c5:6d:28:c5:ae:38:d5:72:b4:4e:e6:
c6:5f:6e:e0:d3:2e:7d:ad:4e:cd:7b:b0:1f:56:d2:24:83:2e:
a6:6c:d4:05
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaFRfgF+sl/VhzuG+HBZSNzGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYxMDE5MDAwOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzFmYjM0ODE2ODBiNTJjYzY0NjdhMzFiOWFkM2RmYzFkZjk4NmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqZ9iu5vP/lfXxzNllnhZ5P8KE/i
6HXCVoFqsBNhoFk92kvGVViR8DINnDBioxmw4v2m8qifooh7z7FpXInU0Z6JNb+f
B3A1nTZBNs7//EO2HO21IEN3AB0+ki5Mkc4OaStf1GvEqm+7Qp7hwZ0sCclifdvl
6eds7gEN6QKEsySgosuM+tRQA2cg5aovMvXfvYPO1qov219yeYFX2DXLpEZr0uCx
HlCP3/3Q6BzWvsik9iBI+CVgfWzGDc6Ik5MZYQk9s99ti7TF96LJFqzTSDYU/5ts
DGzGgijL9K19AJMd1CkOXNCTjVDW2sbt9f6kGluVrosKpWMz5VWmssXEtQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCcfs0gWgLUsxkZ6MbmtPfwd+YbvMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvSngtelNCYUF0U3pHUm5veHVhMDlfQjM1aHU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWR6nAwQA
WR60MA0GCSqGSIb3DQEBCwUAA4IBAQBR6urjUfmbb5zKKTz6YV488cjq4feaf2xr
Xgz1vVdtSLApV9WSC7YtztqrLtf3sO6yC2ZB1a2qbVuaXQM5E8bDlmo7jsQipJPC
DFZ/rBE60wpHPIFuGuwXLr7w1txTX6ArsfrToDOYlLxL1f6i32iThhZktmNB1TnS
B+TS8Pv6dBsTmgarxDaIn9m3Zwgtj4tdboCiZ7RHMQ6QK6wzZKWI9/fL4hH6Hv08
BoBD5UorcbN7Qv/RQWS4OBX17l5YfT7yE/JktjgbUdaIT7Y7eE8rfQvhlpeE6FIZ
9hJ7t/4uxW0oxa441XK0TubGX27g0y59rU7Ne7AfVtIkgy6mbNQF
-----END CERTIFICATE-----
Generated at Mon Oct 26 13:15:26 2026 by rpki-client