Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QthJXudO0zJ_SoO-p4daHRyo8rE.roa
File: QthJXudO0zJ_SoO-p4daHRyo8rE.roa (raw, json)
Hash identifier: x/6ZPFkD9BwlmqcIPLYJGD19yNmLXpe/bj8QFfb0eMQ=
Subject key identifier: 42:D8:49:5E:E7:4E:D3:32:7F:4A:83:BE:A7:87:5A:1D:1C:A8:F2:B1
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A095DF80F2E414B0C4381785BD6ED71BF5
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QthJXudO0zJ_SoO-p4daHRyo8rE.roa
Signing time: Sat 12 Sep 2026 13:47:27 +0000
ROA not before: Sat 12 Sep 2026 13:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218713
IP address blocks: 89.30.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:95:df:80:f2:e4:14:b0:c4:38:17:85:bd:6e:d7:1b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 12 13:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42d8495ee74ed3327f4a83bea7875a1d1ca8f2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1b:fa:8d:51:97:0d:26:78:72:5a:35:fb:9d:
d4:70:dd:bb:8f:f6:fd:8b:35:e3:76:db:1f:cb:17:
93:c6:31:36:da:31:4f:0e:00:c8:03:23:74:3b:29:
39:a3:46:3c:7c:48:8a:68:7a:ce:b8:a8:ac:14:49:
38:29:09:9e:98:f1:a3:2a:d9:7d:74:35:c5:8f:59:
61:6e:af:55:79:64:78:4a:62:fe:7c:58:e1:9b:5d:
0c:2e:f7:ac:9d:c2:38:85:c2:57:f7:28:eb:7f:1f:
be:b9:7f:f1:66:5a:aa:5c:3c:9b:17:7c:12:37:52:
e4:c9:5e:87:cb:87:4f:31:65:3b:63:88:0d:2b:8e:
e0:84:ed:b1:59:2b:7a:35:d2:88:39:e2:01:66:41:
6d:95:c2:98:7d:89:a7:9d:ac:42:64:66:bf:8e:40:
64:ae:19:3e:87:c5:1f:0d:e8:e5:89:f1:1b:70:07:
65:a7:67:02:48:ef:e1:7a:8c:25:a2:b8:fe:6e:c5:
3e:1e:25:4f:90:c9:80:78:05:85:e2:80:19:a0:07:
94:e7:ef:f7:43:b0:32:9a:73:69:0f:dd:1d:d1:20:
c9:2d:83:e5:dd:d0:0d:a6:fa:38:6a:1a:3e:f2:f8:
dd:8d:60:e8:c4:b7:72:d5:cc:0d:3f:fe:c3:55:5e:
8a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D8:49:5E:E7:4E:D3:32:7F:4A:83:BE:A7:87:5A:1D:1C:A8:F2:B1
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QthJXudO0zJ_SoO-p4daHRyo8rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.200.0/24
Signature Algorithm: sha256WithRSAEncryption
12:11:91:c0:55:b8:1f:b8:43:e5:b4:98:c3:f6:3c:02:ff:39:
ea:d9:fe:23:96:d7:03:5f:09:cf:68:79:64:ca:70:cd:a6:18:
e7:6c:da:47:e8:6d:ac:25:d3:6d:d9:5c:11:f4:53:e7:1d:ca:
93:f0:56:7d:8d:9c:8d:6d:b6:b4:2d:83:f3:a3:0e:d8:9a:18:
0c:e0:e0:d5:f8:99:c9:bf:24:05:17:96:4f:d5:b9:2a:06:97:
ee:27:e9:1e:f3:94:52:0d:4b:7a:c4:38:95:d5:b4:85:7e:48:
cc:92:da:5f:e2:69:5a:cc:77:f2:50:16:81:19:9a:c9:d7:76:
94:a4:17:b4:58:47:b3:2d:d1:5b:05:4e:0e:e0:f5:b2:89:b5:
5c:5b:70:56:91:67:07:db:65:51:51:9b:a5:bf:da:38:a1:53:
ab:8a:d5:b0:5c:20:01:31:1d:5b:be:7d:ad:86:06:f0:c1:31:
26:9a:04:b8:d9:2b:5d:12:62:ba:94:1d:17:e6:17:28:bc:45:
a8:40:78:7d:26:d6:df:20:cd:c5:a7:44:d2:7b:bc:96:61:c1:
8b:91:ef:ed:e7:e5:33:37:39:e8:19:4a:c7:6e:85:8f:ba:2f:
35:4d:ad:8b:34:cd:11:cc:26:29:d8:1d:9f:a2:22:5c:52:6e:
98:3a:6a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 19:27:28 2026 by rpki-client