Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/U_ZLkvUUAkI4RwZMyq2Jjf32RV4.roa
File: U_ZLkvUUAkI4RwZMyq2Jjf32RV4.roa (raw, json)
Hash identifier: ZA+c3pV+IS0ReWusbsSPVJltdHE5p1qLZ8/Eb5F1S/A=
Subject key identifier: 53:F6:4B:92:F5:14:02:42:38:47:06:4C:CA:AD:89:8D:FD:F6:45:5E
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A06A82ED4EF9C79DE91EE6BEDDC1BF019B
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/U_ZLkvUUAkI4RwZMyq2Jjf32RV4.roa
Signing time: Fri 04 Sep 2026 03:42:40 +0000
ROA not before: Fri 04 Sep 2026 03:42:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 89.30.136.0/24 maxlen: 24
213.214.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6a:82:ed:4e:f9:c7:9d:e9:1e:e6:be:dd:c1:bf:01:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 4 03:42:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53f64b92f51402423847064ccaad898dfdf6455e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:3e:60:a6:66:53:da:30:79:7d:7a:fc:4c:
d8:d9:bc:1f:7e:48:b8:93:2f:72:69:6d:5e:86:2d:
60:2a:0b:90:3b:87:12:9e:9a:17:c6:e9:21:10:2a:
51:40:20:01:06:ae:0f:2b:13:82:02:cc:6c:7d:32:
d1:90:f2:98:35:d9:40:7f:cb:a1:84:21:2b:98:33:
31:15:98:dd:6b:d4:05:c9:d9:b1:06:07:ca:82:a5:
e7:97:0c:f2:a1:b1:07:10:fe:d8:08:81:fc:19:2b:
7d:6c:94:95:29:3c:8d:7d:77:fe:7b:6c:c9:68:e6:
d0:be:92:6f:ab:c1:0c:58:b2:b3:eb:1b:69:a6:e0:
6d:30:98:49:b1:21:c6:a5:2c:69:63:89:66:2a:30:
47:b8:02:e6:75:42:86:b3:07:05:5a:ea:ba:da:95:
d1:34:da:b3:1e:0a:34:0d:e1:54:da:c9:48:2c:f1:
54:62:07:b5:1b:91:54:cd:fa:83:da:ec:ec:d1:9c:
fc:a9:3e:26:91:f2:ec:ab:2e:64:5e:62:7b:03:ed:
9b:b7:a8:aa:ac:af:5c:41:2d:ed:26:61:d6:a0:4f:
27:a0:f8:de:6b:a5:1b:27:b7:0c:0b:fc:4d:60:45:
41:c8:09:b2:ff:84:ae:35:50:df:30:41:b5:b2:79:
da:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F6:4B:92:F5:14:02:42:38:47:06:4C:CA:AD:89:8D:FD:F6:45:5E
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/U_ZLkvUUAkI4RwZMyq2Jjf32RV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.136.0/24
213.214.106.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:9d:83:5c:09:af:5c:b6:f4:26:49:3c:9c:67:24:90:11:20:
ed:25:ca:c5:c7:62:21:36:da:f8:19:a8:ac:01:b8:a2:d2:26:
1d:76:81:92:72:4d:c8:8b:8f:84:d0:d1:6a:2c:7c:dd:81:97:
b6:27:01:29:bc:90:a7:09:ed:9c:36:bd:b6:4c:c0:c4:fc:c0:
1b:ca:4e:7e:7d:ed:ef:d8:92:35:88:31:ad:46:4a:08:47:c3:
74:6b:1a:8f:67:2f:ff:b0:a2:e3:45:03:90:c9:27:4a:1d:cd:
91:66:f7:21:1a:bd:0e:1b:bb:c4:d7:15:98:50:91:46:fa:49:
1e:10:5e:5d:e6:34:2e:c0:b2:c6:5b:0f:b5:63:40:64:e3:53:
c8:85:2a:f8:d7:44:ab:0d:46:1d:ce:34:5a:90:20:b2:f1:28:
35:0b:bf:0b:13:ff:3d:f6:a1:99:6f:0d:4e:5e:e5:5a:9b:2a:
80:72:68:18:f8:17:5c:82:9f:f9:6d:14:f3:e8:8d:4e:be:f4:
01:7e:d4:b8:3e:52:0d:c8:cf:e1:52:59:df:3a:d0:53:07:a0:
29:35:99:f8:94:5c:48:cb:af:df:cd:6d:13:84:e3:7b:82:26:
60:94:39:54:bc:30:1e:66:d8:76:6a:4c:a1:90:a7:81:b4:3c:
9d:d1:bb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:56:43 2026 by rpki-client