Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/VWiQAW10bTaBEj6k_20vOwgPXtU.roa
File: VWiQAW10bTaBEj6k_20vOwgPXtU.roa (raw, json)
Hash identifier: Wv/qVu3bHO6NbgAN03k+xDgdeE3qlqFaYJfpNspE3Bo=
Subject key identifier: 55:68:90:01:6D:74:6D:36:81:12:3E:A4:FF:6D:2F:3B:08:0F:5E:D5
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F26945B9B2A8028689B6E5326E356D440
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/VWiQAW10bTaBEj6k_20vOwgPXtU.roa
Signing time: Fri 03 Jul 2026 06:04:44 +0000
ROA not before: Fri 03 Jul 2026 06:04:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201724
IP address blocks: 89.30.160.0/24 maxlen: 24
89.30.163.0/24 maxlen: 24
89.30.182.0/24 maxlen: 24
89.30.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:94:5b:9b:2a:80:28:68:9b:6e:53:26:e3:56:d4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 3 06:04:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=556890016d746d3681123ea4ff6d2f3b080f5ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:34:1a:a8:7a:6e:bf:75:1c:11:19:f2:57:16:
45:c4:2d:d2:1d:94:a7:23:14:d4:c2:3f:2c:9c:2c:
2f:2e:26:0f:da:9f:02:a8:6d:13:57:a9:80:7e:bd:
31:73:47:ae:44:9d:1c:b2:fa:f7:0d:c7:c0:d8:59:
ec:88:68:b1:05:b4:b6:68:c4:d1:a8:04:9a:f0:de:
e4:6f:81:93:42:14:fe:02:43:ca:fe:2f:8d:8e:5a:
ae:e3:a6:92:bf:2b:3c:fa:a2:8b:59:0b:d7:be:96:
1f:1a:d8:db:1f:3a:76:44:ae:56:2c:0d:3e:5f:7d:
8a:c0:c2:ad:38:e5:3f:a4:7d:0c:9a:81:99:83:99:
eb:7a:ba:03:ac:60:05:92:0f:26:fe:b0:ac:3c:43:
30:ce:91:eb:42:b1:06:ec:f6:79:79:de:b0:50:c2:
9b:77:a5:c2:fc:6e:9b:94:e6:1d:16:a3:92:68:ff:
c4:22:e3:86:cc:2d:31:69:6b:85:89:23:88:92:6e:
84:e2:2f:20:c9:c7:b9:b4:c8:1b:8d:57:15:f4:de:
66:4b:9e:8d:40:8e:e4:e4:cc:1e:ac:c4:b3:31:47:
55:43:76:8f:be:f7:1d:85:55:eb:9e:24:39:9d:6f:
f4:31:f1:ae:99:2a:39:3c:6e:c0:1c:24:89:56:d3:
a3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:68:90:01:6D:74:6D:36:81:12:3E:A4:FF:6D:2F:3B:08:0F:5E:D5
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/VWiQAW10bTaBEj6k_20vOwgPXtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.160.0/24
89.30.163.0/24
89.30.182.0/24
89.30.207.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:fe:07:b8:1b:25:9f:7e:72:52:61:83:93:98:bf:e4:fa:9d:
c8:f3:04:6c:81:a9:a4:41:d2:10:13:71:c1:08:bd:a2:4c:71:
3c:7b:ac:b6:d0:41:11:9b:79:1b:59:5a:31:e1:42:d8:db:85:
e1:75:66:9a:a9:34:de:ba:30:88:a0:62:dd:5d:9a:2d:fc:83:
10:64:ce:2f:8c:27:cd:f5:19:d6:e0:f9:b4:a0:4d:6b:2e:12:
f3:83:c1:ba:53:64:ca:b1:f2:27:4e:d1:3c:b4:11:4c:c1:e4:
b4:79:7b:bc:7b:17:7b:af:3f:e2:1c:38:f2:26:85:15:0d:be:
fe:e3:1d:69:ba:e7:77:e8:f5:4b:d2:48:4c:cd:60:a6:90:fb:
e2:73:71:ed:1e:6e:14:94:60:f7:f6:5c:1e:36:93:45:76:87:
ee:99:b5:df:d3:ca:33:cd:f0:23:af:56:33:e7:e8:d9:22:05:
e9:d5:4d:51:b1:49:1c:2c:70:e8:f5:57:d1:43:cf:01:ec:c5:
bd:21:5b:5c:4a:ca:ab:6e:a1:c0:d0:d3:3f:c2:60:0d:04:3c:
8f:0c:b4:08:65:0a:8c:f3:16:b5:cc:68:7a:84:d1:3c:15:19:
a1:a3:30:2a:cd:12:e4:27:eb:92:b8:60:21:c1:b4:d2:12:2e:
ad:30:21:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:04:12 2026 by rpki-client