Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/XI1cXLoRTzVzJ4HBSRgqYjT-zp0.roa
File: XI1cXLoRTzVzJ4HBSRgqYjT-zp0.roa (raw, json)
Hash identifier: /Wdb3geY5mfLbIrEeVHH/UCOuHpfLpDypaWO7mFGqBg=
Subject key identifier: 5C:8D:5C:5C:BA:11:4F:35:73:27:81:C1:49:18:2A:62:34:FE:CE:9D
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019FF4AD61D5FE4EB414967E364E7115CCB1
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/XI1cXLoRTzVzJ4HBSRgqYjT-zp0.roa
Signing time: Wed 12 Aug 2026 06:33:51 +0000
ROA not before: Wed 12 Aug 2026 06:33:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.30.136.0/24 maxlen: 24
89.30.137.0/24 maxlen: 24
89.30.138.0/24 maxlen: 24
89.30.139.0/24 maxlen: 24
89.30.140.0/24 maxlen: 24
89.30.141.0/24 maxlen: 24
89.30.143.0/24 maxlen: 24
89.30.160.0/24 maxlen: 24
89.30.161.0/24 maxlen: 24
89.30.162.0/24 maxlen: 24
89.30.163.0/24 maxlen: 24
89.30.164.0/24 maxlen: 24
89.30.165.0/24 maxlen: 24
89.30.166.0/24 maxlen: 24
89.30.167.0/24 maxlen: 24
89.30.172.0/24 maxlen: 24
89.30.175.0/24 maxlen: 24
89.30.178.0/24 maxlen: 24
89.30.179.0/24 maxlen: 24
89.30.180.0/24 maxlen: 24
89.30.181.0/24 maxlen: 24
89.30.182.0/24 maxlen: 24
89.30.183.0/24 maxlen: 24
89.30.184.0/24 maxlen: 24
89.30.185.0/24 maxlen: 24
89.30.186.0/24 maxlen: 24
89.30.188.0/24 maxlen: 24
89.30.189.0/24 maxlen: 24
89.30.190.0/24 maxlen: 24
89.30.191.0/24 maxlen: 24
89.30.198.0/24 maxlen: 24
89.30.199.0/24 maxlen: 24
89.30.200.0/24 maxlen: 24
89.30.201.0/24 maxlen: 24
89.30.202.0/24 maxlen: 24
89.30.203.0/24 maxlen: 24
89.30.204.0/24 maxlen: 24
89.30.206.0/24 maxlen: 24
89.30.207.0/24 maxlen: 24
89.30.240.0/24 maxlen: 24
89.30.241.0/24 maxlen: 24
89.30.242.0/24 maxlen: 24
89.30.243.0/24 maxlen: 24
89.30.244.0/24 maxlen: 24
89.30.246.0/24 maxlen: 24
89.30.247.0/24 maxlen: 24
213.189.24.0/24 maxlen: 24
213.214.105.0/24 maxlen: 24
213.247.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 09:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:ad:61:d5:fe:4e:b4:14:96:7e:36:4e:71:15:cc:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Aug 12 06:33:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c8d5c5cba114f35732781c149182a6234fece9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:ce:8f:66:67:6b:70:d8:6c:1d:8e:4d:60:
d0:75:87:15:67:10:e8:0f:40:6e:e1:f3:9e:d5:c3:
c1:f4:9e:4e:c5:92:a7:10:3e:b4:03:11:29:89:f7:
46:f8:86:d5:0d:f7:3f:62:dd:87:d4:e6:00:59:9e:
50:de:1e:98:7e:b6:f5:0c:34:37:7a:74:fc:23:49:
0b:48:3e:44:45:36:00:b0:75:d0:93:4c:41:ad:4a:
ff:e4:a2:91:c7:b8:ee:0c:d5:36:50:b2:72:26:42:
75:fa:cb:ee:01:c1:83:dd:34:59:71:72:07:55:df:
e6:ce:07:2b:f5:eb:02:e4:d7:71:4d:a7:ac:23:cd:
b9:e6:3f:29:9f:f9:5d:3f:51:41:4b:a1:b1:4b:e9:
0e:65:4f:34:d1:42:dc:40:7e:93:41:b4:1f:4f:16:
98:ba:5f:31:b3:36:a6:af:7c:42:47:31:3a:66:71:
cf:1d:25:01:13:87:eb:9a:de:ef:ee:c6:72:2e:bc:
bb:2b:9f:20:f7:da:0c:60:06:1a:7e:6a:52:2e:d5:
27:5c:d2:3c:3a:68:6c:f0:6c:6e:a0:e3:83:65:83:
c9:9f:60:89:65:8c:95:5f:9a:ba:e6:f3:b2:3a:02:
a2:09:b2:29:7b:15:2b:46:ec:85:99:ab:ad:1a:d8:
b4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8D:5C:5C:BA:11:4F:35:73:27:81:C1:49:18:2A:62:34:FE:CE:9D
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/XI1cXLoRTzVzJ4HBSRgqYjT-zp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.136.0-89.30.141.255
89.30.143.0/24
89.30.160.0/21
89.30.172.0/24
89.30.175.0/24
89.30.178.0-89.30.186.255
89.30.188.0/22
89.30.198.0-89.30.204.255
89.30.206.0/23
89.30.240.0-89.30.244.255
89.30.246.0/23
213.189.24.0/24
213.214.105.0/24
213.247.50.0/24
Signature Algorithm: sha256WithRSAEncryption
60:67:9e:67:65:f9:88:09:c8:ca:64:38:0e:ce:a9:61:73:65:
82:d7:ce:16:59:fb:f7:d5:f4:81:68:2b:95:f5:4a:07:f6:81:
14:00:dd:db:d8:44:fc:5b:10:a8:fc:92:8f:ff:83:37:5e:10:
5b:11:4d:40:42:76:6d:f0:d2:ea:5e:af:28:f8:23:40:22:b1:
2e:a5:5f:4b:38:20:72:c0:73:75:03:17:d8:2b:d6:1a:42:95:
95:86:e3:61:70:ea:e7:58:cd:4e:71:3d:25:7f:b3:60:34:35:
a4:a6:ec:b3:c1:6c:95:a8:91:e3:da:2a:a7:1e:fc:6a:af:4e:
85:5a:e7:7b:1d:98:aa:da:43:3e:94:34:eb:a8:9f:c5:2a:4b:
99:09:30:e9:32:3e:d4:97:cc:30:8d:08:13:87:48:75:3b:1a:
65:30:ae:e9:81:d1:12:a5:2a:da:b8:e3:80:82:2f:b3:0a:df:
4c:67:19:a6:f3:15:79:23:09:12:56:c7:0b:85:44:65:03:f9:
a9:e4:63:5f:91:e3:d3:fb:50:62:5d:13:de:8a:73:ed:5b:ef:
81:17:6a:67:97:d5:14:3f:cd:a0:4c:62:46:81:b1:bc:70:64:
e7:91:3f:0f:32:59:36:8d:ee:f7:10:4b:99:71:b2:3b:89:e8:
37:be:19:f8
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgISAZ/0rWHV/k60FJZ+Nk5xFcyxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYwODEyMDYzMzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzhkNWM1Y2JhMTE0ZjM1NzMyNzgxYzE0OTE4MmE2MjM0ZmVjZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwDOj2Zna3DYbB2OTWDQdYcVZxDo
D0Bu4fOe1cPB9J5OxZKnED60AxEpifdG+IbVDfc/Yt2H1OYAWZ5Q3h6Yfrb1DDQ3
enT8I0kLSD5ERTYAsHXQk0xBrUr/5KKRx7juDNU2ULJyJkJ1+svuAcGD3TRZcXIH
Vd/mzgcr9esC5NdxTaesI8255j8pn/ldP1FBS6GxS+kOZU800ULcQH6TQbQfTxaY
ul8xszamr3xCRzE6ZnHPHSUBE4frmt7v7sZyLry7K58g99oMYAYafmpSLtUnXNI8
Omhs8GxuoOODZYPJn2CJZYyVX5q65vOyOgKiCbIpexUrRuyFmautGti0NQIDAQAB
o4ICeDCCAnQwHQYDVR0OBBYEFFyNXFy6EU81cyeBwUkYKmI0/s6dMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvWEkxY1hMb1JUelZ6SjRIQlNSZ3FZalQtenAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdDAMAwQDWR6I
AwQBWR6MAwQAWR6PAwQDWR6gAwQAWR6sAwQAWR6vMAwDBAFZHrIDBABZHroDBAJZ
HrwwDAMEAVkexgMEAFkezAMEAVkezjAMAwQEWR7wAwQAWR70AwQBWR72AwQA1b0Y
AwQA1dZpAwQA1fcyMA0GCSqGSIb3DQEBCwUAA4IBAQBgZ55nZfmICcjKZDgOzqlh
c2WC184WWfv31fSBaCuV9UoH9oEUAN3b2ET8WxCo/JKP/4M3XhBbEU1AQnZt8NLq
Xq8o+CNAIrEupV9LOCBywHN1AxfYK9YaQpWVhuNhcOrnWM1OcT0lf7NgNDWkpuyz
wWyVqJHj2iqnHvxqr06FWud7HZiq2kM+lDTrqJ/FKkuZCTDpMj7Ul8wwjQgTh0h1
OxplMK7pgdESpSrauOOAgi+zCt9MZxmm8xV5IwkSVscLhURlA/mp5GNfkePT+1Bi
XRPeinPtW++BF2pnl9UUP82gTGJGgbG8cGTnkT8PMlk2je73EEuZcbI7ieg3vhn4
-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:03 2026 by rpki-client