Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/XXj47Bt1oFVF0jufBx6US1hf2so.roa
File: XXj47Bt1oFVF0jufBx6US1hf2so.roa (raw, json)
Hash identifier: Ti2JjtJd6RmmFVwToYck36md4OU3iQsvuI2rv4GQ2KE=
Subject key identifier: 5D:78:F8:EC:1B:75:A0:55:45:D2:3B:9F:07:1E:94:4B:58:5F:DA:CA
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A00EA4AC10D044C145132AD27AFD58DEEB
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/XXj47Bt1oFVF0jufBx6US1hf2so.roa
Signing time: Mon 17 Aug 2026 07:34:28 +0000
ROA not before: Mon 17 Aug 2026 07:34:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 5.100.230.0/24 maxlen: 24
83.98.194.0/24 maxlen: 24
85.92.140.0/24 maxlen: 24
85.222.198.0/24 maxlen: 24
89.30.159.0/24 maxlen: 24
213.189.22.0/24 maxlen: 24
213.214.100.0/24 maxlen: 24
213.247.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:a4:ac:10:d0:44:c1:45:13:2a:d2:7a:fd:58:de:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Aug 17 07:34:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d78f8ec1b75a05545d23b9f071e944b585fdaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:f2:0b:9b:02:8f:92:da:53:99:a5:dc:da:
97:2e:8a:60:30:4e:68:a7:24:44:74:8d:f3:23:1b:
12:cd:6b:62:e4:ec:e5:3f:97:d9:c1:45:0a:48:09:
dd:e5:50:7c:84:26:10:d4:7a:0d:e2:06:ab:5f:87:
3e:0f:41:1a:18:19:0b:67:a2:32:8d:86:68:be:f1:
35:e2:cf:f6:42:af:2f:d6:73:c1:1f:88:84:b0:29:
7c:f3:95:26:9d:64:b1:7d:75:cd:85:92:91:0d:33:
df:24:6d:b2:fc:34:a0:7b:29:0a:b0:c0:98:f8:b5:
1f:a6:de:4a:d7:32:f4:f9:86:19:93:45:a1:5d:e7:
da:6e:09:92:e9:7a:18:0e:66:46:3c:5b:28:b8:2e:
f5:85:95:e2:73:9a:9a:95:46:98:b7:ee:c6:af:26:
3b:29:40:56:ae:99:e5:a3:11:43:ac:cd:26:87:ab:
87:d7:00:5a:b9:7d:83:ff:b4:45:99:0a:02:a0:db:
9c:fc:b8:4a:c3:8d:82:9a:62:28:ba:cb:38:b2:92:
f9:3c:d5:0e:72:74:83:dd:73:28:ce:90:a8:74:1f:
a5:da:95:d5:7a:e7:b1:74:a6:b2:00:85:20:2e:8e:
51:36:52:40:6f:cf:b3:9f:55:0e:ac:05:de:2e:0b:
17:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:78:F8:EC:1B:75:A0:55:45:D2:3B:9F:07:1E:94:4B:58:5F:DA:CA
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/XXj47Bt1oFVF0jufBx6US1hf2so.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.230.0/24
83.98.194.0/24
85.92.140.0/24
85.222.198.0/24
89.30.159.0/24
213.189.22.0/24
213.214.100.0/24
213.247.45.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c5:8a:1c:e9:0b:18:67:c5:00:be:3b:1e:96:fd:06:09:84:
95:d7:dc:20:1b:c1:98:70:a1:e3:26:28:e2:01:0b:5a:11:25:
67:03:05:91:f7:3e:73:dc:db:f4:2a:d9:f3:d7:a4:01:c4:03:
36:48:49:9f:14:f5:da:91:fb:2c:88:5d:f2:67:75:33:65:cf:
4f:49:a3:1e:bf:b2:e1:4c:5c:9b:24:7f:29:07:d2:a1:35:2a:
cd:3c:8e:8e:2a:66:d2:e5:27:68:50:73:05:5c:ab:01:5e:91:
e2:a4:e0:fa:0f:88:de:9c:f0:36:87:a9:54:97:ff:bb:01:7b:
e2:e9:d2:79:8d:59:0c:5d:c2:31:44:21:4f:4b:fa:82:d7:8a:
e8:cf:94:3a:2f:6e:09:f3:31:25:6d:d1:3e:26:21:b0:f7:f8:
e8:d0:fc:50:bf:da:dd:5b:a1:1d:5c:c2:1e:af:f5:53:31:54:
61:fd:68:08:36:55:80:2c:f6:22:9d:96:7c:1d:48:3f:38:a4:
48:5d:12:a0:07:d7:1e:e6:a8:ed:0e:91:78:71:95:cf:81:7e:
47:fd:84:ae:9a:e4:4d:28:f6:67:b0:7e:d3:dc:b6:05:d0:d6:
0b:6c:02:28:3b:4a:36:f3:a0:13:ba:75:75:3f:ff:73:d0:9d:
1d:45:8d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:34:41 2026 by rpki-client