Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/XqV0597Xo_MkEED3jLDmcWL6fvQ.roa
File: XqV0597Xo_MkEED3jLDmcWL6fvQ.roa (raw, json)
Hash identifier: kyh2gbblSVguPugHg4ygFbc+GDfw8j5BLGulCOFHoBI=
Subject key identifier: 5E:A5:74:E7:DE:D7:A3:F3:24:10:40:F7:8C:B0:E6:71:62:FA:7E:F4
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A01AC8E43AF1E31D72087CD0A6CFE17D6C
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/XqV0597Xo_MkEED3jLDmcWL6fvQ.roa
Signing time: Wed 19 Aug 2026 16:09:28 +0000
ROA not before: Wed 19 Aug 2026 16:09:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 89.30.166.0/24 maxlen: 24
89.30.167.0/24 maxlen: 24
89.30.180.0/24 maxlen: 24
89.30.181.0/24 maxlen: 24
89.30.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:c8:e4:3a:f1:e3:1d:72:08:7c:d0:a6:cf:e1:7d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Aug 19 16:09:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ea574e7ded7a3f3241040f78cb0e67162fa7ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:95:c2:28:04:a3:e2:e5:7f:9d:35:1c:e3:e8:
ce:c5:c2:f5:df:b9:a5:16:cb:7c:ca:d0:62:72:ef:
dd:aa:c9:c7:5f:87:2f:68:92:2b:4e:01:87:c6:b9:
8b:4a:a7:71:56:a0:90:9b:2c:bd:c8:a4:cb:6c:08:
50:2a:58:3e:8e:98:e6:00:e0:6c:98:da:2f:f9:9f:
cb:79:3e:59:9e:c7:42:66:fc:5c:9d:99:df:bc:63:
f3:f4:9d:85:8d:32:55:d3:d0:4d:d6:1c:50:63:5a:
69:44:b2:41:89:cf:46:bc:85:44:29:a3:78:01:1a:
70:4a:f9:65:a8:d4:99:e5:49:ca:50:3b:55:b8:ea:
fc:a5:59:f6:71:00:7b:04:d6:6d:8a:fe:03:5d:57:
b4:57:32:4b:6b:7a:3b:c7:98:3d:ef:f2:51:32:79:
c0:4b:1f:61:21:3a:db:2a:be:d0:36:6f:46:db:5e:
66:1e:84:42:8a:6b:2d:f4:aa:f6:65:db:b6:40:80:
c7:1b:4f:cd:84:71:b1:42:c5:ad:db:dc:98:e4:cf:
f5:ab:b1:03:9c:41:9f:83:05:3a:16:0e:fb:28:7b:
d3:e6:e8:05:f4:37:b9:b1:49:26:f5:9a:29:90:2c:
d3:e2:76:c8:69:9e:7c:7e:94:48:43:8b:18:cc:db:
c5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A5:74:E7:DE:D7:A3:F3:24:10:40:F7:8C:B0:E6:71:62:FA:7E:F4
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/XqV0597Xo_MkEED3jLDmcWL6fvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.166.0/23
89.30.180.0-89.30.182.255
Signature Algorithm: sha256WithRSAEncryption
17:b5:ca:9f:82:15:31:ab:d7:18:f1:07:12:94:22:de:d6:53:
1b:be:6f:cd:df:28:49:db:ca:43:a4:82:18:b5:ec:7a:9f:21:
99:eb:fe:d8:be:a0:40:9c:49:b0:86:32:5c:72:41:d9:83:2c:
85:e1:a1:36:65:2c:d0:ad:09:29:a8:16:7f:3c:6d:0d:6e:3a:
f0:f3:eb:4f:74:c0:80:9a:c9:50:a5:62:94:ed:d3:20:04:f7:
a1:67:78:08:f9:98:0e:77:27:c3:1a:2e:72:15:22:4c:4a:38:
23:47:a5:81:bb:48:ee:5d:32:0c:1f:99:0b:47:34:be:cf:cb:
c8:3a:f1:39:59:fc:04:36:88:8a:b4:2a:6e:f0:4a:bf:31:9c:
a1:a6:5d:97:0d:ce:17:be:24:6e:5a:73:3d:d0:e4:30:47:15:
b0:b3:ca:a0:65:3b:b9:6c:55:a9:04:d0:59:ee:7b:6e:9e:3b:
71:58:7b:72:fb:df:46:0c:cd:47:cf:38:70:dc:b1:f5:4e:a8:
c4:89:3c:6f:d5:98:00:da:b7:7e:4c:87:c6:d2:93:8f:5f:43:
45:f8:33:03:ae:75:d1:86:e8:04:f1:54:1c:94:b7:2d:0a:9b:
9b:ad:de:72:a2:46:d7:4d:55:af:78:24:15:a2:86:dd:7f:dd:
cc:49:9b:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 25 10:06:04 2026 by rpki-client