Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/aarvSTubW7Zjg2XvIlMnifa_q0E.roa
File: aarvSTubW7Zjg2XvIlMnifa_q0E.roa (raw, json)
Hash identifier: zKS4wnoCyV3/6qggMy+MiBSCpuJKrTyf7LnBR8U4GC8=
Subject key identifier: 69:AA:EF:49:3B:9B:5B:B6:63:83:65:EF:22:53:27:89:F6:BF:AB:41
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F2694602C68A308CF3B57D29D425F4D8F
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/aarvSTubW7Zjg2XvIlMnifa_q0E.roa
Signing time: Fri 03 Jul 2026 06:04:45 +0000
ROA not before: Fri 03 Jul 2026 06:04:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 89.30.177.0/24 maxlen: 24
89.30.181.0/24 maxlen: 24
89.30.188.0/24 maxlen: 24
89.30.244.0/24 maxlen: 24
89.30.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:94:60:2c:68:a3:08:cf:3b:57:d2:9d:42:5f:4d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 3 06:04:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69aaef493b9b5bb6638365ef22532789f6bfab41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:58:57:1b:48:8b:f3:a9:5f:7d:0c:51:40:
a1:de:06:c5:10:79:84:28:bf:10:b4:e2:c9:03:0b:
68:81:ab:9b:41:51:6c:e3:9b:d6:45:00:f4:8b:91:
63:d8:1c:2d:c8:be:49:a7:6a:d2:30:d9:fc:48:95:
bd:81:97:7e:62:08:41:cf:90:85:e5:b5:22:9f:3e:
f9:04:14:a3:5f:e2:ed:84:52:62:60:50:c7:44:2c:
21:90:cf:c3:bc:f5:78:a7:e9:61:be:54:ae:b2:9e:
02:ff:21:2f:23:06:77:f8:7e:44:a8:b6:c8:e6:a2:
08:c3:d9:82:3b:e0:4e:b0:cf:d3:4b:63:30:c8:a4:
94:43:b3:16:f5:cd:d9:e6:d2:4d:33:37:02:47:5b:
30:e8:32:e1:0f:2a:0a:66:47:03:a8:45:01:21:f4:
46:c4:48:88:67:45:8d:00:69:e2:6e:73:f7:3a:03:
0d:af:73:92:e4:bb:35:0a:36:c7:63:5a:73:17:c9:
9e:d0:6f:d2:dc:b7:53:97:4a:15:1b:16:9e:c3:a5:
e5:07:7c:96:3d:81:85:5b:d4:17:48:44:74:6b:1a:
44:04:4b:bf:36:2f:0c:c5:b0:8d:4c:92:95:52:32:
31:ce:37:68:c6:8f:9c:3b:00:68:0e:ba:ef:7b:da:
65:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AA:EF:49:3B:9B:5B:B6:63:83:65:EF:22:53:27:89:F6:BF:AB:41
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/aarvSTubW7Zjg2XvIlMnifa_q0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.177.0/24
89.30.181.0/24
89.30.188.0/24
89.30.244.0/24
89.30.246.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a5:d1:05:c1:6f:ad:88:40:57:a0:ef:4a:d9:92:85:e5:1d:
0d:dd:93:ae:50:b2:0c:f5:dc:bb:a0:c9:33:ae:48:6c:d2:a4:
f4:0a:98:80:84:b7:cd:f9:7d:c1:33:e7:a3:3b:a4:3c:d1:8e:
83:c5:cf:65:99:58:f9:51:2e:0a:d2:a6:81:69:62:ea:b4:5c:
fa:c6:ec:4e:be:ba:81:d2:eb:91:34:3d:6d:e0:d1:7b:4d:e2:
d0:53:ca:9a:ed:72:f3:c4:c7:14:ea:5d:98:b7:4a:b0:13:52:
d4:9a:26:8d:82:a2:96:d0:2e:cc:73:d0:6f:36:86:59:71:30:
92:58:27:7e:e0:95:93:8f:b4:91:a4:bd:ef:89:37:d2:ac:1b:
ea:18:33:30:44:00:16:6a:af:8b:fa:e9:e0:17:7c:0c:0b:50:
7b:22:b6:6d:d0:d2:dc:0d:e6:3a:c6:28:c9:97:fb:64:c0:71:
ab:19:32:f0:91:c0:19:6f:b3:c5:a5:09:da:e0:02:ee:6a:7c:
d5:9f:03:91:1f:0e:87:67:76:1e:7e:1d:5a:0d:55:98:43:16:
7e:19:91:cf:c5:c1:fd:98:c6:d7:08:33:6f:e7:d8:45:50:d9:
d2:65:21:be:77:a8:ff:e0:77:3d:76:f4:e2:a5:b6:47:3b:62:
84:df:b9:df
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ8mlGAsaKMIzztX0p1CX02PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYwNzAzMDYwNDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWFhZWY0OTNiOWI1YmI2NjM4MzY1ZWYyMjUzMjc4OWY2YmZhYjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMhYVxtIi/OpX30MUUCh3gbFEHmE
KL8QtOLJAwtogaubQVFs45vWRQD0i5Fj2BwtyL5Jp2rSMNn8SJW9gZd+YghBz5CF
5bUinz75BBSjX+LthFJiYFDHRCwhkM/DvPV4p+lhvlSusp4C/yEvIwZ3+H5EqLbI
5qIIw9mCO+BOsM/TS2MwyKSUQ7MW9c3Z5tJNMzcCR1sw6DLhDyoKZkcDqEUBIfRG
xEiIZ0WNAGnibnP3OgMNr3OS5Ls1CjbHY1pzF8me0G/S3LdTl0oVGxaew6XlB3yW
PYGFW9QXSER0axpEBEu/Ni8MxbCNTJKVUjIxzjdoxo+cOwBoDrrve9plewIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGmq70k7m1u2Y4Nl7yJTJ4n2v6tBMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvYWFydlNUdWJXN1pqZzJYdklsTW5pZmFfcTBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWR6xAwQA
WR61AwQAWR68AwQAWR70AwQAWR72MA0GCSqGSIb3DQEBCwUAA4IBAQAFpdEFwW+t
iEBXoO9K2ZKF5R0N3ZOuULIM9dy7oMkzrkhs0qT0CpiAhLfN+X3BM+ejO6Q80Y6D
xc9lmVj5US4K0qaBaWLqtFz6xuxOvrqB0uuRND1t4NF7TeLQU8qa7XLzxMcU6l2Y
t0qwE1LUmiaNgqKW0C7Mc9BvNoZZcTCSWCd+4JWTj7SRpL3viTfSrBvqGDMwRAAW
aq+L+ungF3wMC1B7IrZt0NLcDeY6xijJl/tkwHGrGTLwkcAZb7PFpQna4ALuanzV
nwORHw6HZ3Yefh1aDVWYQxZ+GZHPxcH9mMbXCDNv59hFUNnSZSG+d6j/4Hc9dvTi
pbZHO2KE37nf
-----END CERTIFICATE-----
Generated at Tue Jul 21 03:19:06 2026 by rpki-client