Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/c_kw6nE0oumRgbuqbPqt_w9G3LQ.roa
File: c_kw6nE0oumRgbuqbPqt_w9G3LQ.roa (raw, json)
Hash identifier: QlTafF5Fr8rTazn6yLXkkaTtTBuaFwA0hjaqj2PVi2w=
Subject key identifier: 73:F9:30:EA:71:34:A2:E9:91:81:BB:AA:6C:FA:AD:FF:0F:46:DC:B4
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A0FC168AE31645298F6F6E7FCB50AE4DF7
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/c_kw6nE0oumRgbuqbPqt_w9G3LQ.roa
Signing time: Fri 02 Oct 2026 10:08:50 +0000
ROA not before: Fri 02 Oct 2026 10:08:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 89.30.158.0/24 maxlen: 24
213.214.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:16:8a:e3:16:45:29:8f:6f:6e:7f:cb:50:ae:4d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Oct 2 10:08:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73f930ea7134a2e99181bbaa6cfaadff0f46dcb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f2:0d:25:93:c1:c2:bc:60:4b:bc:7b:79:d8:
44:df:74:90:88:b7:13:93:25:b3:45:d1:3a:46:02:
2e:7c:68:1c:95:54:1c:e4:03:52:93:37:9b:09:b0:
8c:ce:d0:10:e7:82:da:d9:74:80:57:3f:3e:af:ab:
53:87:4f:da:0b:19:ff:ee:21:54:17:06:01:f1:7b:
13:ad:5f:e7:62:c1:c2:9b:15:28:be:65:bd:51:c0:
74:8e:34:37:b7:e3:12:15:f1:13:a5:45:65:8b:6c:
c2:fd:5a:17:fd:98:9b:ce:cb:86:bc:5e:d1:32:53:
3e:e9:48:36:2f:cc:9c:5d:6a:0a:c5:7b:9f:fa:50:
7e:93:1f:49:99:f2:f2:e6:f4:c9:09:77:ef:6e:ed:
37:7f:6a:53:b6:8b:2e:bc:30:fb:de:c0:6f:3e:10:
62:0d:f0:f5:a7:fb:4c:c2:dc:7d:a9:b4:dc:7b:67:
af:c7:73:c5:5d:8b:2b:83:ba:ad:d6:9a:bc:ff:a0:
12:11:b1:ef:53:75:c8:e0:bb:51:19:bb:73:d2:f6:
0f:6a:11:b3:53:cb:0e:4b:9a:13:3d:a7:06:d9:f6:
aa:0c:e9:30:a4:c6:f4:5d:ad:66:47:61:0a:3b:c6:
e7:5a:e9:48:7f:96:ae:f8:75:40:b0:61:81:94:68:
8f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F9:30:EA:71:34:A2:E9:91:81:BB:AA:6C:FA:AD:FF:0F:46:DC:B4
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/c_kw6nE0oumRgbuqbPqt_w9G3LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.158.0/24
213.214.98.0/24
Signature Algorithm: sha256WithRSAEncryption
92:66:0c:e5:bd:8d:c4:a2:12:1f:2c:30:c7:33:ba:09:ee:20:
81:f7:e3:ee:ea:2b:b8:d5:b4:c5:3f:bd:45:af:61:5c:fd:14:
b8:c1:81:f9:4d:a1:28:b0:7a:e4:8c:cb:c7:9d:b1:c7:bb:04:
07:59:2d:7b:cc:11:60:c8:92:59:42:83:2a:2c:64:aa:e8:42:
95:52:c7:03:a5:05:9d:81:a4:13:a5:1b:b6:4c:03:ef:49:06:
47:8c:79:81:3a:d1:9c:1a:ba:94:18:b3:cb:bf:5c:02:9c:6e:
ec:8f:c4:8e:c3:b9:81:25:97:47:2d:ac:d1:43:55:9a:9a:98:
0e:41:36:f7:d4:ec:b7:d2:26:d4:d9:2e:1d:92:a8:b2:b3:7b:
d4:c9:d0:6c:a5:2e:ef:29:b8:37:93:c2:00:19:10:00:5e:f3:
2e:62:12:e4:b8:08:bf:4d:5f:3b:d1:64:d2:c0:98:67:d5:eb:
24:85:a6:59:e6:2e:99:fe:84:bd:a0:07:7b:7b:41:b2:e3:d4:
24:ea:22:0f:65:9c:80:fc:e6:58:a3:69:2a:af:f5:d7:4c:40:
b9:57:e8:70:35:44:3b:f6:1c:d8:22:57:ca:ab:74:16:6b:bb:
07:b2:9d:48:38:78:b2:f6:9c:20:47:69:79:df:5c:95:8a:cc:
4a:7b:5f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:51:11 2026 by rpki-client