Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/ddgOqRIfnlVNFVtv77OuB3HKfLQ.roa
File: ddgOqRIfnlVNFVtv77OuB3HKfLQ.roa (raw, json)
Hash identifier: KsWIRIybtJnO0Y6yq+bQ9hAFV7BBYWciC4jzqvWvRh4=
Subject key identifier: 75:D8:0E:A9:12:1F:9E:55:4D:15:5B:6F:EF:B3:AE:07:71:CA:7C:B4
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F269458B893027ACDB32053647D00572B
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/ddgOqRIfnlVNFVtv77OuB3HKfLQ.roa
Signing time: Fri 03 Jul 2026 06:04:44 +0000
ROA not before: Fri 03 Jul 2026 06:04:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31924
IP address blocks: 89.30.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:94:58:b8:93:02:7a:cd:b3:20:53:64:7d:00:57:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 3 06:04:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75d80ea9121f9e554d155b6fefb3ae0771ca7cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:35:90:c0:64:05:57:8b:6d:63:6f:4f:2f:
bf:34:8c:49:8a:24:26:7a:78:24:fe:c6:b2:2b:d1:
e0:ad:7d:ed:bd:6f:e0:fe:97:50:a3:fc:8e:79:4c:
b1:7e:6f:d8:3a:59:51:ce:7b:61:9d:7d:5f:67:96:
6d:ed:03:0f:82:75:da:94:46:b0:a1:67:f9:cd:41:
7a:bb:13:24:9a:83:7c:0e:49:5a:08:c0:0a:b9:dd:
1e:b1:c4:60:8f:4c:2b:99:35:ee:ad:a1:30:3e:85:
35:6d:38:29:98:17:f7:b6:99:c1:8f:af:1b:16:e5:
bb:08:83:6b:1c:69:bf:8f:18:0a:c5:f2:d7:2b:78:
e3:03:bf:3d:a0:dc:30:0c:4b:70:86:f5:91:4f:a7:
bc:1e:67:99:9d:ca:c7:4f:a8:45:1c:d2:29:23:8a:
45:fd:45:35:05:49:0a:63:3c:6b:9f:9f:e1:9e:ad:
76:6b:a2:31:37:83:e0:7c:41:4f:b1:57:a2:5d:57:
29:11:eb:7e:ef:a6:74:83:d7:54:e7:9a:c8:b3:0f:
cd:da:71:84:27:0f:f1:b2:1a:36:98:1d:09:da:b1:
54:8e:df:2a:a0:1c:6f:5d:b7:7e:76:4a:45:0b:21:
e4:61:77:2e:81:8f:7e:90:46:90:71:10:b8:ad:ce:
e8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D8:0E:A9:12:1F:9E:55:4D:15:5B:6F:EF:B3:AE:07:71:CA:7C:B4
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/ddgOqRIfnlVNFVtv77OuB3HKfLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.139.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:13:07:81:f2:b1:42:b6:f7:79:d2:48:7e:01:4b:87:13:b5:
51:5c:b1:a4:d2:ae:20:44:a2:1f:06:7e:fb:20:13:40:58:b7:
89:97:65:fc:be:1f:be:01:e6:40:19:98:49:04:74:f2:34:73:
ba:2e:5f:6d:2e:f3:07:e6:5b:fa:f7:a4:b8:59:81:35:94:a6:
2b:33:39:be:b5:4c:15:32:00:f3:18:50:f0:e9:a7:ca:03:9c:
8a:e4:8d:c3:11:41:64:ca:05:f4:35:20:08:da:27:86:fd:d2:
e2:a2:38:d4:38:59:bc:c7:e2:93:11:42:22:d3:94:4f:07:f8:
c2:89:09:03:86:73:ce:d4:c6:a7:72:6f:5e:75:5e:14:4b:5f:
05:74:8f:a6:b3:79:72:51:4b:f8:e0:49:a8:a5:33:dc:4f:c9:
d0:55:b3:a4:33:3c:79:bb:02:fb:46:61:e5:92:2d:e0:27:65:
83:26:e5:27:00:30:4e:d4:fc:83:3e:fb:ce:7b:cf:81:47:63:
eb:48:b8:ef:e3:9e:02:a5:d8:59:c9:f7:4a:fc:a3:77:b3:85:
02:6f:7d:3f:a1:5a:40:f4:8f:8d:49:49:a3:2e:43:a8:9f:bf:
9e:da:fe:41:fd:e4:be:66:a5:e4:30:d3:e7:39:fd:cd:5d:e9:
38:b2:5f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:06:31 2026 by rpki-client