Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/eg-dC7-vvWJiDSYDZiH6xaOQOec.roa
File: eg-dC7-vvWJiDSYDZiH6xaOQOec.roa (raw, json)
Hash identifier: sC47Vwp9nCQThUP6arB1TrIxrRHoT/y10hj3aRxTokc=
Subject key identifier: 7A:0F:9D:0B:BF:AF:BD:62:62:0D:26:03:66:21:FA:C5:A3:90:39:E7
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A08071DCE7941376DBDE4524F5C8550D70
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/eg-dC7-vvWJiDSYDZiH6xaOQOec.roa
Signing time: Tue 08 Sep 2026 09:55:40 +0000
ROA not before: Tue 08 Sep 2026 09:55:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 89.30.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:71:dc:e7:94:13:76:db:de:45:24:f5:c8:55:0d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 8 09:55:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a0f9d0bbfafbd62620d26036621fac5a39039e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:c2:89:a2:fe:28:74:88:92:aa:90:23:4d:
ec:ec:93:27:bf:09:e7:fb:10:3c:87:03:e0:88:86:
4f:93:5c:6c:08:97:f0:68:5a:4b:cd:d2:ed:54:0c:
0a:a6:76:1f:e9:1f:e3:c4:7e:04:d4:00:5b:ee:b1:
bb:43:81:35:3b:91:61:8b:d2:ba:d0:ea:d3:69:7a:
e0:48:c2:0e:ca:89:4d:b6:80:9c:4f:2e:94:1c:7b:
1e:6c:ad:a9:b8:74:99:4e:42:66:8d:30:0d:87:9e:
ae:0d:0a:33:c1:3f:f2:ab:80:84:f0:96:63:2c:af:
16:61:ee:81:86:52:2b:29:f8:4b:31:58:b3:55:37:
0e:8d:6f:66:58:b6:94:9a:a5:5a:6c:6f:64:e1:79:
b6:34:35:07:03:a8:ce:67:46:fb:8b:60:61:7e:6f:
87:e9:da:16:3e:4f:d3:f2:a1:28:c2:fe:11:ef:3a:
e1:fc:14:3e:09:4e:d6:3f:61:68:f1:43:77:2e:25:
2c:2e:a5:8f:f8:b4:a3:f5:3b:3f:6e:9b:ea:5f:e4:
e5:49:d6:51:e8:60:35:37:37:eb:ce:4c:ae:c7:27:
6b:a1:00:15:e0:19:f9:eb:a3:9c:6f:12:1b:ed:d9:
ff:75:a5:27:eb:46:6a:e0:c2:bf:66:4c:c7:6a:68:
b5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0F:9D:0B:BF:AF:BD:62:62:0D:26:03:66:21:FA:C5:A3:90:39:E7
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/eg-dC7-vvWJiDSYDZiH6xaOQOec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.207.0/24
Signature Algorithm: sha256WithRSAEncryption
40:b3:10:97:1b:a9:37:af:69:c3:45:d8:ef:b7:d8:80:2f:d2:
48:9d:57:44:6e:fa:43:48:90:27:bc:86:6c:ac:9a:a2:19:81:
64:f0:86:fc:08:f8:31:64:18:54:72:e1:09:a8:11:21:7a:75:
51:3c:c0:2d:7b:7b:29:44:da:65:49:ed:7d:ae:db:a2:06:07:
4e:a6:93:97:cc:04:d1:5a:2c:8d:f2:e3:4c:49:0d:30:96:26:
7e:c8:13:39:17:6d:2c:09:66:97:04:30:91:8e:01:18:93:22:
6f:08:da:b0:cc:ce:f8:b8:d4:9b:e7:74:f1:34:ea:55:91:24:
2a:01:b9:71:66:7e:5a:62:99:49:72:f1:f1:59:ab:1d:2d:97:
5b:e6:f1:bb:3f:43:0d:30:5a:c0:07:1c:23:23:6a:cc:ca:9b:
aa:1e:bc:37:55:d7:99:99:2f:70:60:ee:9e:fc:13:bd:16:dd:
70:97:d0:b2:1b:a9:4e:09:1e:bf:27:a3:c7:9f:b8:79:93:d6:
57:04:88:40:da:0a:e3:4f:e4:ca:70:19:35:9a:bb:6f:60:4a:
41:b4:1d:a1:6a:08:51:2e:73:b9:c4:1f:68:ac:62:7f:0a:7c:
0f:b7:dd:52:15:ad:49:75:06:51:bb:94:cf:87:82:59:34:e9:
85:1f:df:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCAcdznlBN2295FJPXIVQ1wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYwOTA4MDk1NTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTBmOWQwYmJmYWZiZDYyNjIwZDI2MDM2NjIxZmFjNWEzOTAzOWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtvCiaL+KHSIkqqQI03s7JMnvwnn
+xA8hwPgiIZPk1xsCJfwaFpLzdLtVAwKpnYf6R/jxH4E1ABb7rG7Q4E1O5Fhi9K6
0OrTaXrgSMIOyolNtoCcTy6UHHsebK2puHSZTkJmjTANh56uDQozwT/yq4CE8JZj
LK8WYe6BhlIrKfhLMVizVTcOjW9mWLaUmqVabG9k4Xm2NDUHA6jOZ0b7i2Bhfm+H
6doWPk/T8qEowv4R7zrh/BQ+CU7WP2Fo8UN3LiUsLqWP+LSj9Ts/bpvqX+TlSdZR
6GA1NzfrzkyuxydroQAV4Bn566OcbxIb7dn/daUn60Zq4MK/ZkzHami1LQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHoPnQu/r71iYg0mA2Yh+sWjkDnnMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvZWctZEM3LXZ2V0ppRFNZRFppSDZ4YU9RT2VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWR7PMA0G
CSqGSIb3DQEBCwUAA4IBAQBAsxCXG6k3r2nDRdjvt9iAL9JInVdEbvpDSJAnvIZs
rJqiGYFk8Ib8CPgxZBhUcuEJqBEhenVRPMAte3spRNplSe19rtuiBgdOppOXzATR
WiyN8uNMSQ0wliZ+yBM5F20sCWaXBDCRjgEYkyJvCNqwzM74uNSb53TxNOpVkSQq
AblxZn5aYplJcvHxWasdLZdb5vG7P0MNMFrABxwjI2rMypuqHrw3VdeZmS9wYO6e
/BO9Ft1wl9CyG6lOCR6/J6PHn7h5k9ZXBIhA2grjT+TKcBk1mrtvYEpBtB2haghR
LnO5xB9orGJ/CnwPt91SFa1JdQZRu5TPh4JZNOmFH99c
-----END CERTIFICATE-----
Generated at Thu Sep 10 12:24:26 2026 by rpki-client