Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/f015adFaATlW5JvEZeSXsa1hjQQ.roa
File: f015adFaATlW5JvEZeSXsa1hjQQ.roa (raw, json)
Hash identifier: GKXh92dvGDb4027E44++nL+DrElheoPfQ05C/idzNLI=
Subject key identifier: 7F:4D:79:69:D1:5A:01:39:56:E4:9B:C4:65:E4:97:B1:AD:61:8D:04
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A03359A48E7A3EF3755D7D4025469FBBB0
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/f015adFaATlW5JvEZeSXsa1hjQQ.roa
Signing time: Mon 24 Aug 2026 10:38:27 +0000
ROA not before: Mon 24 Aug 2026 10:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 89.30.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:59:a4:8e:7a:3e:f3:75:5d:7d:40:25:46:9f:bb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Aug 24 10:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f4d7969d15a013956e49bc465e497b1ad618d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c6:18:e0:49:14:55:21:06:98:99:d0:97:c0:
a9:f3:f1:95:4e:4f:41:81:b2:ec:75:76:0f:91:2e:
2b:41:03:3e:85:dd:f3:bf:4c:3f:97:84:62:29:e0:
20:7d:22:a2:3c:2d:5f:26:e1:8e:e0:11:67:0d:6e:
62:14:d8:5a:7d:d6:81:d0:cb:98:d1:04:e0:28:3a:
7e:9c:97:3c:2c:ee:55:b2:6c:fc:60:17:35:79:48:
c3:cd:44:c3:e1:40:8c:0a:3b:c8:45:69:06:65:fb:
b8:82:40:7c:2f:dc:6a:9b:36:d6:87:e7:3e:08:67:
a1:4b:14:ab:e0:62:ce:a3:80:4a:dc:0b:32:dc:2d:
28:f8:f5:ea:46:15:3f:68:94:57:ba:eb:90:2a:57:
12:12:de:cc:e4:fa:e3:5f:e3:49:0c:d4:1b:ee:b9:
52:78:a9:50:32:20:e3:84:cc:9a:90:59:5f:12:5a:
e9:80:f5:c2:9d:3c:20:97:75:73:4c:af:c2:2d:e8:
6e:b2:2a:40:8d:0d:49:f4:ec:bc:6f:ba:f7:15:a2:
80:46:f2:a2:83:81:9e:5c:28:b4:ac:3a:c5:37:a8:
b5:77:b5:37:fb:b7:df:9f:a0:e1:08:8d:a0:e1:9d:
e9:10:6a:bb:8e:32:9b:00:70:53:22:98:0f:28:d2:
b2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4D:79:69:D1:5A:01:39:56:E4:9B:C4:65:E4:97:B1:AD:61:8D:04
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/f015adFaATlW5JvEZeSXsa1hjQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.139.0/24
Signature Algorithm: sha256WithRSAEncryption
65:cc:62:b4:12:d3:ce:72:a0:71:f4:ef:80:23:e4:d5:a3:14:
25:31:89:eb:f9:5d:be:c0:4c:79:cd:ea:1e:95:15:9d:ab:c8:
f8:74:95:f7:bf:b0:de:93:8c:bf:a9:cb:fb:e6:84:75:f6:39:
0d:3b:9d:cf:59:28:0e:26:40:e4:a4:e0:e4:53:bc:18:b0:82:
c4:51:d5:8a:80:09:42:cc:f8:ea:bc:da:36:07:42:72:3a:cf:
f3:69:a0:47:ec:85:d9:dd:3d:87:8e:56:51:14:7a:ba:5b:7c:
93:c5:22:41:5f:94:d4:7c:e3:0d:b1:6d:1e:ac:7d:bb:6a:a9:
2b:2a:08:e5:ba:7f:74:49:25:1b:9d:e3:e5:a1:a9:73:24:4b:
01:62:f0:a2:6e:29:a0:24:25:ca:41:11:b9:0f:c7:70:3d:d4:
2b:22:e9:57:16:50:e2:58:1f:6c:ad:fa:cd:06:89:1b:56:71:
09:2f:e3:7c:13:07:e0:23:f3:3b:eb:7d:0f:74:1a:7a:e9:03:
8f:a4:80:6c:fb:63:d0:9f:a2:3c:a9:ed:43:3b:e1:e3:22:fc:
43:fd:ef:b3:b1:64:c7:73:f3:e1:5e:b5:b4:8f:dc:83:56:a6:
2a:50:09:14:41:f7:99:c7:2f:64:06:24:34:65:59:b3:21:44:
ae:f1:f0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:52:45 2026 by rpki-client