Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/fOJAq1swbmkh20dmWLCzyArzpkI.roa
File: fOJAq1swbmkh20dmWLCzyArzpkI.roa (raw, json)
Hash identifier: kX9r2C4lqqAIqj4EY1SToSstb8rKWuOuq4K6oCRN74c=
Subject key identifier: 7C:E2:40:AB:5B:30:6E:69:21:DB:47:66:58:B0:B3:C8:0A:F3:A6:42
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A04849214C16B932D7022005E84EAE01F0
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/fOJAq1swbmkh20dmWLCzyArzpkI.roa
Signing time: Fri 28 Aug 2026 12:12:27 +0000
ROA not before: Fri 28 Aug 2026 12:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150072
IP address blocks: 89.30.137.0/24 maxlen: 24
213.214.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:49:21:4c:16:b9:32:d7:02:20:05:e8:4e:ae:01:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Aug 28 12:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ce240ab5b306e6921db476658b0b3c80af3a642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f7:be:c0:86:39:94:5c:c5:5c:1b:3f:7c:f4:
86:f3:72:62:1b:fe:04:ad:34:a7:03:3b:af:2f:6f:
9b:e4:82:d6:d0:4a:39:31:85:8d:2b:70:78:92:f3:
c6:4a:37:18:04:a0:a1:3f:eb:92:28:1c:dc:cc:00:
00:47:f8:86:a8:67:7c:b3:31:ca:04:2e:a2:e4:b7:
f2:eb:ba:b3:b9:20:fd:b7:61:f1:0d:ba:bc:9f:4f:
47:2f:44:f8:9d:7e:02:83:77:13:e5:ad:38:a9:44:
55:d7:61:f0:22:fc:f8:39:50:1b:66:4c:28:49:87:
c0:24:b1:8d:d7:b4:dd:1e:04:6a:7e:a1:2c:c9:04:
26:0c:0a:9d:fa:33:36:52:46:2e:64:1d:6e:23:02:
eb:43:6e:e3:e0:ee:06:68:2d:bc:1e:46:ee:83:64:
24:56:0a:62:1b:13:3a:94:c4:49:77:b0:d4:35:9f:
14:1e:1a:08:88:a9:d2:3a:df:54:63:c9:89:52:d4:
2d:5e:d4:a8:1f:f1:7f:07:04:06:01:8f:e4:97:ab:
3b:1b:7a:e0:87:55:fd:7a:8a:52:14:69:7f:32:8d:
b4:5c:fe:d8:f5:c6:e7:b3:03:9d:b5:9b:ec:33:b7:
4a:67:91:8b:07:fe:3a:b5:ee:a0:63:00:0a:e5:8f:
2b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E2:40:AB:5B:30:6E:69:21:DB:47:66:58:B0:B3:C8:0A:F3:A6:42
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/fOJAq1swbmkh20dmWLCzyArzpkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.137.0/24
213.214.108.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f3:cc:a3:2f:34:e1:c1:73:f2:04:35:04:6a:b3:bb:05:17:
7d:3c:f7:9f:3e:64:0e:df:01:e9:3f:02:f3:10:e6:bd:a7:9b:
d7:d4:63:98:c3:fa:87:ee:f5:53:97:d5:0d:5a:1c:28:9f:3a:
08:75:28:10:b8:a5:28:c1:f5:dd:4e:aa:93:b1:cb:a3:35:39:
5d:f6:c9:20:5f:aa:ae:09:a8:cd:03:9f:0b:86:9f:2e:cd:87:
43:1f:2e:cf:b9:77:de:d6:03:98:c3:8d:21:a6:b0:53:e0:65:
e1:b3:fa:fa:9e:a5:c8:c3:fe:27:79:4d:0c:0d:8d:3f:b8:22:
76:d7:b8:2b:95:04:ee:ab:20:2a:46:26:74:23:65:65:26:c1:
9f:94:01:88:bf:c9:84:ad:29:92:02:5e:61:2e:03:64:12:06:
97:ff:50:d7:4a:84:bd:4a:08:bd:79:b7:ed:28:72:16:ef:00:
0d:9e:c4:d2:9c:c2:a5:ac:22:0f:26:c0:09:b5:7b:f1:ea:e9:
1c:d0:84:8a:7d:29:de:d0:6d:6a:52:12:aa:24:30:cf:8e:34:
f7:1a:dd:1e:a8:71:d1:91:2d:6b:59:8d:db:a0:f0:0a:44:59:
9c:42:c5:7f:92:f8:4b:f2:a1:a1:35:ae:7e:98:ea:da:bd:19:
43:83:cb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:03:52 2026 by rpki-client