Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/ijGkWwYVORg8Tu7PMqv3s3GYh9c.roa
File: ijGkWwYVORg8Tu7PMqv3s3GYh9c.roa (raw, json)
Hash identifier: +8uIyDzsIpDEcEGhMLdsjhN/19cB8kOUhUyL7Er61Ro=
Subject key identifier: 8A:31:A4:5B:06:15:39:18:3C:4E:EE:CF:32:AB:F7:B3:71:98:87:D7
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F22FAB34409685F84928E3DB19E72F4F2
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/ijGkWwYVORg8Tu7PMqv3s3GYh9c.roa
Signing time: Thu 02 Jul 2026 13:18:02 +0000
ROA not before: Thu 02 Jul 2026 13:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214668
IP address blocks: 89.30.158.0/24 maxlen: 24
213.214.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:fa:b3:44:09:68:5f:84:92:8e:3d:b1:9e:72:f4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 2 13:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a31a45b061539183c4eeecf32abf7b3719887d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:a2:c3:d9:3a:ec:4c:26:ab:bc:b8:0a:71:
ee:ed:db:5d:be:4f:ca:66:c7:c0:c0:9b:00:50:53:
d5:df:db:da:a1:c3:8f:fa:7f:39:b0:e4:de:a7:a9:
65:d3:93:06:43:27:a0:52:a0:75:b6:05:d6:b6:38:
b0:d0:73:d1:56:fe:7b:24:78:2f:9f:5d:9f:79:96:
28:90:30:4f:a7:08:35:49:26:8c:a5:9a:ae:82:cf:
a6:64:d8:29:22:4d:1a:eb:59:ac:47:97:c4:ae:86:
83:e4:60:18:77:d2:2c:4c:38:be:ef:3b:1b:ca:70:
18:bf:43:b1:7e:44:6b:49:bf:db:5c:44:41:c7:ae:
ed:68:d0:1a:ed:89:19:22:3b:0f:4e:3c:ff:b4:6a:
3e:31:2b:54:1f:bd:6b:ba:4e:71:54:d1:a4:e5:13:
c5:01:c6:59:f2:77:fc:45:8a:90:b7:24:cf:95:93:
f6:1c:7a:12:08:2c:61:bd:47:f5:c6:7d:7a:a8:5a:
eb:4c:20:ee:87:8c:16:da:65:16:1c:44:20:65:87:
47:fc:6e:65:51:ae:3a:85:1d:98:cf:c5:d9:f2:76:
d2:b3:0c:84:50:d6:6f:55:4d:67:aa:f2:f0:4e:ce:
c3:a1:97:ba:8b:b9:d9:30:43:52:6d:ec:dc:fa:aa:
a4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:31:A4:5B:06:15:39:18:3C:4E:EE:CF:32:AB:F7:B3:71:98:87:D7
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/ijGkWwYVORg8Tu7PMqv3s3GYh9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.158.0/24
213.214.99.0/24
Signature Algorithm: sha256WithRSAEncryption
23:9a:ab:8f:d3:74:04:eb:0e:c7:81:51:d5:d5:33:79:32:96:
08:c4:91:e4:1b:54:9f:3a:de:91:43:27:22:39:fd:55:f8:88:
44:40:42:fb:d4:e7:74:26:ac:88:5d:eb:9f:ad:25:6f:53:56:
4b:99:73:1c:3f:86:a8:8c:7a:40:40:80:a9:36:2d:cd:79:fa:
ca:42:a0:4f:48:84:c6:cc:53:75:2c:ef:d5:b8:bc:e0:25:1f:
8d:75:50:21:2a:b3:e4:14:ce:bc:20:e9:e3:ab:47:23:e0:53:
ed:bc:fb:6e:4a:2b:20:ee:7f:89:ca:73:76:65:a8:03:5a:22:
dd:07:ec:34:c4:f4:24:e2:d3:fc:f9:5f:e5:eb:b6:f6:fd:28:
b8:2f:a4:af:3f:b0:12:26:ad:d9:ca:79:1a:65:95:3b:c1:1c:
fb:9f:5d:28:81:33:25:4e:c8:21:68:49:8b:26:15:ad:b9:a1:
12:b2:5b:47:d0:2f:ae:eb:4d:47:07:02:78:3e:c5:d6:72:ae:
69:75:22:1b:b7:b5:30:28:3e:74:9b:48:ec:05:01:44:01:96:
46:3e:6e:5f:5e:d3:4f:01:b9:e6:94:ee:00:2c:25:a6:2a:99:
75:11:4e:a4:4b:10:c3:b1:68:4b:08:8a:66:84:0b:cb:49:16:
b3:59:b6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:41:10 2026 by rpki-client