Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/rb3X83_twezR9zubvaQVVFfb9Kc.roa
File: rb3X83_twezR9zubvaQVVFfb9Kc.roa (raw, json)
Hash identifier: owgf/wtN29Likb5zVHi3NE5tK2jHKPjJzYdF9flvKro=
Subject key identifier: AD:BD:D7:F3:7F:ED:C1:EC:D1:F7:3B:9B:BD:A4:15:54:57:DB:F4:A7
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A1CF049146D9B9641EA52A2555FF7CC55C
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/rb3X83_twezR9zubvaQVVFfb9Kc.roa
Signing time: Thu 12 Nov 2026 09:09:05 +0000
ROA not before: Thu 12 Nov 2026 09:09:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.98.192.0/24 maxlen: 24
83.98.194.0/24 maxlen: 24
85.92.140.0/24 maxlen: 24
85.92.142.0/24 maxlen: 24
85.92.143.0/24 maxlen: 24
89.30.136.0/24 maxlen: 24
89.30.137.0/24 maxlen: 24
89.30.138.0/24 maxlen: 24
89.30.139.0/24 maxlen: 24
89.30.140.0/24 maxlen: 24
89.30.141.0/24 maxlen: 24
89.30.142.0/24 maxlen: 24
89.30.143.0/24 maxlen: 24
89.30.159.0/24 maxlen: 24
89.30.160.0/24 maxlen: 24
89.30.161.0/24 maxlen: 24
89.30.162.0/24 maxlen: 24
89.30.163.0/24 maxlen: 24
89.30.164.0/24 maxlen: 24
89.30.165.0/24 maxlen: 24
89.30.166.0/24 maxlen: 24
89.30.172.0/24 maxlen: 24
89.30.173.0/24 maxlen: 24
89.30.174.0/24 maxlen: 24
89.30.175.0/24 maxlen: 24
89.30.178.0/23 maxlen: 24
89.30.181.0/24 maxlen: 24
89.30.182.0/24 maxlen: 24
89.30.183.0/24 maxlen: 24
89.30.186.0/24 maxlen: 24
89.30.187.0/24 maxlen: 24
89.30.188.0/24 maxlen: 24
89.30.190.0/24 maxlen: 24
89.30.191.0/24 maxlen: 24
89.30.199.0/24 maxlen: 24
89.30.200.0/24 maxlen: 24
89.30.201.0/24 maxlen: 24
89.30.202.0/24 maxlen: 24
89.30.203.0/24 maxlen: 24
89.30.204.0/24 maxlen: 24
89.30.205.0/24 maxlen: 24
89.30.206.0/24 maxlen: 24
89.30.243.0/24 maxlen: 24
89.30.244.0/24 maxlen: 24
89.30.245.0/24 maxlen: 24
89.30.246.0/24 maxlen: 24
89.30.247.0/24 maxlen: 24
213.189.16.0/24 maxlen: 24
213.189.17.0/24 maxlen: 24
213.189.22.0/24 maxlen: 24
213.214.105.0/24 maxlen: 24
213.214.106.0/24 maxlen: 24
213.214.108.0/24 maxlen: 24
213.214.110.0/24 maxlen: 24
213.247.45.0/24 maxlen: 24
213.247.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:04:91:46:d9:b9:64:1e:a5:2a:25:55:ff:7c:c5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Nov 12 09:09:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adbdd7f37fedc1ecd1f73b9bbda4155457dbf4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:b6:79:aa:96:3a:bf:fc:32:bb:e1:7f:72:
72:2e:c3:69:81:05:c5:33:dd:97:ac:41:2c:5a:71:
ed:89:52:8c:aa:92:73:ca:8d:ff:15:06:71:b5:71:
fc:1f:97:55:b1:fa:84:12:5d:04:7c:f6:0a:d8:f8:
d5:2e:93:de:01:f5:ab:34:61:0c:6e:55:50:23:fc:
59:e1:bb:9e:bb:d7:05:bc:0b:af:38:be:39:4e:fd:
d2:47:ed:c5:a3:75:bd:28:ba:02:2e:f7:4f:e2:1a:
23:ab:4b:ab:0f:74:7d:d2:64:58:fa:02:d9:09:cb:
b5:53:c6:06:1b:ed:0f:6a:e0:00:f5:be:7d:b0:5f:
dc:42:25:a6:ad:fb:97:e7:c3:f9:02:48:7c:4c:3b:
58:93:81:12:36:f6:6d:97:f3:e6:ab:f9:c4:9f:d8:
ec:d6:32:f1:21:94:fe:7d:a7:65:7b:1b:ac:f8:42:
11:74:ec:a0:8a:c6:03:68:38:54:c3:d5:61:01:99:
77:02:c5:08:bd:03:7c:9c:ca:65:38:07:0b:1a:05:
8e:05:f6:88:29:e1:26:0b:e2:bc:5e:fc:3a:f9:33:
4c:f9:29:98:b0:1a:57:75:d3:2d:d6:67:d3:de:13:
8a:ee:56:a5:d7:85:0c:bb:04:51:31:d3:68:11:2d:
24:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BD:D7:F3:7F:ED:C1:EC:D1:F7:3B:9B:BD:A4:15:54:57:DB:F4:A7
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/rb3X83_twezR9zubvaQVVFfb9Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.192.0/24
83.98.194.0/24
85.92.140.0/24
85.92.142.0/23
89.30.136.0/21
89.30.159.0-89.30.166.255
89.30.172.0/22
89.30.178.0/23
89.30.181.0-89.30.183.255
89.30.186.0-89.30.188.255
89.30.190.0/23
89.30.199.0-89.30.206.255
89.30.243.0-89.30.247.255
213.189.16.0/23
213.189.22.0/24
213.214.105.0-213.214.106.255
213.214.108.0/24
213.214.110.0/24
213.247.45.0/24
213.247.50.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e4:c9:6b:b7:59:d0:9b:7d:bc:9b:df:15:c2:97:10:16:4c:
bb:2c:cd:c3:28:d1:77:98:2c:58:f6:d0:90:98:ca:ec:4d:d0:
97:70:e7:f3:1b:18:98:a9:b6:5d:76:5f:39:24:7f:00:cb:5f:
2d:3a:2b:c1:1d:9c:1c:ee:91:2f:e9:79:b5:b7:81:60:f2:5d:
5f:9c:fc:63:72:09:e2:ec:2d:5c:c0:27:38:1d:09:25:98:59:
5d:00:45:3e:6e:8f:1f:b1:3b:29:f7:05:67:ec:27:66:75:3e:
3b:00:ca:71:cc:6b:9f:43:9d:48:0b:61:94:03:67:01:bd:ea:
13:c7:1f:0a:18:84:17:a7:99:1d:a2:ce:71:c9:13:c0:f3:bc:
6b:48:58:a8:e4:50:37:b2:2b:ab:6a:99:e7:b7:71:54:21:65:
85:9d:1b:32:8e:58:78:62:fe:01:8e:db:3f:a9:af:f5:3b:eb:
52:c4:31:a3:da:85:f3:18:20:06:cb:23:05:80:b6:47:5e:53:
ee:2f:88:41:c3:1a:f3:6e:5e:0b:50:0a:7b:e0:a9:03:2d:1a:
f6:6f:7b:6e:b1:cf:1f:65:f1:12:55:7b:67:eb:54:bc:dc:ab:
61:bf:59:46:16:f6:e7:f9:ad:f0:1c:e5:38:2a:2b:b1:33:7a:
33:44:16:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:23:50 2026 by rpki-client