Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/vanYw-zAW1B03Ap8EGM-X-9boHo.roa
File: vanYw-zAW1B03Ap8EGM-X-9boHo.roa (raw, json)
Hash identifier: KXoGvYV70RLHSvH90MfYI8MYqhrQDWCU5Yc8cSTrOI0=
Subject key identifier: BD:A9:D8:C3:EC:C0:5B:50:74:DC:0A:7C:10:63:3E:5F:EF:5B:A0:7A
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A06CAA143A63AB7DE7280A3C32E783D428
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/vanYw-zAW1B03Ap8EGM-X-9boHo.roa
Signing time: Fri 04 Sep 2026 13:44:40 +0000
ROA not before: Fri 04 Sep 2026 13:44:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 89.30.198.0/24 maxlen: 24
213.247.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:aa:14:3a:63:ab:7d:e7:28:0a:3c:32:e7:83:d4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 4 13:44:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bda9d8c3ecc05b5074dc0a7c10633e5fef5ba07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:b6:8b:a2:7b:49:d3:30:45:c0:95:4d:7b:
30:2f:70:f1:b3:8b:66:02:50:fa:63:d1:b3:3a:73:
7b:21:f6:c3:e9:18:5e:8e:00:54:d4:b7:0c:87:46:
fd:4f:72:d2:ca:bf:c0:10:30:5a:9c:97:b7:94:98:
71:f0:16:33:cc:90:93:4d:55:13:11:b7:be:5a:90:
b3:89:62:ec:82:5f:3c:f9:15:49:36:9b:99:b7:82:
71:d0:b8:d6:4d:48:56:32:b9:70:fb:26:0e:04:2e:
75:4e:73:34:ff:4f:74:04:1e:39:e8:24:a5:da:10:
61:e6:a1:1e:aa:28:c9:84:1d:1c:a3:d7:ae:ab:16:
39:ef:46:be:fb:a1:ab:bb:27:85:85:10:c5:d9:67:
91:98:70:5a:72:52:e9:8d:42:65:4a:da:b2:7d:55:
e5:fe:e3:4d:b1:d5:0d:f2:d2:28:f6:c1:fb:46:44:
d6:d2:8e:75:91:7f:5c:37:c5:1c:e0:5a:d8:4e:e3:
98:10:c1:4b:e9:70:e9:52:f7:69:c9:85:7e:f2:0f:
62:a0:a4:41:cc:86:99:07:4c:68:49:a8:2f:db:c2:
55:03:56:33:ea:bc:f5:e3:5d:67:b5:0e:6d:73:e3:
35:21:45:a5:e2:7f:96:bd:11:86:54:ea:05:c3:a5:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A9:D8:C3:EC:C0:5B:50:74:DC:0A:7C:10:63:3E:5F:EF:5B:A0:7A
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/vanYw-zAW1B03Ap8EGM-X-9boHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.198.0/24
213.247.46.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:a0:4b:61:ba:71:a1:ea:20:cc:b3:a8:66:80:79:c9:e2:7c:
7c:b1:33:5e:30:c4:ee:78:56:7c:5c:01:3e:d6:d7:7f:8d:69:
5b:3f:bd:04:dc:25:de:80:df:90:cf:d0:f4:9d:b6:63:1c:e6:
3a:84:fe:5f:8f:4a:8c:82:19:15:71:2c:a8:7a:dc:40:9f:f0:
a6:c1:63:c9:81:f8:db:3b:b4:1e:00:ff:8d:e0:ec:28:6a:d3:
cf:d8:81:8b:b6:04:76:13:4a:ae:a1:cf:1b:ad:cd:43:23:f0:
af:43:82:5e:cf:16:f4:0c:c1:1c:5d:64:8a:ee:60:ca:73:9e:
fa:2b:5d:54:24:41:93:87:e2:a1:38:e9:ee:53:b5:51:ff:8d:
b6:d7:9d:82:db:92:47:85:a8:ee:53:75:b9:b5:f9:5c:68:96:
27:84:d3:3b:81:e8:76:ac:c1:71:88:ad:ef:0b:1b:3d:56:d2:
4f:33:81:84:28:be:b4:48:03:dd:fe:74:ce:1c:98:b5:d6:07:
f7:77:5d:b6:3b:45:55:4b:f6:3c:1c:af:34:d6:03:6f:9d:4d:
2e:ee:5d:ae:5c:f4:29:3d:aa:7d:f3:53:3b:32:17:fb:6c:b2:
17:55:e1:ae:f6:ab:78:80:63:aa:95:6c:58:83:89:1d:9c:af:
a6:c8:11:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:06 2026 by rpki-client