Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/vv2o9_yrEpQtnJAG2KewinzTxZs.roa
File: vv2o9_yrEpQtnJAG2KewinzTxZs.roa (raw, json)
Hash identifier: BsuZ7Uan0C6xSRNzYpzlkLaxqQ3xHHBB/1mZxE3wyzQ=
Subject key identifier: BE:FD:A8:F7:FC:AB:12:94:2D:9C:90:06:D8:A7:B0:8A:7C:D3:C5:9B
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F269461AFC213754A3950AF8C443692C4
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/vv2o9_yrEpQtnJAG2KewinzTxZs.roa
Signing time: Fri 03 Jul 2026 06:04:46 +0000
ROA not before: Fri 03 Jul 2026 06:04:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402276
IP address blocks: 89.30.165.0/24 maxlen: 24
89.30.178.0/24 maxlen: 24
89.30.180.0/24 maxlen: 24
89.30.184.0/24 maxlen: 24
89.30.203.0/24 maxlen: 24
89.30.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:94:61:af:c2:13:75:4a:39:50:af:8c:44:36:92:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 3 06:04:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=befda8f7fcab12942d9c9006d8a7b08a7cd3c59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a7:31:8b:e7:cb:fb:9a:72:b1:b9:24:60:ff:
32:8f:da:bb:9a:44:5c:fc:7c:9e:8f:a4:f5:03:cd:
95:74:82:09:2e:ef:2a:aa:ab:72:50:d5:30:c2:00:
6b:73:da:3a:af:59:3b:78:2e:90:26:a7:b3:3b:75:
3c:3e:a6:32:ef:6b:93:59:56:3a:7a:59:58:64:c8:
6a:18:69:cc:78:d7:20:37:ad:9e:9a:be:97:88:b9:
29:ee:1d:af:f0:8c:3c:62:79:20:97:08:cd:ec:e5:
51:bd:00:64:51:7b:66:0d:03:a7:e5:c7:7e:37:6e:
f2:46:ea:17:19:84:3c:64:c1:37:51:49:46:38:fd:
f2:0e:1b:af:cf:29:21:4d:ee:e6:19:2b:2d:59:3e:
90:8d:c0:ae:89:68:5e:7d:19:ca:b3:ff:07:97:01:
2d:30:a8:a5:44:15:b0:5a:62:7f:75:f1:2f:58:c4:
21:db:f2:32:16:25:9c:f2:9a:5d:ca:b1:ea:09:fa:
94:f9:96:26:f0:e7:7f:9d:0b:9f:69:e8:4f:41:b4:
a1:f9:da:da:3b:50:d7:b6:83:3e:9a:85:fa:f7:53:
2c:3e:23:1d:b5:d5:f9:53:24:b0:15:57:e3:b4:93:
17:f2:75:2f:b0:fd:3c:52:25:56:2e:68:4f:c2:67:
84:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FD:A8:F7:FC:AB:12:94:2D:9C:90:06:D8:A7:B0:8A:7C:D3:C5:9B
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/vv2o9_yrEpQtnJAG2KewinzTxZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.165.0/24
89.30.178.0/24
89.30.180.0/24
89.30.184.0/24
89.30.203.0/24
89.30.241.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e8:a5:1c:8f:8c:e1:4b:7f:07:29:1e:3b:86:7b:c6:18:96:
f5:13:f0:1f:7a:12:f2:2b:e5:36:7d:56:ba:49:cc:45:91:2a:
3d:4d:c5:2e:4d:b5:29:42:5f:95:6a:cf:f1:5b:80:34:76:4d:
67:cd:c1:31:58:ba:c2:a4:a7:1b:d3:52:37:70:e5:3f:61:77:
10:72:b0:da:59:b4:44:9a:b2:2f:3e:f4:e1:a4:f0:c8:97:c8:
c6:54:53:47:68:b7:13:22:05:c1:90:2e:d6:09:2c:31:64:d9:
fd:68:0e:ed:bd:cf:3c:b5:9a:5a:1e:b8:9b:51:1f:b0:7e:6f:
d7:c9:ee:cf:9f:e9:5f:fe:34:2a:fb:63:b6:96:12:76:ad:e9:
26:80:f7:4d:10:2a:d5:2f:f1:4f:d7:28:65:7b:3e:7b:16:75:
b7:b7:44:03:a5:96:9a:80:e2:18:59:10:e5:90:12:04:1c:83:
4a:bd:3e:91:a8:05:cf:bf:2c:ee:0b:2a:03:6b:95:b4:e8:f7:
a1:95:95:c8:1e:fe:05:ad:2a:64:ed:80:fa:e0:76:10:88:6a:
71:61:ef:30:a5:e0:08:82:7b:f9:16:c4:7e:56:79:42:d5:d4:
f0:61:d2:a4:20:14:f0:76:72:3c:2e:b4:84:4c:dc:76:fb:0e:
36:b4:8a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:22 2026 by rpki-client