Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/z5vbRW8wOtq9Cnc40Flnbx_mCcs.roa
File: z5vbRW8wOtq9Cnc40Flnbx_mCcs.roa (raw, json)
Hash identifier: DK3Ht6MAwJXp1omMFEpDwrTT9qGRGCxH1TMLy6c7wYE=
Subject key identifier: CF:9B:DB:45:6F:30:3A:DA:BD:0A:77:38:D0:59:67:6F:1F:E6:09:CB
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A15E94AA17D9B2D2885C4A26A5F2A483C9
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/z5vbRW8wOtq9Cnc40Flnbx_mCcs.roa
Signing time: Wed 21 Oct 2026 13:09:23 +0000
ROA not before: Wed 21 Oct 2026 13:09:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205544
IP address blocks: 89.30.202.0/24 maxlen: 24
89.30.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:94:aa:17:d9:b2:d2:88:5c:4a:26:a5:f2:a4:83:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Oct 21 13:09:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf9bdb456f303adabd0a7738d059676f1fe609cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0f:9f:ac:8b:9e:4b:d1:fd:c3:c1:d6:b3:92:
45:03:35:12:8a:a9:88:bd:a3:75:e5:21:79:a2:a3:
17:d1:f4:8d:e0:5a:99:54:bc:ff:71:dc:b0:52:da:
52:d8:b1:03:42:c1:90:4d:df:2f:e3:e2:30:73:c4:
90:28:d5:fd:33:f4:0b:23:7a:85:5f:60:8a:04:13:
93:c6:cf:d5:22:06:c1:fe:d7:e8:53:51:06:55:1e:
5a:81:22:1c:f7:52:ad:8d:70:8f:0f:21:ee:3c:4a:
b8:d0:7a:9c:18:f1:de:2d:e1:68:dc:11:9c:e4:d4:
b8:83:80:80:b1:7b:0c:83:7c:af:42:38:86:d6:c1:
66:13:f5:ec:0a:72:9b:e2:85:c6:27:87:a2:1d:e5:
27:2d:e5:10:41:5a:b5:ad:2b:e9:be:49:47:b8:a6:
fe:7b:a5:8d:da:25:4a:60:68:df:a5:d5:85:a7:3a:
eb:0d:39:0b:79:26:91:ca:0b:6b:e6:43:f4:fd:8d:
f6:fc:ab:62:a4:34:ad:94:91:22:2e:7f:9d:0f:10:
67:5c:40:3c:ea:e5:02:da:6e:e7:6c:f8:2a:bc:4d:
e4:f8:dc:a6:7b:89:9e:bb:ea:51:ba:61:64:c6:1f:
64:fe:8e:e0:e3:ee:8f:c4:0b:25:56:98:1e:9e:41:
e7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9B:DB:45:6F:30:3A:DA:BD:0A:77:38:D0:59:67:6F:1F:E6:09:CB
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/z5vbRW8wOtq9Cnc40Flnbx_mCcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.202.0/23
Signature Algorithm: sha256WithRSAEncryption
68:26:ec:7b:24:97:8e:13:b2:e5:7f:a1:0c:aa:51:34:78:f8:
f5:59:69:59:be:01:2f:7c:9e:e7:45:4a:4c:ed:2a:fc:b6:c7:
c8:c1:d9:d4:82:8b:5d:1c:89:ef:6a:54:35:aa:76:ac:22:42:
68:aa:fc:a2:1b:6e:29:e1:85:4a:fe:0a:9a:54:8e:cf:98:7d:
e1:62:a3:8b:0c:ea:03:94:b4:e7:00:e3:4b:07:d5:23:07:07:
b2:9d:38:05:3a:52:b5:26:64:4e:3b:7b:20:46:88:f8:76:0d:
49:b3:31:db:a1:09:0e:ac:97:76:1f:3e:7a:9d:59:c0:3a:71:
26:2a:1e:d4:75:6a:9c:c3:25:0d:29:15:56:47:3c:0b:c5:78:
a2:49:02:91:93:a2:e8:c2:39:dd:ff:8e:b6:3c:9d:eb:43:79:
8b:e2:7b:c0:d2:31:41:2f:eb:22:eb:e1:7f:76:bd:3f:83:05:
4a:a9:15:e5:2d:88:0d:80:82:a6:b1:dc:49:33:da:04:bf:f7:
62:7c:e4:60:e1:43:33:f5:a8:cb:54:97:01:d9:4b:9d:c8:2c:
39:b2:42:f6:1d:5e:24:b6:a0:2d:8a:3d:1c:c6:a6:f6:c2:28:
55:b3:cc:65:1c:58:e5:90:78:89:c7:00:00:f1:f4:5e:d7:3b:
e1:91:17:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:56 2026 by rpki-client