Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/30F9PWzHuPxcatRdP-Wr7a-4bCA.roa
File: 30F9PWzHuPxcatRdP-Wr7a-4bCA.roa (raw, json)
Hash identifier: 0ErOtGPdnXqRZxQ1Pr/y+ZGvO9DFzVq/ijDzPVx7p/w=
Subject key identifier: DF:41:7D:3D:6C:C7:B8:FC:5C:6A:D4:5D:3F:E5:AB:ED:AF:B8:6C:20
Certificate issuer: /CN=57619321cbc5d73babc2a9423a8f4ee3480f27f4
Certificate serial: 019FBA985EA19A86305CF144851F42637EAB
Authority key identifier: 57:61:93:21:CB:C5:D7:3B:AB:C2:A9:42:3A:8F:4E:E3:48:0F:27:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2GTIcvF1zurwqlCOo9O40gPJ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/30F9PWzHuPxcatRdP-Wr7a-4bCA.roa
Signing time: Fri 31 Jul 2026 23:52:55 +0000
ROA not before: Fri 31 Jul 2026 23:52:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213671
IP address blocks: 95.142.148.0/24 maxlen: 24
150.237.32.0/19 maxlen: 24
192.48.111.0/24 maxlen: 24
2a05:b100:1000::/36 maxlen: 36
2a05:b100:2000::/36 maxlen: 36
2a05:b100:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/V2GTIcvF1zurwqlCOo9O40gPJ_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/V2GTIcvF1zurwqlCOo9O40gPJ_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2GTIcvF1zurwqlCOo9O40gPJ_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ba:98:5e:a1:9a:86:30:5c:f1:44:85:1f:42:63:7e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57619321cbc5d73babc2a9423a8f4ee3480f27f4
Validity
Not Before: Jul 31 23:52:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df417d3d6cc7b8fc5c6ad45d3fe5abedafb86c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2e:d1:45:7a:4b:41:8d:03:45:b0:61:f5:53:
b6:2a:e1:94:66:47:a9:13:7b:06:b7:9c:0d:0e:ea:
78:96:b0:59:99:a7:5b:51:47:32:c1:05:44:24:15:
ef:fb:2f:1e:67:a4:08:e0:5e:6e:de:e1:4c:7f:56:
19:5f:2a:ab:ec:51:c6:62:93:20:fd:26:5c:08:dd:
32:b0:78:7c:83:ba:a0:70:d7:b9:bb:e4:dc:0e:0b:
2c:c2:74:3a:4d:ed:1c:67:32:5e:d4:1f:a4:95:b9:
6d:19:46:d7:ef:28:7a:02:9e:82:c4:c7:ea:b2:be:
3d:bd:ed:e7:e0:b9:a8:c9:89:f1:ec:6b:0d:0b:f0:
a9:4e:a4:e5:d9:f7:aa:25:ba:68:3f:b7:f1:50:19:
25:d0:a8:33:28:53:de:5e:e1:66:ea:aa:12:85:98:
9f:23:96:25:ac:0e:7c:9a:05:32:7e:0e:ff:a5:ee:
f1:54:96:77:2d:ad:e9:d9:4b:9c:83:91:de:74:6c:
2c:d2:2e:d2:69:14:bf:e7:c8:f0:68:d2:d2:cd:73:
6e:04:af:53:e5:d6:ae:82:56:7a:11:fa:23:85:59:
5e:91:4a:a9:2c:a9:ea:fe:cc:ad:52:47:a3:be:6e:
cd:e3:6d:08:db:62:55:00:99:d4:39:d1:a2:33:a8:
c1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:41:7D:3D:6C:C7:B8:FC:5C:6A:D4:5D:3F:E5:AB:ED:AF:B8:6C:20
X509v3 Authority Key Identifier:
keyid:57:61:93:21:CB:C5:D7:3B:AB:C2:A9:42:3A:8F:4E:E3:48:0F:27:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2GTIcvF1zurwqlCOo9O40gPJ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/30F9PWzHuPxcatRdP-Wr7a-4bCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/V2GTIcvF1zurwqlCOo9O40gPJ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.148.0/24
150.237.32.0/19
192.48.111.0/24
IPv6:
2a05:b100:1000::-2a05:b100:3fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
04:76:d8:80:6c:2f:64:7c:77:ca:85:01:72:3b:0d:19:71:d5:
0e:03:ef:9a:ed:ac:c7:e7:2b:10:34:f5:3a:9d:f4:a1:97:0c:
99:b3:85:ea:18:ce:f2:16:24:9c:33:ab:fe:6b:dd:3e:36:fd:
9c:72:ad:29:75:96:82:53:b7:5d:2a:58:ee:1e:4f:ce:ff:0a:
d6:49:74:88:51:37:75:14:a9:d1:77:e5:ef:e4:ca:35:09:86:
bf:eb:86:f9:6c:fa:05:30:05:a6:0d:be:a4:d0:b0:4c:32:4c:
b5:1c:b5:9a:f2:b1:2b:b0:19:91:4a:aa:a8:80:77:8f:e6:0b:
08:15:50:b6:d9:02:e8:f4:60:a6:d4:8d:5a:d7:97:03:6e:ca:
cb:61:fb:95:06:9c:e3:f4:5a:16:38:81:74:11:cc:11:f6:83:
e7:07:a2:74:ab:9d:7f:3d:bc:9f:4f:7f:a0:3d:a6:41:35:70:
43:99:8a:9b:29:66:81:df:64:22:77:b6:54:fe:eb:b9:6a:bc:
c8:c1:e8:5c:c6:1e:da:bf:9c:f5:75:85:26:c0:df:ad:6f:66:
85:99:fb:63:24:ff:6b:69:50:3e:8c:cf:d2:7c:c9:e2:20:7c:
d3:ee:44:09:f0:e1:23:13:ba:ff:0a:0d:f1:46:ba:b6:f1:c5:
60:6f:f3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:08:29 2026 by rpki-client