Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/30JLkNVBD74nB4dIkHC5g_Lkgp8.roa
File: 30JLkNVBD74nB4dIkHC5g_Lkgp8.roa (raw, json)
Hash identifier: h+8A8xjPSyR+IasHtbO+WsP62yrj2rUoaLWd4gkX1ps=
Subject key identifier: DF:42:4B:90:D5:41:0F:BE:27:07:87:48:90:70:B9:83:F2:E4:82:9F
Certificate issuer: /CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Certificate serial: 019D32EA1FF63E05FE44B8AA069639726012
Authority key identifier: A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/30JLkNVBD74nB4dIkHC5g_Lkgp8.roa
Signing time: Sat 28 Mar 2026 05:28:17 +0000
ROA not before: Sat 28 Mar 2026 05:28:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202499
IP address blocks: 109.205.194.0/24 maxlen: 24
176.106.184.0/22 maxlen: 23
176.106.186.0/23 maxlen: 23
193.142.188.0/22 maxlen: 24
195.216.208.0/23 maxlen: 24
2a0c:9b40::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:ea:1f:f6:3e:05:fe:44:b8:aa:06:96:39:72:60:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Validity
Not Before: Mar 28 05:28:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df424b90d5410fbe270787489070b983f2e4829f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:3b:58:0e:6a:71:c2:db:6a:6c:aa:d8:7a:
71:99:9c:0d:1e:18:50:31:1a:f8:71:d1:b9:e1:8c:
84:1e:f3:ad:55:77:92:bd:b4:f7:90:c9:92:02:ae:
7a:7f:05:0b:7e:7a:67:b5:57:24:e6:8e:fb:e3:90:
b5:b3:48:0a:48:79:91:4e:b8:c4:f1:4c:28:70:71:
88:a7:1d:80:ee:d3:f8:77:cd:eb:89:d7:f6:09:6a:
b9:26:dd:36:15:33:5c:ed:5a:b1:de:a1:93:6c:d2:
8b:ad:83:61:e1:f0:68:c6:f8:74:1d:6d:80:ab:ea:
e2:a6:31:34:80:70:c3:b1:52:70:63:71:58:99:50:
aa:d7:14:21:e6:3c:07:7d:0a:1c:2c:b8:5e:6c:3c:
85:cb:2c:2f:70:8a:c6:25:d1:13:7c:f7:cd:5a:4d:
b6:eb:d5:42:65:df:02:67:d5:5a:52:3e:35:aa:02:
dd:bd:1d:2f:bf:a9:23:f4:07:cc:55:6c:19:96:c8:
9d:14:f6:75:a6:e0:6a:d3:04:96:db:e6:40:90:99:
a9:02:ae:c1:cc:41:f8:02:a0:7a:e3:f1:14:2c:03:
44:db:ab:8d:93:10:d3:8a:5a:fe:11:22:80:f8:a3:
f1:e6:e0:22:80:3f:6f:0f:0a:5c:ff:9d:92:c3:70:
2d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:42:4B:90:D5:41:0F:BE:27:07:87:48:90:70:B9:83:F2:E4:82:9F
X509v3 Authority Key Identifier:
keyid:A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/30JLkNVBD74nB4dIkHC5g_Lkgp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.194.0/24
176.106.184.0/22
193.142.188.0/22
195.216.208.0/23
IPv6:
2a0c:9b40::/29
Signature Algorithm: sha256WithRSAEncryption
1f:29:6a:46:e9:12:43:d3:29:75:2e:85:72:65:bc:9c:ea:37:
11:51:66:80:4c:cf:43:f5:1a:80:46:75:f5:b8:e3:b7:f4:9b:
b2:59:d4:50:6e:47:d6:ce:0e:80:3e:20:2f:1a:7c:94:e7:df:
82:80:1d:fd:d9:22:86:58:c8:f0:ac:fb:b0:2f:9e:1b:c5:37:
68:a7:6e:78:98:6d:8e:22:81:87:e4:2a:f8:49:eb:4e:e2:43:
53:0a:d3:1a:cd:f7:16:1a:59:53:1c:a3:fb:3b:eb:a1:cf:b4:
30:1c:59:3a:45:21:54:a2:f3:6d:00:24:c4:7b:a2:50:91:7e:
e5:58:c9:90:c7:bb:c3:82:3b:8a:4a:6b:15:e9:d6:94:c8:b2:
63:3a:d3:d2:6b:28:65:2a:a6:fb:c6:a5:a0:c4:97:57:c0:60:
97:f4:22:c8:de:83:38:6a:86:1e:de:c4:de:1e:af:fc:0c:a4:
9b:27:4b:b8:cc:05:d1:42:e9:fb:aa:b8:4b:fe:05:73:46:ec:
84:59:35:20:78:88:af:f4:17:9d:f3:b7:b6:2b:69:7a:58:fc:
0b:7a:b2:b4:e4:fb:62:0c:4f:d8:54:e1:33:16:6a:55:32:72:
9b:2a:3b:d8:22:fd:c2:01:7c:bc:93:02:cb:6e:6f:c0:7a:4e:
81:ec:7a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:38:35 2026 by rpki-client