Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/1UAHvGkw9upJY72E3jOv0ot5XXM.roa
File: 1UAHvGkw9upJY72E3jOv0ot5XXM.roa (raw, json)
Hash identifier: /jM6zrkazqL8k4EyqY4YDmgX3o6IiBsLdiLxh23Z/JE=
Subject key identifier: D5:40:07:BC:69:30:F6:EA:49:63:BD:84:DE:33:AF:D2:8B:79:5D:73
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F8A51F3CD5CD26C36DEC28996C9E2711F
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/1UAHvGkw9upJY72E3jOv0ot5XXM.roa
Signing time: Wed 22 Jul 2026 14:54:14 +0000
ROA not before: Wed 22 Jul 2026 14:54:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399359
IP address blocks: 89.30.174.0/24 maxlen: 24
213.214.102.0/24 maxlen: 24
213.214.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:51:f3:cd:5c:d2:6c:36:de:c2:89:96:c9:e2:71:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 22 14:54:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d54007bc6930f6ea4963bd84de33afd28b795d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a6:f2:de:f0:cf:55:14:ac:e2:66:4f:23:22:
c7:a7:96:3a:e2:b4:a8:78:c6:18:76:7f:3f:76:6a:
7e:c6:cc:3e:22:5b:e2:cb:a2:18:30:9b:48:ee:0a:
32:ce:1b:95:c4:c1:4f:ae:87:86:31:77:92:3b:08:
da:4e:33:3c:ed:3d:2c:37:ec:ed:30:79:4a:41:30:
ab:d1:83:85:94:87:3d:af:dd:dd:c9:bf:61:d1:3e:
48:49:a3:be:cc:3d:d5:88:e4:7d:12:16:22:3f:68:
83:5f:19:11:da:50:14:d3:02:c5:32:3d:e5:ea:59:
cf:09:e7:c2:c1:05:32:e4:49:7b:ff:b9:51:2b:f3:
3a:2e:0a:6e:d6:6e:b9:89:e9:a7:09:ac:0d:56:df:
4b:c3:bb:2c:3c:e0:4f:a1:09:cd:df:dd:19:ed:c1:
b0:1e:96:98:dc:6d:5f:3a:ec:b6:87:89:ce:89:58:
87:ac:e4:17:0c:79:b6:41:ac:8f:1e:ce:43:5d:c0:
9b:56:62:db:d3:b7:57:e1:d5:26:1f:d1:d9:69:72:
df:d3:5a:ec:67:83:07:06:8e:83:e1:dd:2b:44:4a:
17:d7:35:00:74:9a:68:02:2f:41:82:ea:3e:a1:bb:
99:cc:61:24:35:6f:64:bf:15:9e:71:c3:9c:57:60:
6e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:40:07:BC:69:30:F6:EA:49:63:BD:84:DE:33:AF:D2:8B:79:5D:73
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/1UAHvGkw9upJY72E3jOv0ot5XXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.174.0/24
213.214.102.0/24
213.214.111.0/24
Signature Algorithm: sha256WithRSAEncryption
74:18:91:b3:99:d4:74:47:45:c1:33:8b:0b:1c:c3:3d:47:35:
64:38:2d:4f:42:70:8f:70:78:84:c6:e3:79:e4:c5:48:78:2c:
92:8a:f9:a4:5f:33:1f:49:44:3f:48:5f:99:ff:45:d6:03:c8:
79:63:8d:25:f8:69:73:c1:4e:02:b9:3a:97:22:b7:17:7d:92:
71:26:af:1c:f9:44:90:5f:6a:4b:7f:ce:16:27:3c:16:72:10:
e2:b4:08:98:76:50:65:db:42:7a:86:7a:b8:31:90:d3:85:6a:
ae:e1:56:6a:66:39:6e:fc:69:08:85:f5:64:62:a0:97:50:c8:
4b:c7:a2:16:f4:47:9b:31:68:5b:3c:28:d0:08:2d:3b:2f:24:
ae:36:c9:0c:48:69:eb:51:17:c7:10:f2:eb:13:e9:29:bc:15:
21:4a:b0:cb:11:23:ca:cc:7d:0d:57:2f:49:37:6a:44:0d:93:
c7:3d:ac:4a:5a:40:99:4b:36:a2:55:13:f1:2e:6a:db:c0:b2:
71:32:d0:f0:8d:7e:c7:6f:22:5a:01:6e:7c:ea:11:2e:ca:d8:
5a:86:ce:c2:f1:75:e9:e9:c1:98:c1:3e:9f:d1:2d:3d:7b:74:
da:f2:0d:27:ef:82:a8:d0:13:eb:5f:46:94:b9:fa:f9:48:44:
fa:52:cb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:58 2026 by rpki-client