Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/7077DvH772h8phxBDiQ7OfBxlpI.roa
File: 7077DvH772h8phxBDiQ7OfBxlpI.roa (raw, json)
Hash identifier: zsOIwkMVK4UgEosUUdeII7lwW+XV1b0SHZiM+sgd6xw=
Subject key identifier: EF:4E:FB:0E:F1:FB:EF:68:7C:A6:1C:41:0E:24:3B:39:F0:71:96:92
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F2694597941EEB231F34AE112911D141C
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/7077DvH772h8phxBDiQ7OfBxlpI.roa
Signing time: Fri 03 Jul 2026 06:04:44 +0000
ROA not before: Fri 03 Jul 2026 06:04:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33355
IP address blocks: 89.30.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:94:59:79:41:ee:b2:31:f3:4a:e1:12:91:1d:14:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 3 06:04:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef4efb0ef1fbef687ca61c410e243b39f0719692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:f3:82:09:d5:81:27:b3:e4:6c:59:c4:5e:
b2:1a:11:40:7f:99:f2:d2:0d:72:30:d6:fc:4e:0c:
7a:14:3e:50:8e:43:2e:ce:2b:94:50:61:e2:26:8c:
46:14:78:b4:e1:ba:4b:ae:05:c8:e6:21:1f:bf:76:
60:a0:14:8d:dc:a9:2c:66:db:be:7c:01:8b:1a:17:
03:e9:f0:78:63:d8:1e:f9:97:12:7f:04:47:02:8b:
97:f6:e6:98:ee:84:aa:8d:c7:23:f5:c1:35:ca:27:
4a:a7:03:10:6d:bc:45:10:e1:e2:12:d4:d7:e6:bc:
7b:86:49:85:30:e5:c5:9e:37:ee:d9:58:73:3e:2d:
8b:44:13:3c:75:96:a8:2d:3d:6b:8f:5b:3e:20:7e:
56:96:a5:88:3b:bd:9e:c5:83:c6:0c:e5:29:77:0a:
a9:14:13:4c:24:e8:68:4e:9c:33:f9:02:a0:82:91:
14:d3:14:da:89:8e:95:eb:c2:0a:b2:d9:5d:51:12:
29:6d:96:63:d0:7e:33:cb:cc:fd:2e:4f:60:61:5c:
b7:35:85:d6:f3:8d:27:1c:60:f1:d9:ed:b2:86:ba:
45:e6:ed:d7:c7:1a:63:26:93:ae:2e:de:d4:61:4a:
c7:27:6d:ce:10:4a:f2:5f:d6:04:31:a1:7d:f0:11:
4b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4E:FB:0E:F1:FB:EF:68:7C:A6:1C:41:0E:24:3B:39:F0:71:96:92
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/7077DvH772h8phxBDiQ7OfBxlpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.242.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:25:39:63:4f:3f:1f:43:8e:46:f4:f5:7c:b0:e4:6a:61:14:
99:8d:61:47:2f:bb:03:2c:18:38:b4:4c:79:d7:7d:db:11:7f:
12:4a:60:6a:08:90:8a:8f:59:10:93:cb:3a:65:e4:e4:8e:8a:
69:8a:d1:d4:9a:38:97:28:ae:a6:b7:c0:e8:f9:42:59:7d:d7:
81:0b:e6:d0:31:de:6d:d1:cf:59:9e:66:dd:c0:d6:82:82:50:
ab:2a:2e:91:bb:d4:59:f9:8b:17:46:51:23:39:d1:44:93:8b:
48:24:59:ec:fe:f3:4b:df:88:b0:b0:d6:88:d1:74:24:8b:cf:
d3:04:02:15:48:62:90:4d:b4:b4:c6:67:bf:12:be:ec:7c:54:
3a:6a:a7:1e:1d:fa:fe:e7:bc:b0:bb:fb:cd:78:8e:b8:a0:35:
8c:1a:d0:57:ef:48:ee:73:fb:47:54:bd:3d:6c:7b:6c:d6:7f:
d3:0c:ca:f5:c5:32:89:6b:07:0e:39:9f:6a:d1:9b:15:4c:10:
16:55:54:35:df:8a:f6:c0:f1:97:18:bc:03:97:c3:5d:46:99:
87:e8:d9:c1:db:5e:73:9e:f1:fc:67:17:78:19:34:02:09:3d:
3f:4f:2e:f7:9d:7d:b6:da:d6:ba:93:8e:90:03:71:c9:8a:10:
ce:1f:ae:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:26:36 2026 by rpki-client