Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/CTMCirciR6oUPZEm7L4N_QnvCcE.roa
File: CTMCirciR6oUPZEm7L4N_QnvCcE.roa (raw, json)
Hash identifier: 52Ve+CFT+Y6QOG7oSAa0DqVCqgh1svtgjeyYLL3x1bU=
Subject key identifier: 09:33:02:8A:B7:22:47:AA:14:3D:91:26:EC:BE:0D:FD:09:EF:09:C1
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F26945FBE0CFCD7907A67B3A29310857F
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/CTMCirciR6oUPZEm7L4N_QnvCcE.roa
Signing time: Fri 03 Jul 2026 06:04:45 +0000
ROA not before: Fri 03 Jul 2026 06:04:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402257
IP address blocks: 89.30.140.0/24 maxlen: 24
89.30.141.0/24 maxlen: 24
89.30.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:94:5f:be:0c:fc:d7:90:7a:67:b3:a2:93:10:85:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 3 06:04:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0933028ab72247aa143d9126ecbe0dfd09ef09c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:4c:96:87:2c:00:b5:32:88:88:e5:99:75:
59:a0:09:25:81:75:b1:5b:69:8d:2e:0e:62:16:a3:
ef:a7:ee:e3:ef:84:c9:72:21:50:5c:54:9e:4f:13:
a2:e2:4a:89:a0:7d:16:32:c0:01:fb:bb:a2:e7:16:
32:0c:12:32:d3:7c:01:59:61:94:66:b1:bb:42:7d:
b1:1d:85:e7:43:a0:c9:4e:3f:6a:9a:55:bd:0c:13:
72:40:b7:e6:91:22:c1:35:e3:d1:65:38:7d:aa:e2:
01:6c:9d:6c:2d:a8:bb:26:a1:f4:80:3b:67:ad:62:
8c:62:90:76:49:51:79:94:a1:3c:0c:24:51:dc:d3:
b0:ac:58:34:ff:7f:de:07:ab:05:de:08:5a:08:4d:
17:35:1b:57:4c:b1:05:34:38:b1:c5:d6:33:92:86:
e5:3f:d3:f7:ba:e6:18:c3:bd:f5:de:24:86:41:16:
33:49:80:3a:ca:04:71:13:ea:ab:ee:40:79:6e:d9:
22:3f:e5:bf:40:ac:b5:9c:32:75:2e:b5:27:b7:a6:
af:30:1f:f9:57:53:a8:f7:e9:b8:d1:46:13:80:36:
5c:dd:a0:c6:33:9d:fd:2d:a6:d6:28:d9:96:64:77:
f9:b6:cb:32:b9:72:4b:ea:2c:91:d4:12:df:ae:7f:
9a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:33:02:8A:B7:22:47:AA:14:3D:91:26:EC:BE:0D:FD:09:EF:09:C1
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/CTMCirciR6oUPZEm7L4N_QnvCcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.140.0/23
89.30.191.0/24
Signature Algorithm: sha256WithRSAEncryption
98:2b:5b:8f:78:95:92:f2:db:48:91:f1:3d:52:2b:7a:b4:91:
41:3f:e5:03:6e:ee:39:ba:7c:45:a8:1c:2b:fd:60:6e:37:3a:
da:c1:c4:13:26:cd:ab:8d:04:a6:51:74:82:fa:c1:f0:59:91:
c1:46:19:dc:7d:a2:36:51:7b:d1:b6:97:65:0c:2c:32:69:7b:
be:13:21:65:2b:5f:b8:5c:be:01:81:15:15:5a:d9:4d:60:db:
d7:9c:32:88:8e:bc:bd:7f:5a:71:a6:21:2c:41:28:43:c6:68:
2e:5c:ff:c3:c8:d5:12:80:e0:d6:87:a6:41:76:38:e8:e8:f1:
3f:99:ea:14:70:1d:e5:0d:de:48:b0:3a:01:de:7b:b0:f5:e2:
7a:aa:58:78:5c:33:77:c8:87:7b:28:f2:00:d5:d2:cc:58:72:
2a:8c:3e:0e:ef:a4:86:7c:88:8c:3d:4e:42:0e:0b:2a:bc:7c:
2d:b9:16:76:42:98:d0:4a:c0:cc:10:33:da:ea:00:3e:df:ad:
76:e6:21:de:c1:d3:8f:21:6d:ec:68:f7:83:89:d9:35:7e:13:
5d:99:7d:05:4a:ff:7a:b9:33:3b:d2:0e:ca:92:86:33:d0:1a:
cc:5e:07:41:71:15:69:d1:d1:c5:b0:ea:78:70:85:16:ec:17:
65:0e:17:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:41 2026 by rpki-client