Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/JOafdpaRUl88PgC90VL5xpYKcjE.roa
File: JOafdpaRUl88PgC90VL5xpYKcjE.roa (raw, json)
Hash identifier: ZlP86SaiYRDtD1HSEnrHmifz4GMyg0MfqdTIcETJl8k=
Subject key identifier: 24:E6:9F:76:96:91:52:5F:3C:3E:00:BD:D1:52:F9:C6:96:0A:72:31
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F61346BF7FCD52660EA1114F512BB3785
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/JOafdpaRUl88PgC90VL5xpYKcjE.roa
Signing time: Tue 14 Jul 2026 15:17:33 +0000
ROA not before: Tue 14 Jul 2026 15:17:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16278
IP address blocks: 89.30.224.0/22 maxlen: 24
185.74.78.0/24 maxlen: 24
2a02:20b2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:61:34:6b:f7:fc:d5:26:60:ea:11:14:f5:12:bb:37:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 14 15:17:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24e69f769691525f3c3e00bdd152f9c6960a7231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1a:23:a8:44:51:e5:6b:d0:8b:58:80:8a:a6:
51:c8:0d:45:d4:f3:31:cf:f1:ac:74:68:e9:36:26:
c1:80:d3:71:c6:1a:fc:28:19:60:05:1b:6a:d5:50:
b5:69:4d:2e:78:fa:f5:b2:13:34:54:7c:4b:dd:31:
05:1e:50:09:13:f7:d3:8a:64:79:7f:2a:51:2b:c2:
3b:87:4c:94:20:d4:08:47:76:d2:1f:5d:b6:55:b5:
70:63:f9:d0:8c:bd:39:55:1f:87:cc:ef:6d:af:fc:
99:df:13:7b:e1:1b:5b:1e:ba:fe:c2:54:e6:5a:0e:
b0:2b:75:5a:97:ad:2f:54:dd:f6:66:19:66:1e:2f:
df:9f:16:36:9b:00:56:fa:7f:0b:51:bd:bf:11:bd:
61:99:16:8e:57:3e:4a:a0:b3:7c:1d:ad:ef:28:fa:
32:1e:91:45:8b:0a:eb:b8:ba:d0:4c:b5:fd:75:1a:
ac:62:19:99:a5:32:dd:9d:57:2f:74:8b:2b:ba:64:
f1:05:cc:5e:15:7c:29:22:4b:cc:cb:c3:03:5f:94:
7c:ef:18:18:9f:b3:c0:d5:8e:50:38:28:49:97:86:
1e:d3:b3:34:e6:6d:3f:d5:ae:74:31:03:e1:06:c8:
35:1f:ab:0d:b0:31:78:ca:dc:c3:aa:c1:04:92:29:
f8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E6:9F:76:96:91:52:5F:3C:3E:00:BD:D1:52:F9:C6:96:0A:72:31
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/JOafdpaRUl88PgC90VL5xpYKcjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.224.0/22
185.74.78.0/24
IPv6:
2a02:20b2::/32
Signature Algorithm: sha256WithRSAEncryption
64:74:41:17:f0:29:a9:3c:c7:f5:3a:4e:e9:46:9f:7c:36:e7:
58:39:34:bd:af:ae:70:82:b8:43:74:7c:bc:c1:d3:83:9a:4d:
5e:9c:ca:36:15:e4:73:bf:db:a6:36:5e:56:0b:bb:a1:7c:56:
93:00:97:2d:7f:d1:4d:f2:9d:c5:05:64:16:c9:d1:82:8c:5a:
dd:27:43:22:dd:31:85:96:96:e7:cf:e8:2e:00:b7:26:84:a2:
c6:8c:b2:fe:f0:51:34:a4:a4:3e:13:99:a0:57:60:64:51:e7:
ca:ff:76:cc:53:69:3e:8d:b4:13:ad:c5:32:22:34:b8:5f:26:
b0:0e:b5:f0:fc:ee:b2:6e:e7:2c:a5:cf:3f:34:ea:58:5a:21:
f5:f1:fa:4d:cb:43:90:7e:43:f8:9b:20:c4:1e:4f:ca:a6:23:
d1:63:6f:bf:3f:a6:4c:05:bc:71:46:d6:44:bf:d8:47:ed:7b:
2d:22:61:45:ce:95:f0:44:77:30:40:e1:cd:bc:7d:01:aa:d9:
d4:f5:2b:6a:62:e5:cd:ae:1b:07:94:94:17:8d:3a:86:f5:c9:
e7:30:eb:54:d1:be:24:ca:fb:56:f2:8f:82:5c:28:ed:5d:ed:
d3:25:21:54:41:25:92:25:19:19:f4:e3:b7:27:c2:b8:b2:3c:
f9:3d:40:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:06 2026 by rpki-client