Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/WfYzHuvCJET4J3HKgH4tp2nI8TI.roa
File: WfYzHuvCJET4J3HKgH4tp2nI8TI.roa (raw, json)
Hash identifier: 9DL8WjLumBSajHC1h0CK4/zmLU0YPidPvFPUsIp9f4Y=
Subject key identifier: 59:F6:33:1E:EB:C2:24:44:F8:27:71:CA:80:7E:2D:A7:69:C8:F1:32
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F269462AB4B408EE89C0FD5617D8271EB
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/WfYzHuvCJET4J3HKgH4tp2nI8TI.roa
Signing time: Fri 03 Jul 2026 06:04:46 +0000
ROA not before: Fri 03 Jul 2026 06:04:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402315
IP address blocks: 89.30.173.0/24 maxlen: 24
89.30.204.0/24 maxlen: 24
89.30.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:94:62:ab:4b:40:8e:e8:9c:0f:d5:61:7d:82:71:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 3 06:04:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59f6331eebc22444f82771ca807e2da769c8f132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5b:f7:a5:86:e9:33:db:08:a4:f8:4f:8a:18:
f8:42:f2:c9:1f:52:70:a0:b3:f9:ad:29:1c:f7:91:
5c:77:51:dd:29:50:ae:fa:d4:a3:53:9e:d6:21:09:
9c:22:d2:5f:3e:e5:82:86:4d:cc:11:c2:d1:60:36:
18:8a:b7:bf:61:99:cd:ce:64:f0:c1:b8:68:d4:59:
a3:54:93:d5:51:e7:85:8c:34:2c:a7:c8:d1:7d:fa:
8f:a3:4b:35:74:6e:b8:60:86:7f:04:f9:98:af:44:
a4:03:b5:91:05:b2:bf:d4:0f:af:f1:ad:54:e0:cf:
5b:53:f5:62:45:47:0b:9f:03:ed:2a:91:1a:2c:84:
20:9a:44:50:9c:3c:ad:c1:a9:d9:74:b0:18:5f:09:
24:10:f5:a2:2f:e9:2d:b3:e5:93:48:8d:26:bd:f9:
e8:22:90:60:b5:42:a8:37:68:ff:70:c4:84:0a:25:
c4:7e:bf:c0:7e:6e:a1:a6:0f:37:cc:fb:7f:40:d7:
14:70:92:3c:05:23:d2:94:63:fa:1d:d3:0f:78:0f:
8b:35:d1:e7:af:ff:7a:3d:33:39:00:4c:48:ae:01:
42:54:aa:47:41:9f:88:15:e1:0a:c4:fa:a5:f3:c3:
16:33:23:d0:d8:d0:b6:9b:29:10:cf:da:df:8a:b9:
66:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F6:33:1E:EB:C2:24:44:F8:27:71:CA:80:7E:2D:A7:69:C8:F1:32
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/WfYzHuvCJET4J3HKgH4tp2nI8TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.173.0/24
89.30.204.0/24
89.30.245.0/24
Signature Algorithm: sha256WithRSAEncryption
24:8e:dc:0a:d7:37:cc:fe:46:f0:35:c2:f9:ac:5d:63:92:b8:
94:52:3d:21:90:e2:a0:2d:1d:83:af:64:3f:1b:63:0f:ad:7b:
e2:6d:1c:9e:75:d3:40:76:e6:44:b9:04:f6:1e:94:44:94:ca:
d1:e4:a4:d8:7d:d9:43:26:8d:f9:e5:3b:2d:ce:df:81:36:76:
d4:1c:76:9c:10:f8:c8:0c:46:cc:cd:06:cd:99:2f:63:3c:57:
af:e3:a8:f6:e6:1a:c1:d0:9b:69:5b:16:39:fa:f1:bb:96:7b:
47:53:a1:b1:3c:ce:cd:86:f2:f9:c7:08:6e:91:e2:be:ba:e4:
76:20:b9:47:13:b5:56:26:b6:3a:7a:41:d5:6b:90:0b:a3:1e:
97:6b:4d:98:35:3f:67:5e:79:e3:fe:a5:5c:03:e8:f5:0d:40:
6c:1f:23:b8:7b:de:1b:42:1c:22:6b:2e:7b:c9:36:3c:83:7d:
6f:11:93:bc:5e:3b:fd:3b:84:a1:a4:e8:b2:bb:0f:cb:db:bc:
e8:94:83:e8:3e:ed:72:d2:91:c5:9b:9b:f0:cc:5c:23:95:41:
5a:f6:81:60:2f:fd:95:69:0c:d0:ef:d2:0f:7a:86:9a:72:93:
58:1e:d1:1f:fd:93:76:70:0f:1e:1a:ce:b7:29:14:0e:6d:50:
c0:c5:ff:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:26:34 2026 by rpki-client