Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/Xc6F45FDdZpRKCDNbmNSgBxmI4Q.roa
File: Xc6F45FDdZpRKCDNbmNSgBxmI4Q.roa (raw, json)
Hash identifier: k00Rtc4RutmRB7co7PWne+dAMIMwZd7aRJRc7Gx9aRU=
Subject key identifier: 5D:CE:85:E3:91:43:75:9A:51:28:20:CD:6E:63:52:80:1C:66:23:84
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F8A568899483DEFCA7BC7657CC7A6D4D7
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/Xc6F45FDdZpRKCDNbmNSgBxmI4Q.roa
Signing time: Wed 22 Jul 2026 14:59:14 +0000
ROA not before: Wed 22 Jul 2026 14:59:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402288
IP address blocks: 89.30.202.0/24 maxlen: 24
213.214.106.0/24 maxlen: 24
213.214.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:56:88:99:48:3d:ef:ca:7b:c7:65:7c:c7:a6:d4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 22 14:59:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5dce85e39143759a512820cd6e6352801c662384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:db:c4:51:ac:43:0f:41:22:48:98:bf:a5:
fa:ee:d5:6f:5e:3a:fd:3b:ba:87:79:e7:4e:77:52:
0d:08:4c:26:3b:fd:44:63:29:ee:8b:4b:5f:43:c8:
f2:75:56:66:cb:1e:7b:b9:7d:8a:f2:ba:b6:3c:46:
62:60:7a:e1:14:18:a1:ea:f2:99:f8:a3:a1:67:5d:
a5:25:89:fa:60:a5:c4:12:76:59:da:f6:c5:77:7e:
7d:7a:b2:f9:d7:35:21:81:f1:75:ee:dc:99:1d:fa:
ab:a8:f2:56:9a:e4:5a:7f:1c:44:db:4f:0b:1d:10:
40:c5:53:07:4f:ac:94:34:d0:df:22:89:72:e8:68:
9e:f8:ae:e3:ec:cb:00:1c:c3:a1:c7:f6:82:a0:86:
15:81:8f:da:d0:ca:c6:52:96:e7:83:c3:a9:fe:57:
03:3a:72:96:f3:1d:bd:b4:bf:69:73:32:91:2d:6a:
b1:fa:50:24:e8:49:23:07:da:5d:cc:13:3d:b4:0c:
eb:f5:29:a2:2d:c7:66:00:c8:77:08:34:34:ff:44:
2a:13:f1:c4:c1:31:ce:08:02:2e:92:1a:54:1e:34:
e8:04:58:62:20:45:2e:4e:44:21:06:1a:8d:f9:ad:
32:60:62:73:4b:dc:eb:b2:c6:1f:bf:fd:0e:cd:fe:
90:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CE:85:E3:91:43:75:9A:51:28:20:CD:6E:63:52:80:1C:66:23:84
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/Xc6F45FDdZpRKCDNbmNSgBxmI4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.202.0/24
213.214.106.0/24
213.214.109.0/24
Signature Algorithm: sha256WithRSAEncryption
74:df:5f:c2:67:63:a6:19:f2:17:0e:bf:6b:05:23:f4:34:11:
e4:e4:86:b2:4f:81:f3:80:05:04:c5:f4:47:1a:f2:81:55:d2:
cd:1a:b3:1d:35:2b:80:12:92:6b:52:8f:4d:a5:ef:f4:30:e3:
12:89:62:b2:ca:89:65:f0:17:82:aa:40:04:fe:a8:6c:17:cb:
52:74:a4:9f:e0:5c:ae:87:40:ad:56:48:56:24:98:10:19:69:
7d:60:3e:1e:d6:90:1d:7d:56:82:4b:4d:eb:1c:8b:98:87:13:
05:cd:6a:38:f8:86:85:3c:dc:80:b7:f4:23:27:9f:eb:58:a2:
4e:93:3c:57:89:23:25:eb:96:b1:37:0b:99:ba:22:a6:6b:24:
c8:83:77:32:3e:db:42:30:ef:ca:6c:fe:b8:49:9a:81:3b:97:
46:47:a5:21:85:33:28:09:b2:78:13:0e:07:16:a3:f6:df:f8:
36:db:2d:67:b9:6f:2e:70:0e:26:ae:5e:2e:5e:bf:c0:b6:47:
13:02:25:04:50:9c:8e:00:9b:fd:c7:36:c8:4b:39:81:4a:78:
20:c3:e0:94:07:b2:e0:ed:0d:56:dc:f2:77:37:f3:76:e1:e1:
fc:03:9c:e2:be:ea:5f:87:05:7a:dd:9a:ea:93:90:d1:b0:de:
81:cc:77:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:43 2026 by rpki-client