Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/dv8_3hitIhcpBF8D947Uh5sENXI.roa
File: dv8_3hitIhcpBF8D947Uh5sENXI.roa (raw, json)
Hash identifier: 4HFrDiN4RMatghG0gmVkKx2tzL8gmwYMcoHw8p72FX8=
Subject key identifier: 76:FF:3F:DE:18:AD:22:17:29:04:5F:03:F7:8E:D4:87:9B:04:35:72
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F2694613E781102DF83BD4DA61FA41DFA
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/dv8_3hitIhcpBF8D947Uh5sENXI.roa
Signing time: Fri 03 Jul 2026 06:04:46 +0000
ROA not before: Fri 03 Jul 2026 06:04:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402268
IP address blocks: 89.30.164.0/24 maxlen: 24
89.30.167.0/24 maxlen: 24
89.30.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:94:61:3e:78:11:02:df:83:bd:4d:a6:1f:a4:1d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 3 06:04:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76ff3fde18ad221729045f03f78ed4879b043572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:64:24:7a:b7:f9:67:95:40:ea:eb:fb:89:
1c:03:7e:95:b7:e3:68:2f:61:c8:41:ad:e1:d7:30:
a4:79:ba:0f:b3:cf:29:a3:4c:8a:9f:63:20:35:ec:
2c:54:59:d5:8f:26:de:a5:8e:d2:7d:41:48:33:6a:
3c:93:be:30:fe:1f:2d:51:43:83:a5:22:0b:e1:b5:
db:40:25:11:ad:12:7a:32:7b:e6:fe:aa:85:54:07:
67:59:d8:31:6e:a8:4e:bb:a0:01:7b:1d:b3:aa:81:
43:d5:f2:f8:f0:b0:55:a5:ff:1c:f9:0d:60:4d:6c:
dc:1d:c0:2c:3a:78:a1:d3:36:b2:76:8b:f5:15:97:
29:08:83:4d:44:c8:38:ac:ff:ea:b7:d6:60:30:3f:
4a:30:a5:7f:d1:8e:89:1b:af:75:9a:03:a7:3e:ab:
2a:58:af:b5:2e:ee:eb:ba:f9:96:34:9a:43:d2:5f:
e9:06:4d:eb:e1:2e:5d:c6:26:3b:f8:4c:ce:7e:80:
8d:ee:bf:17:64:30:0b:a3:7c:43:6d:7d:07:05:f7:
b2:4d:12:c5:bc:33:f3:67:38:34:1f:1c:7d:a2:cd:
11:bf:74:c4:26:75:d5:3a:cd:e3:24:10:90:fe:06:
ba:90:8a:99:aa:fd:c9:e1:0f:8e:54:d1:cf:1c:12:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FF:3F:DE:18:AD:22:17:29:04:5F:03:F7:8E:D4:87:9B:04:35:72
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/dv8_3hitIhcpBF8D947Uh5sENXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.164.0/24
89.30.167.0/24
89.30.206.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a1:9a:d3:dd:0b:5c:d8:dd:9d:1d:4e:4f:3a:ef:f7:c4:33:
04:c7:f0:cf:77:de:2d:2f:9c:14:81:b3:3b:88:bf:c8:34:e9:
26:a0:07:8b:b5:0f:5f:a2:bc:67:c2:a7:01:93:37:48:ba:13:
1f:78:0f:85:b5:d8:78:94:67:91:4e:a9:c0:2a:c9:27:54:eb:
81:9b:7d:b5:93:b4:59:67:70:66:5a:62:90:20:92:7e:cd:77:
83:cc:cc:c6:f6:2d:bc:88:e7:ef:82:e4:5f:68:4f:21:6a:a7:
12:51:e2:9f:a7:85:63:5b:1f:5d:d5:d3:9f:fa:06:b1:ea:82:
4a:12:57:4c:67:75:d9:4b:71:85:e6:af:8a:6a:d0:42:14:84:
23:f2:f2:d6:9a:aa:2a:c8:86:61:c7:4f:e5:74:36:d6:dc:dd:
7e:94:20:7d:3c:2c:67:fa:d4:4b:4b:6b:91:c7:b1:9e:9f:54:
64:1e:ea:6d:9c:f3:4d:5d:8a:ae:9e:1d:36:2d:80:3f:5a:e0:
fa:f0:f7:da:fd:71:13:d1:71:66:ae:46:c5:35:6a:3a:ce:db:
95:24:be:38:c3:1b:ee:75:f2:35:b3:dd:5d:31:ea:6b:03:c9:
16:48:24:a9:35:16:b7:4b:a6:a7:a9:e4:5f:d3:65:5e:b3:e3:
fd:cf:48:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:39 2026 by rpki-client