Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/kSE1InbsF6kXAO3sa2Wo6t1JYQQ.roa
File: kSE1InbsF6kXAO3sa2Wo6t1JYQQ.roa (raw, json)
Hash identifier: q45jtfaoEpCKFKyp1woeStNOZNUX8oVU7ltu8DyhZOA=
Subject key identifier: 91:21:35:22:76:EC:17:A9:17:00:ED:EC:6B:65:A8:EA:DD:49:61:04
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F26945D0823E07AAE5B5280EDE262BC65
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/kSE1InbsF6kXAO3sa2Wo6t1JYQQ.roa
Signing time: Fri 03 Jul 2026 06:04:44 +0000
ROA not before: Fri 03 Jul 2026 06:04:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209888
IP address blocks: 89.30.137.0/24 maxlen: 24
89.30.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:94:5d:08:23:e0:7a:ae:5b:52:80:ed:e2:62:bc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 3 06:04:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9121352276ec17a91700edec6b65a8eadd496104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:46:7c:e8:d3:d3:39:d5:95:47:f2:6a:c3:
80:d9:e5:9f:9d:13:86:ee:91:b9:67:aa:ef:a7:20:
65:2b:74:3e:96:d2:9d:b6:ef:16:60:69:b1:a3:cb:
b8:9a:68:6e:df:33:d2:2c:3f:ca:84:82:3a:ee:40:
4f:51:8d:cd:fe:75:08:1d:09:9c:d4:51:60:7c:de:
b6:0b:86:d2:b3:05:1e:31:00:6a:49:aa:ff:0c:06:
f7:4b:58:3e:d7:4a:e6:58:d1:f5:77:2f:ac:73:5d:
70:e9:dc:fc:4a:72:38:28:7e:15:78:fb:e8:53:c0:
17:91:98:02:0b:8e:38:d5:7f:e9:54:ec:bf:f3:99:
2e:40:cb:b1:63:f9:73:22:bc:23:81:7c:78:ff:c1:
ba:70:9a:da:93:ce:af:55:69:92:e2:17:c5:cf:a8:
43:3a:90:e9:e5:5f:97:18:f5:2a:fe:f1:af:39:e1:
ae:57:6d:02:15:94:03:14:8f:f5:0a:bb:1e:4f:9a:
9c:7d:6d:12:62:b6:bb:3d:7d:0f:84:ef:a5:50:0a:
52:a0:56:6b:41:37:ef:94:e9:c6:f4:88:b7:90:62:
2e:6d:bf:cb:d0:b7:19:c9:42:73:96:08:c9:51:a3:
ad:68:62:e0:27:50:23:86:37:0a:39:7b:9b:1c:58:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:21:35:22:76:EC:17:A9:17:00:ED:EC:6B:65:A8:EA:DD:49:61:04
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/kSE1InbsF6kXAO3sa2Wo6t1JYQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.137.0/24
89.30.185.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b9:34:04:da:a2:b4:fd:83:60:60:b9:ab:e1:31:9f:05:2e:
ad:62:ea:d0:2e:60:68:92:1a:ac:c4:e0:50:1f:d2:ff:04:cc:
8d:39:87:94:b2:b0:dc:80:52:7a:ae:97:6d:3f:e0:ad:f2:43:
0e:ca:10:09:85:b6:3f:5b:9b:99:ac:fe:3d:d0:3e:b0:7c:e2:
07:4a:a6:ac:79:0e:93:b0:ed:0e:ae:f3:c4:55:8e:02:33:40:
b8:c3:65:dc:1d:ed:cf:81:4e:60:4c:f7:40:14:d1:49:4a:a4:
56:02:c9:76:84:42:d4:dd:fb:47:58:1a:ed:3f:80:9c:98:04:
77:e5:09:72:03:54:60:e4:bd:5c:41:14:79:78:d6:b8:d8:5f:
da:02:d1:5e:66:fc:57:71:6a:3b:64:ba:19:58:d7:f7:7b:25:
ad:da:42:2c:f5:f3:e6:ba:ad:63:07:69:70:d5:98:61:3e:70:
d0:76:9e:86:4f:bd:6a:35:9e:4a:7f:26:38:cd:86:3e:69:fc:
12:8c:1d:29:a5:c5:d7:ef:0b:bd:16:8b:51:d5:d8:b0:94:49:
78:c9:db:30:93:42:19:c7:bc:c5:1d:a6:d5:96:fb:2f:b5:92:
83:04:1d:ed:73:dd:3a:e9:34:00:9c:5b:3d:52:13:1a:7c:51:
e2:30:41:23
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8mlF0II+B6rltSgO3iYrxlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYwNzAzMDYwNDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTIxMzUyMjc2ZWMxN2E5MTcwMGVkZWM2YjY1YThlYWRkNDk2MTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dxGfOjT0znVlUfyasOA2eWfnROG
7pG5Z6rvpyBlK3Q+ltKdtu8WYGmxo8u4mmhu3zPSLD/KhII67kBPUY3N/nUIHQmc
1FFgfN62C4bSswUeMQBqSar/DAb3S1g+10rmWNH1dy+sc11w6dz8SnI4KH4VePvo
U8AXkZgCC4441X/pVOy/85kuQMuxY/lzIrwjgXx4/8G6cJrak86vVWmS4hfFz6hD
OpDp5V+XGPUq/vGvOeGuV20CFZQDFI/1CrseT5qcfW0SYra7PX0PhO+lUApSoFZr
QTfvlOnG9Ii3kGIubb/L0LcZyUJzlgjJUaOtaGLgJ1AjhjcKOXubHFhsZQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJEhNSJ27BepFwDt7GtlqOrdSWEEMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEva1NFMUluYnNGNmtYQU8zc2EyV282dDFKWVFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWR6JAwQA
WR65MA0GCSqGSIb3DQEBCwUAA4IBAQCZuTQE2qK0/YNgYLmr4TGfBS6tYurQLmBo
khqsxOBQH9L/BMyNOYeUsrDcgFJ6rpdtP+Ct8kMOyhAJhbY/W5uZrP490D6wfOIH
SqaseQ6TsO0OrvPEVY4CM0C4w2XcHe3PgU5gTPdAFNFJSqRWAsl2hELU3ftHWBrt
P4CcmAR35QlyA1Rg5L1cQRR5eNa42F/aAtFeZvxXcWo7ZLoZWNf3eyWt2kIs9fPm
uq1jB2lw1ZhhPnDQdp6GT71qNZ5KfyY4zYY+afwSjB0ppcXX7wu9FotR1diwlEl4
ydswk0IZx7zFHabVlvsvtZKDBB3tc9066TQAnFs9UhMafFHiMEEj
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:26:37 2026 by rpki-client