Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/oy_dMRWKerIpCHTZQedL9PhJQyY.roa
File: oy_dMRWKerIpCHTZQedL9PhJQyY.roa (raw, json)
Hash identifier: rgv7gV/yAv6WBoons3/5OZ/wDv3hDv+zcNu8X4aCYLM=
Subject key identifier: A3:2F:DD:31:15:8A:7A:B2:29:08:74:D9:41:E7:4B:F4:F8:49:43:26
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A1A9AE5A000B3A77CB5A7A8D7E0FC0D0DD
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/oy_dMRWKerIpCHTZQedL9PhJQyY.roa
Signing time: Thu 05 Nov 2026 03:08:58 +0000
ROA not before: Thu 05 Nov 2026 03:08:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 89.30.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:ae:5a:00:0b:3a:77:cb:5a:7a:8d:7e:0f:c0:d0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Nov 5 03:08:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a32fdd31158a7ab2290874d941e74bf4f8494326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6d:8d:2a:e5:36:b5:4c:5d:e8:41:fe:11:2c:
dc:65:ac:54:e7:2d:0d:29:cc:7b:d1:b8:3a:06:06:
0b:74:6a:5f:46:62:32:65:1d:fb:9c:22:c0:2d:34:
ca:8e:9f:05:b7:1e:5b:2e:a3:f5:24:6e:77:e1:9a:
e8:e2:92:98:f1:b8:b9:c9:5c:8f:b9:c3:ae:2e:5c:
5a:75:2a:1b:20:83:a4:64:2b:a1:f6:d3:87:a6:3b:
bd:5b:29:c9:0c:77:7a:6c:dd:59:c9:73:6a:a7:c6:
7f:4d:cc:af:bd:d5:64:cc:76:cb:46:8b:2c:54:84:
0c:c2:0e:b9:f3:a1:34:d3:03:f3:4e:ce:91:63:56:
d2:90:a4:d1:a2:02:98:47:7d:85:1e:d0:c7:27:9b:
64:a7:70:3c:42:71:92:e1:49:7b:cd:bf:ba:a4:d4:
4d:61:cf:15:84:37:11:00:8b:58:82:e8:8d:19:91:
40:d4:3c:9a:1f:6c:d5:98:bd:4c:7c:97:6a:13:93:
32:d3:6a:be:f7:7b:56:dd:f4:db:10:0f:7f:23:73:
d6:20:84:5c:73:47:35:21:b5:68:b5:e7:91:64:e0:
f4:f5:de:87:d1:34:3d:13:3b:aa:53:6d:f3:bc:7e:
7d:0a:ce:24:57:d2:51:19:26:0d:a8:ac:8f:fe:58:
ae:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2F:DD:31:15:8A:7A:B2:29:08:74:D9:41:E7:4B:F4:F8:49:43:26
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/oy_dMRWKerIpCHTZQedL9PhJQyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.240.0/24
Signature Algorithm: sha256WithRSAEncryption
36:fe:85:f0:9a:26:91:96:52:fa:20:79:b5:78:fc:d8:20:0f:
81:ee:59:fd:ed:c5:68:91:e6:09:0b:2b:87:e1:47:8e:1c:b7:
2a:c5:47:00:eb:00:34:a1:37:03:1e:2c:17:02:a3:1e:86:f0:
98:6b:99:87:52:8f:30:ff:82:56:4c:e6:78:3c:70:63:35:08:
ef:fd:2d:c4:41:ef:92:4a:36:bb:4a:bc:dd:fb:65:2d:68:41:
3d:b4:9d:61:b2:47:7a:b2:94:e6:bb:cf:3c:8e:a3:ef:cc:5e:
5b:3e:d5:ee:bc:57:40:1d:a0:5b:f6:96:4d:99:05:92:71:d4:
d2:a6:d0:33:1a:e1:61:f7:8b:e2:38:c8:81:53:9c:d9:9c:3a:
ac:ca:cd:f0:c9:7d:cf:3c:50:75:08:85:f0:bf:b9:71:ff:62:
9e:fb:c2:84:9d:33:e8:0c:c0:71:b2:f0:7c:6c:72:81:6f:82:
f0:90:f0:9d:03:6d:75:81:be:ef:4b:af:20:e5:03:43:b1:ed:
08:36:36:a2:62:66:51:af:2e:2c:d5:d1:0e:60:45:39:bc:08:
fc:d7:a9:12:be:57:ec:ff:11:d4:5e:43:a5:03:88:47:dd:41:
96:cd:00:9d:db:78:3f:cd:89:8b:40:94:08:35:7e:53:95:b4:
fd:68:ad:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:24:52 2026 by rpki-client