Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/wTCw0F0n3JX5hVb4zRf0QGaC5Eg.roa
File: wTCw0F0n3JX5hVb4zRf0QGaC5Eg.roa (raw, json)
Hash identifier: Mp5lh6LTO/OIm665E/VJLZ1BdZ/Gz4iINT4XdTHMBbg=
Subject key identifier: C1:30:B0:D0:5D:27:DC:95:F9:85:56:F8:CD:17:F4:40:66:82:E4:48
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A1CF04918DB6FEBCB4BE59B2B3EBBF78FE
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/wTCw0F0n3JX5hVb4zRf0QGaC5Eg.roa
Signing time: Thu 12 Nov 2026 09:09:05 +0000
ROA not before: Thu 12 Nov 2026 09:09:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218383
IP address blocks: 89.30.241.0/24 maxlen: 24
213.189.27.0/24 maxlen: 24
213.214.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:08:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:04:91:8d:b6:fe:bc:b4:be:59:b2:b3:eb:bf:78:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Nov 12 09:09:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c130b0d05d27dc95f98556f8cd17f4406682e448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ef:cc:c5:f0:fa:f2:db:5f:ad:04:ac:34:b4:
41:b2:89:ab:dc:a7:9e:c8:0a:7b:f1:ad:87:7d:80:
03:b7:68:42:cf:b9:52:90:cb:1d:8b:99:86:8b:d3:
9a:92:5f:45:2f:6c:51:71:d5:48:87:cd:ba:6f:95:
ed:de:8b:c2:67:a9:0e:b9:a2:ad:1b:6a:d5:b3:5e:
ea:d0:3a:5e:df:aa:01:ae:d2:16:de:eb:ec:80:75:
d0:73:df:4c:89:17:d3:3c:1b:4c:70:56:57:b8:ed:
a7:7c:2d:47:11:60:c0:c5:e2:60:3c:30:50:f0:4e:
45:03:f8:86:67:30:5e:13:9a:da:28:ae:af:d0:5d:
a7:4f:aa:40:d1:94:4f:95:5c:e0:a9:bc:59:71:f7:
7b:09:90:db:9f:1b:91:de:b9:da:95:f2:4a:ce:9a:
9c:71:74:b1:c3:a7:f3:16:60:25:85:ab:4e:cc:a5:
0d:61:fd:79:7d:59:7e:68:7e:6c:67:13:98:cb:c8:
93:76:bf:6e:fe:c7:8e:33:48:99:53:d0:2d:48:a7:
61:10:ee:dc:74:9b:83:e4:4d:85:41:77:e9:0b:e1:
42:67:48:01:eb:26:69:63:43:3c:ac:76:8d:5f:b1:
77:64:79:69:80:e4:15:49:00:9e:8a:07:e6:3e:b4:
e3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:30:B0:D0:5D:27:DC:95:F9:85:56:F8:CD:17:F4:40:66:82:E4:48
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/wTCw0F0n3JX5hVb4zRf0QGaC5Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.241.0/24
213.189.27.0/24
213.214.99.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:1d:a3:e4:0a:33:8e:db:47:a9:a4:a0:d6:31:db:8f:81:f1:
8f:fe:8f:de:5d:db:ad:ff:56:e1:25:21:a6:25:e5:0a:0f:66:
8e:68:b6:e3:1f:65:fb:4d:b7:71:d9:8d:47:90:7d:43:19:17:
ce:51:eb:0b:aa:4d:88:8f:8a:47:18:ef:e7:f8:a4:6d:f7:b0:
a0:c1:ec:5f:fa:2c:c5:60:ff:75:71:d8:42:53:9a:36:1e:de:
16:68:2c:03:00:2d:93:03:de:4a:57:bf:24:64:5b:b3:d3:1e:
cc:72:22:f7:3d:cd:17:db:e6:79:4f:64:48:e3:4b:65:05:84:
99:8c:da:ab:04:63:a6:e9:84:44:a1:2c:45:80:78:b0:8b:fe:
54:fd:4b:2a:c9:34:ec:76:5d:18:80:db:04:4b:6b:b5:d2:82:
bd:3b:da:77:61:ee:ee:a0:2c:c9:ea:ec:21:17:94:d9:ed:f1:
cb:fb:7a:78:7b:a0:06:dc:5f:27:fc:66:62:3a:8e:08:c7:2d:
49:68:da:3c:bb:a7:b2:77:d9:5d:55:ef:23:8a:78:23:3c:48:
69:cb:b6:87:63:21:a5:d2:d3:f6:90:9a:8e:ac:89:51:df:de:
0f:1d:a8:74:1d:f6:9d:7a:fe:cb:aa:c0:98:d0:54:7c:07:cb:
76:0b:21:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:10:55 2026 by rpki-client