Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/30veFJcZt5gYyATK3kLXTpDt01M.roa
File: 30veFJcZt5gYyATK3kLXTpDt01M.roa (raw, json)
Hash identifier: J0kpnYEYKB51xy6rnF6SvnRNcgOm8w3XRsDftym/CFs=
Subject key identifier: DF:4B:DE:14:97:19:B7:98:18:C8:04:CA:DE:42:D7:4E:90:ED:D3:53
Certificate issuer: /CN=8ab0a86cdef1d6855d19de74175373cdc81aefcc
Certificate serial: 019B78A220D8CD56C1B45A7E25A50E59BE8E
Authority key identifier: 8A:B0:A8:6C:DE:F1:D6:85:5D:19:DE:74:17:53:73:CD:C8:1A:EF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/30veFJcZt5gYyATK3kLXTpDt01M.roa
Signing time: Thu 01 Jan 2026 08:17:29 +0000
ROA not before: Thu 01 Jan 2026 08:17:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42552
IP address blocks: 91.192.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:20:d8:cd:56:c1:b4:5a:7e:25:a5:0e:59:be:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab0a86cdef1d6855d19de74175373cdc81aefcc
Validity
Not Before: Jan 1 08:17:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df4bde149719b79818c804cade42d74e90edd353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:60:2a:4a:ce:2d:c0:59:61:7a:27:e0:0f:
59:9d:28:e6:68:04:74:04:bd:c1:0f:2b:74:de:1a:
d8:10:98:7e:08:30:a2:63:fd:59:77:40:65:39:e5:
1a:92:dd:0c:64:6c:ac:f8:4a:7d:1c:03:f2:5b:24:
6a:de:9a:e4:49:34:2c:3e:93:ae:32:ee:60:19:fc:
ff:ce:e4:0f:e3:73:f6:a9:5a:1a:af:e2:77:d3:e8:
fd:35:28:cb:e1:48:88:87:e0:ee:ac:74:c0:90:48:
14:ff:71:65:aa:5c:a6:bb:db:00:3e:10:72:0e:c3:
0e:bd:09:23:b0:f7:e5:77:78:f4:9d:20:98:a1:82:
06:f9:47:97:62:fe:6c:3c:ba:3a:7b:6f:56:07:8e:
62:c0:2b:ae:10:2d:c9:4b:a6:e6:58:d8:92:81:0c:
ec:0f:31:f2:98:46:1e:6b:94:21:ca:6b:14:b9:fd:
17:7a:06:7d:19:e7:20:2e:74:ba:f3:75:4a:a1:e3:
75:1d:8b:f4:07:89:88:e6:57:37:8c:fe:66:2d:ba:
b2:dc:58:e5:83:4a:0c:84:dc:fd:e8:9c:e9:d0:00:
2a:7e:cb:c6:a3:bd:68:51:cf:09:0a:72:84:3c:03:
db:42:30:90:62:f6:1c:8e:8f:88:83:66:30:95:c6:
43:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4B:DE:14:97:19:B7:98:18:C8:04:CA:DE:42:D7:4E:90:ED:D3:53
X509v3 Authority Key Identifier:
keyid:8A:B0:A8:6C:DE:F1:D6:85:5D:19:DE:74:17:53:73:CD:C8:1A:EF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/30veFJcZt5gYyATK3kLXTpDt01M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.204.0/22
Signature Algorithm: sha256WithRSAEncryption
87:17:c0:68:70:ee:5e:a8:2f:22:e1:88:a3:bb:cd:bb:fc:45:
ca:d3:64:ac:29:cc:33:9f:11:7f:65:7d:3a:72:bc:0a:23:f7:
b3:64:25:4f:93:a3:a1:f9:53:3c:69:f5:41:a2:3d:ef:0c:5b:
89:f5:6e:ce:98:43:7b:ee:ee:16:a3:b9:d9:71:da:23:e0:f1:
7e:e8:3a:1c:ff:b1:9d:6d:e6:28:f7:c6:f9:66:0d:e3:27:99:
26:39:97:5c:50:f4:b2:17:53:d2:e9:32:87:8d:bd:e8:ee:20:
cb:94:69:0f:99:24:a9:2c:55:0e:88:bd:e4:14:2a:ab:7a:0d:
be:d6:9c:b5:17:b1:5a:c5:49:90:e9:f5:96:bf:4c:3f:fa:97:
d9:1a:81:f9:2d:f9:86:54:56:05:e5:bf:a0:7a:ca:24:46:1c:
2d:8a:ec:42:c4:75:34:0b:62:fc:a0:88:a1:3c:23:65:63:00:
8b:94:7f:18:e8:c4:bf:38:b3:6c:ed:1a:30:a8:61:6d:b2:8e:
61:4c:31:e9:f8:9d:00:55:30:f2:31:cc:99:d2:49:8a:23:71:
71:8d:33:de:52:47:82:e9:47:0a:08:1d:7c:82:c3:2e:3f:d9:
38:32:ea:7e:7f:47:ce:03:12:19:91:6b:4b:c0:b9:1b:24:9e:
01:a5:d9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:27:13 2026 by rpki-client