Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/OQTikXZqi1CYO00Z7qqLK_7l6sY.roa
File: OQTikXZqi1CYO00Z7qqLK_7l6sY.roa (raw, json)
Hash identifier: ATNTfM8Dm6LwV9QBEZffW+T0+RYubS9zfbW6xwmllZo=
Subject key identifier: 39:04:E2:91:76:6A:8B:50:98:3B:4D:19:EE:AA:8B:2B:FE:E5:EA:C6
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A0B9E7220E7ABAF7B846FE5D0ECAF3518A
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/OQTikXZqi1CYO00Z7qqLK_7l6sY.roa
Signing time: Sat 19 Sep 2026 13:42:07 +0000
ROA not before: Sat 19 Sep 2026 13:42:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 89.30.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:e7:22:0e:7a:ba:f7:b8:46:fe:5d:0e:ca:f3:51:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 19 13:42:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3904e291766a8b50983b4d19eeaa8b2bfee5eac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6e:55:ef:5b:fc:ca:48:be:10:b8:5c:bb:7e:
72:8d:8d:f3:7e:2f:75:66:c9:58:d5:a1:c9:24:68:
64:49:62:25:0e:ce:55:a6:39:f6:d0:d8:9c:e8:ee:
45:4c:58:f7:93:49:ff:8e:6a:c7:d4:66:0e:9b:6f:
cc:fa:c1:14:3b:89:12:94:b7:f1:6b:7e:a9:2e:e3:
2c:51:54:a5:fb:47:53:37:8f:28:f1:53:ff:2c:84:
86:0d:f1:f6:a4:78:ad:e8:f9:9c:a4:76:b8:d6:e5:
dc:23:86:2f:9b:9d:ff:33:a0:03:5c:be:67:fb:c2:
b1:20:7d:ca:9d:15:99:0c:f4:34:b9:c3:3b:41:39:
69:de:ed:37:65:4a:a9:99:b1:1f:dd:57:15:c3:60:
3c:b9:a1:cb:e0:ad:fa:ee:08:19:17:27:38:14:b7:
5f:14:85:64:1f:e2:77:0d:8d:1d:53:dc:6e:f3:b6:
87:8c:57:77:b1:58:79:dc:f2:1d:d3:fc:52:d5:e8:
82:03:0e:1c:07:6c:65:67:00:1b:63:f6:3f:b1:3f:
91:c4:e2:dc:3b:7b:e9:39:26:45:4a:2c:c9:46:91:
6f:6d:6d:9f:34:5e:a4:a5:ec:bd:21:52:80:a7:67:
27:b1:9a:1b:11:04:74:4d:e8:c1:2c:cc:e1:72:d4:
da:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:04:E2:91:76:6A:8B:50:98:3B:4D:19:EE:AA:8B:2B:FE:E5:EA:C6
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/OQTikXZqi1CYO00Z7qqLK_7l6sY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.189.0/24
Signature Algorithm: sha256WithRSAEncryption
03:f1:5a:18:7f:d2:f7:ef:24:85:27:c6:32:d5:8e:a0:fd:a9:
9a:b3:67:59:21:d9:01:96:4a:40:a3:35:73:2d:94:55:98:8f:
c0:3b:e6:7f:7c:4f:38:38:8d:7c:32:a3:d7:b6:dd:14:f6:22:
46:25:5c:9e:95:a8:bc:29:c8:b0:3a:6e:a5:38:af:b1:91:2e:
16:3f:b6:34:a4:19:ee:bc:79:42:d3:4a:d1:62:6d:4a:86:c7:
84:88:75:2d:97:91:bf:dd:16:60:a8:9d:91:ae:29:41:6d:69:
be:80:10:f2:1d:3c:03:fe:fb:26:01:30:a8:50:cd:79:af:33:
c2:a4:98:1c:05:af:3a:fd:b0:90:24:63:5b:64:7b:63:36:66:
5b:1b:4f:60:33:c2:98:84:f2:fc:5c:ea:ec:67:70:ca:c1:5f:
ce:d9:f0:18:0f:5b:5f:5d:23:ac:27:c4:3b:6c:20:4b:b6:59:
fb:24:ec:5b:cd:00:2e:3f:21:07:f0:8e:48:19:77:af:8f:67:
4b:9f:e9:3d:81:79:a9:28:b1:85:db:d4:7f:b8:4f:5c:ae:69:
02:a0:4a:4d:51:d1:5b:21:aa:0c:08:60:2a:91:f6:91:ab:82:
45:d4:ea:ae:05:1a:a5:6a:2c:23:a6:0d:ed:08:8d:d9:a1:21:
4e:f6:1b:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC55yIOerr3uEb+XQ7K81GKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYwOTE5MTM0MjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTA0ZTI5MTc2NmE4YjUwOTgzYjRkMTllZWFhOGIyYmZlZTVlYWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW5V71v8yki+ELhcu35yjY3zfi91
ZslY1aHJJGhkSWIlDs5Vpjn20Nic6O5FTFj3k0n/jmrH1GYOm2/M+sEUO4kSlLfx
a36pLuMsUVSl+0dTN48o8VP/LISGDfH2pHit6PmcpHa41uXcI4Yvm53/M6ADXL5n
+8KxIH3KnRWZDPQ0ucM7QTlp3u03ZUqpmbEf3VcVw2A8uaHL4K367ggZFyc4FLdf
FIVkH+J3DY0dU9xu87aHjFd3sVh53PId0/xS1eiCAw4cB2xlZwAbY/Y/sT+RxOLc
O3vpOSZFSizJRpFvbW2fNF6kpey9IVKAp2cnsZobEQR0TejBLMzhctTafwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDkE4pF2aotQmDtNGe6qiyv+5erGMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvT1FUaWtYWnFpMUNZTzAwWjdxcUxLXzdsNnNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWR69MA0G
CSqGSIb3DQEBCwUAA4IBAQAD8VoYf9L37ySFJ8Yy1Y6g/amas2dZIdkBlkpAozVz
LZRVmI/AO+Z/fE84OI18MqPXtt0U9iJGJVyelai8KciwOm6lOK+xkS4WP7Y0pBnu
vHlC00rRYm1KhseEiHUtl5G/3RZgqJ2RrilBbWm+gBDyHTwD/vsmATCoUM15rzPC
pJgcBa86/bCQJGNbZHtjNmZbG09gM8KYhPL8XOrsZ3DKwV/O2fAYD1tfXSOsJ8Q7
bCBLtln7JOxbzQAuPyEH8I5IGXevj2dLn+k9gXmpKLGF29R/uE9crmkCoEpNUdFb
IaoMCGAqkfaRq4JF1OquBRqlaiwjpg3tCI3ZoSFO9htm
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:29:34 2026 by rpki-client