Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/dD3wtncmwp5EMLah3RRT9eWt4Wk.roa
File: dD3wtncmwp5EMLah3RRT9eWt4Wk.roa (raw, json)
Hash identifier: Jz9K2HmdYtISFkDAHum3xUe88nlsxFm7689ruYtn/OQ=
Subject key identifier: 74:3D:F0:B6:77:26:C2:9E:44:30:B6:A1:DD:14:53:F5:E5:AD:E1:69
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A090BDD8EB55C618D0C7BB30608388057D
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/dD3wtncmwp5EMLah3RRT9eWt4Wk.roa
Signing time: Fri 11 Sep 2026 13:52:36 +0000
ROA not before: Fri 11 Sep 2026 13:52:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 5.100.230.0/24 maxlen: 24
83.98.192.0/24 maxlen: 24
83.98.194.0/24 maxlen: 24
83.98.198.0/24 maxlen: 24
85.92.140.0/24 maxlen: 24
89.30.138.0/24 maxlen: 24
89.30.140.0/24 maxlen: 24
89.30.141.0/24 maxlen: 24
89.30.143.0/24 maxlen: 24
89.30.159.0/24 maxlen: 24
89.30.160.0/24 maxlen: 24
89.30.161.0/24 maxlen: 24
89.30.162.0/24 maxlen: 24
89.30.163.0/24 maxlen: 24
89.30.164.0/24 maxlen: 24
89.30.172.0/24 maxlen: 24
89.30.173.0/24 maxlen: 24
89.30.178.0/23 maxlen: 24
89.30.178.0/24 maxlen: 24
89.30.179.0/24 maxlen: 24
213.189.16.0/24 maxlen: 24
213.189.18.0/24 maxlen: 24
213.189.22.0/24 maxlen: 24
213.214.100.0/24 maxlen: 24
213.214.105.0/24 maxlen: 24
213.214.109.0/24 maxlen: 24
213.214.110.0/24 maxlen: 24
213.247.45.0/24 maxlen: 24
213.247.47.0/24 maxlen: 24
213.247.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:bd:d8:eb:55:c6:18:d0:c7:bb:30:60:83:88:05:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 11 13:52:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=743df0b67726c29e4430b6a1dd1453f5e5ade169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:e2:b5:13:a4:1f:42:b9:c4:34:e0:82:d6:
75:ee:58:54:88:17:7a:ce:50:39:89:a9:5c:ec:b3:
53:74:f0:c6:50:1b:c4:30:7c:74:89:08:e0:f1:2e:
50:1c:47:5c:0f:28:b9:d1:4f:d0:b6:7f:fb:da:ab:
8e:18:f8:3a:9d:a0:ca:a8:d3:97:cc:a6:53:8d:91:
dd:c9:d7:30:83:54:1c:19:0c:14:1d:14:9c:4e:20:
3f:04:ae:ee:98:99:66:b8:7a:5f:99:78:36:84:c2:
5c:39:1b:f7:33:1f:3a:2c:7c:10:bd:6f:d6:75:da:
31:0c:8e:09:77:5d:c5:69:62:ea:28:7d:1d:8c:9d:
6b:3c:0b:9f:9b:53:fa:34:f9:6f:78:7a:55:d0:b6:
95:7a:72:e3:7b:0b:f2:8d:8c:0e:e1:6f:64:6f:d3:
aa:1c:6a:d4:53:08:d8:8e:a1:a9:7e:08:aa:af:42:
d3:7d:eb:9d:c0:c2:01:9b:ae:a9:ae:21:25:9c:ba:
7f:ba:a9:82:dc:6e:18:c1:2d:e6:4e:39:7c:16:81:
70:c8:a9:4f:4d:bc:30:51:12:31:d9:61:17:45:c1:
09:74:cb:f4:2f:64:f7:03:b6:9f:b2:b4:a8:45:1b:
62:dc:09:8e:d1:50:a7:85:17:66:7e:c8:ef:fc:9f:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3D:F0:B6:77:26:C2:9E:44:30:B6:A1:DD:14:53:F5:E5:AD:E1:69
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/dD3wtncmwp5EMLah3RRT9eWt4Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.230.0/24
83.98.192.0/24
83.98.194.0/24
83.98.198.0/24
85.92.140.0/24
89.30.138.0/24
89.30.140.0/23
89.30.143.0/24
89.30.159.0-89.30.164.255
89.30.172.0/23
89.30.178.0/23
213.189.16.0/24
213.189.18.0/24
213.189.22.0/24
213.214.100.0/24
213.214.105.0/24
213.214.109.0-213.214.110.255
213.247.45.0/24
213.247.47.0/24
213.247.51.0/24
Signature Algorithm: sha256WithRSAEncryption
04:71:8b:0b:fd:92:0a:c1:28:a9:10:66:48:47:a8:15:c2:ab:
15:03:9b:8e:a8:e4:cc:0e:86:6f:26:1b:b5:c0:6c:ab:c6:13:
60:eb:e2:cc:03:a9:a6:b5:db:e5:ad:aa:80:fb:79:93:cd:cd:
7b:04:76:46:ef:bf:97:cd:ab:ed:96:48:d0:83:a2:71:29:21:
1f:4e:f3:da:2d:33:cb:a2:88:a7:ca:12:01:33:a0:16:35:2d:
05:97:04:62:37:80:5a:68:a4:ec:12:81:07:79:06:6e:40:33:
d8:91:f2:c1:62:4b:53:a3:08:ef:01:f8:90:3e:b8:f5:3f:25:
8c:99:41:b0:f1:5a:e3:ba:98:7e:0f:38:95:b7:3d:e1:c7:bb:
69:a8:7d:45:34:cf:8c:2d:51:d4:3c:12:6b:e9:23:9d:f7:b2:
f2:90:ca:32:20:86:c1:e6:de:01:08:f4:a0:d5:1e:0c:0f:46:
99:20:b5:24:b1:2e:7f:43:b4:6a:c7:f2:d3:23:a3:c2:62:56:
02:75:cd:3e:10:f1:be:6a:77:97:f3:44:48:ca:6d:16:e3:08:
9a:02:9d:9d:aa:50:82:a7:fd:cd:33:dc:59:6f:d8:ca:15:3d:
79:d0:e5:4b:31:a7:06:a1:ef:0c:84:47:f5:3c:ac:e5:c9:b5:
e9:02:c3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:37:02 2026 by rpki-client