Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/l7h90_iUHk_Din7DKKJ4QwOoNgQ.roa
File: l7h90_iUHk_Din7DKKJ4QwOoNgQ.roa (raw, json)
Hash identifier: aWTZYHPJ7er/oSFUnE0527gC5z0vLHQ0zP6YSEVaWno=
Subject key identifier: 97:B8:7D:D3:F8:94:1E:4F:C3:8A:7E:C3:28:A2:78:43:03:A8:36:04
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A0B9E7214483DF389BEBA24291AF255437
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/l7h90_iUHk_Din7DKKJ4QwOoNgQ.roa
Signing time: Sat 19 Sep 2026 13:42:07 +0000
ROA not before: Sat 19 Sep 2026 13:42:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.92.143.0/24 maxlen: 24
89.30.165.0/24 maxlen: 24
89.30.174.0/24 maxlen: 24
89.30.175.0/24 maxlen: 24
89.30.183.0/24 maxlen: 24
89.30.184.0/24 maxlen: 24
89.30.185.0/24 maxlen: 24
89.30.186.0/24 maxlen: 24
89.30.187.0/24 maxlen: 24
89.30.188.0/24 maxlen: 24
89.30.190.0/24 maxlen: 24
89.30.191.0/24 maxlen: 24
89.30.204.0/24 maxlen: 24
89.30.205.0/24 maxlen: 24
89.30.240.0/24 maxlen: 24
89.30.241.0/24 maxlen: 24
89.30.242.0/24 maxlen: 24
89.30.243.0/24 maxlen: 24
89.30.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:e7:21:44:83:df:38:9b:eb:a2:42:91:af:25:54:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 19 13:42:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97b87dd3f8941e4fc38a7ec328a2784303a83604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:57:50:a5:f9:7b:74:0f:8b:be:e9:75:4f:
ad:0c:c0:20:95:ac:2b:7c:42:30:bf:c1:54:f9:aa:
f5:d2:ac:45:71:5d:3d:41:b9:18:93:d6:e8:f1:61:
fc:c6:96:0e:4a:f1:85:b4:22:6f:2a:a8:8c:57:ae:
d9:e1:75:61:8d:9f:c2:a6:63:76:d3:e4:bf:bf:52:
82:bd:6b:30:9b:d8:5e:c0:62:44:64:9e:c9:95:21:
c4:ff:2d:b6:57:42:ac:1d:9a:61:57:81:65:2e:ec:
bc:41:53:0a:dd:8b:8a:ca:f0:a1:78:17:a6:85:6a:
99:7b:9a:e0:b2:28:58:02:29:77:bf:64:12:9b:ff:
1f:58:9e:3c:38:27:9e:59:9b:83:5d:42:d8:c6:f7:
f6:75:ac:a3:3f:e0:23:88:71:76:ab:7d:a4:26:5c:
b0:c2:93:a1:7e:0d:f7:d4:20:f4:76:3d:42:d1:75:
ee:07:1e:33:8a:8c:26:9b:f8:18:d9:17:0e:40:e2:
5b:4e:42:94:c0:24:78:2d:d9:72:5a:ca:ba:da:58:
36:9f:18:dd:47:a4:5f:10:8b:f9:1a:75:85:03:14:
c3:ac:ae:7d:86:df:e8:5f:b5:71:9b:d5:96:c0:31:
e1:d2:c7:34:f1:52:a9:ae:e8:ed:6b:c5:97:23:51:
02:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B8:7D:D3:F8:94:1E:4F:C3:8A:7E:C3:28:A2:78:43:03:A8:36:04
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/l7h90_iUHk_Din7DKKJ4QwOoNgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.143.0/24
89.30.165.0/24
89.30.174.0/23
89.30.183.0-89.30.188.255
89.30.190.0/23
89.30.204.0/23
89.30.240.0/22
89.30.247.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:71:27:c1:2a:6c:78:7a:43:74:ff:97:a2:eb:b2:8b:8f:4c:
d9:da:10:ac:47:50:47:7b:ae:c6:5b:64:75:42:36:63:5b:dc:
4d:35:58:4b:81:1c:20:d5:c3:70:80:ce:d7:e4:b8:3b:f0:d0:
06:fc:50:c4:f6:d5:91:cf:2c:a1:64:1d:a7:54:1b:3a:ef:68:
9b:c1:f3:54:c8:e2:6b:c0:c1:a6:6a:f8:45:76:66:75:7f:db:
1a:46:af:08:c9:9d:5d:d7:9f:18:76:7d:bf:3b:2c:ec:d4:1b:
4d:47:1f:80:be:7e:10:11:19:66:75:86:4f:d9:03:0e:d4:82:
96:24:7a:61:d6:58:f0:e0:c9:fe:1b:b8:16:64:4d:69:78:fe:
b0:9d:53:0e:36:e9:ad:c3:05:bd:ff:6f:47:5c:da:77:58:cd:
20:4f:31:f3:0f:b2:4a:9e:f8:ea:0e:a1:05:c7:4f:b1:58:1d:
32:a8:60:aa:86:46:bc:3a:81:3d:fb:a5:10:64:5f:dc:ec:98:
6c:bf:37:cd:ef:08:46:6c:3a:c5:b6:ec:ba:03:36:fd:45:51:
ab:ba:f6:39:e0:b0:43:33:b0:85:9b:db:02:b3:5c:46:24:2c:
94:9d:8b:1d:13:f8:b7:c3:27:9f:ff:b2:f5:15:fd:d5:ca:b9:
29:88:a2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:21:30 2026 by rpki-client