Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/pGPHs2hpIBf-iqZFw3ED4Bwfh6E.roa
File: pGPHs2hpIBf-iqZFw3ED4Bwfh6E.roa (raw, json)
Hash identifier: TIbxQucoUfWPKKTsv2pZV6kv0PsshMklm+VrIhCXk74=
Subject key identifier: A4:63:C7:B3:68:69:20:17:FE:8A:A6:45:C3:71:03:E0:1C:1F:87:A1
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019FA2F41B52DCCD5D5BAE32A72E6D8EEC07
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/pGPHs2hpIBf-iqZFw3ED4Bwfh6E.roa
Signing time: Mon 27 Jul 2026 09:42:14 +0000
ROA not before: Mon 27 Jul 2026 09:42:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402315
IP address blocks: 89.30.173.0/24 maxlen: 24
89.30.204.0/24 maxlen: 24
89.30.245.0/24 maxlen: 24
213.189.18.0/24 maxlen: 24
213.189.19.0/24 maxlen: 24
213.189.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:f4:1b:52:dc:cd:5d:5b:ae:32:a7:2e:6d:8e:ec:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 27 09:42:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a463c7b368692017fe8aa645c37103e01c1f87a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:23:e5:39:bf:b6:0e:eb:ec:d3:80:a4:84:c5:
0d:20:a0:18:9d:cf:fc:95:dd:e9:02:f2:2c:8f:74:
1f:72:12:f7:70:47:c3:b3:a6:f1:a1:33:4e:7f:dc:
c8:dc:36:27:2f:95:85:70:94:46:01:c1:33:f6:3d:
ee:17:03:fa:e3:48:b5:3e:77:1c:e2:27:ac:83:bf:
91:9b:5e:ab:6f:01:2e:16:9f:05:12:57:08:0b:f6:
63:88:07:40:70:03:fb:b3:04:cc:ee:b7:8e:ca:77:
46:b6:a0:d6:67:a3:6b:a6:06:9a:5c:41:a0:90:e9:
52:9c:f3:89:8b:cd:9b:af:43:b3:14:42:94:9b:ba:
42:90:fa:3a:0c:9f:0e:66:83:2a:5e:72:bd:7b:28:
3c:50:b3:39:33:ae:7a:73:3a:f0:b2:41:6b:79:f5:
b6:c8:b2:63:6c:ba:4d:43:ae:1c:b8:77:f3:7c:db:
95:c2:55:1c:d0:2b:19:34:d8:f0:77:fa:ea:4e:d2:
71:5c:0e:6b:cd:04:d9:f8:f5:d1:bc:58:db:54:4f:
95:2f:58:64:e6:a5:73:a4:da:21:4d:1b:50:41:74:
90:37:57:80:e9:bb:e3:69:63:95:a0:e4:06:54:bf:
f6:88:08:82:f9:41:35:2e:8b:cf:71:e0:15:f0:77:
67:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:63:C7:B3:68:69:20:17:FE:8A:A6:45:C3:71:03:E0:1C:1F:87:A1
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/pGPHs2hpIBf-iqZFw3ED4Bwfh6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.173.0/24
89.30.204.0/24
89.30.245.0/24
213.189.18.0/23
213.189.26.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e5:6e:f0:21:3c:0d:46:12:34:87:7d:d3:de:f9:e7:6b:d3:
7d:c9:81:98:d3:d0:21:35:45:e8:cd:cf:be:f3:fe:0a:04:af:
b7:52:3e:a2:96:fa:68:12:54:89:b3:86:af:a5:4c:f9:8d:01:
b3:6a:01:76:94:61:c4:73:90:9c:05:18:70:e5:7a:af:a1:47:
58:47:05:56:1b:be:95:7d:a8:cb:25:b1:d1:2f:ed:0e:35:79:
8f:fb:78:79:de:76:41:8f:72:3e:78:09:df:ee:8a:da:2a:3a:
e7:4c:79:3d:5a:1c:f6:bd:c7:09:28:74:ec:c9:7b:20:14:6b:
8a:b6:b3:3c:d4:fb:a9:29:45:fa:79:02:f7:a1:92:d8:cc:31:
28:64:76:35:d7:8a:8f:96:d1:59:a0:24:0a:92:fb:77:30:45:
d9:65:3b:ed:0c:56:cf:5c:54:f0:31:d6:2f:dd:94:f7:81:a3:
54:f5:0e:e1:90:85:d2:17:6e:f7:00:82:e5:3d:ad:77:c6:3e:
ac:e0:e3:de:d3:ac:50:ec:be:ae:e0:a5:3c:2f:d3:70:6a:6c:
0e:c6:56:ef:e2:38:0d:5b:15:63:84:57:f5:e7:e1:57:ad:df:
32:a6:b1:46:a3:55:ea:04:7c:b8:a7:86:65:b0:0e:40:13:1f:
27:f9:44:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:36:06 2026 by rpki-client