Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/vJNky0OYG-s6GxQTQKzzit5N7SI.roa
File: vJNky0OYG-s6GxQTQKzzit5N7SI.roa (raw, json)
Hash identifier: 6wwR42Zck48w94gcUmxTMmFRQdk7cmngccy6bjI113E=
Subject key identifier: BC:93:64:CB:43:98:1B:EB:3A:1B:14:13:40:AC:F3:8A:DE:4D:ED:22
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A0A3D03AB4A4FCD7905AD28AE86CE698C2
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/vJNky0OYG-s6GxQTQKzzit5N7SI.roa
Signing time: Tue 15 Sep 2026 06:45:27 +0000
ROA not before: Tue 15 Sep 2026 06:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142146
IP address blocks: 89.30.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:47:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:d0:3a:b4:a4:fc:d7:90:5a:d2:8a:e8:6c:e6:98:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 15 06:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc9364cb43981beb3a1b141340acf38ade4ded22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:99:09:2c:45:0a:d0:76:be:a5:ac:82:07:c1:
f5:89:e6:67:49:70:f6:05:24:32:66:b2:98:59:9a:
b3:8a:61:d1:c7:68:67:75:b0:c4:82:7a:4e:08:8d:
4c:c1:76:d8:e1:ae:d8:5b:df:ce:ec:f1:3d:d5:ea:
4d:8e:65:00:3a:5a:a0:10:d8:fd:c6:a2:0b:14:c6:
cc:53:7d:dc:2c:7b:96:20:13:b1:cb:b0:2f:10:57:
b1:7c:2d:4a:24:e0:86:4e:b5:c3:2d:ad:96:f7:f8:
3f:8a:81:03:07:c3:e2:c4:3f:89:7c:e5:e4:46:88:
c1:c1:f7:21:03:c8:13:1e:69:5e:a4:36:e8:cb:2f:
2f:f5:ac:11:c3:25:d0:15:af:89:a5:12:86:3c:3d:
b9:9b:21:e6:c9:ca:4a:75:72:a8:3a:b8:6b:d6:d9:
24:91:0a:51:00:f6:1a:c5:b0:ec:7a:28:4c:67:1f:
dd:bb:22:a2:1d:e9:8f:22:1c:93:4f:6d:73:cb:d5:
f3:a5:e6:e2:8f:5f:43:02:90:6f:05:bd:a2:80:c9:
6d:d4:80:ba:0b:9a:c2:c7:38:b9:a5:ef:25:58:ce:
78:59:48:53:23:a9:4c:a1:2d:06:19:75:c0:87:46:
97:14:24:80:8b:33:f0:4f:ff:dc:3d:f1:c8:0a:be:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:93:64:CB:43:98:1B:EB:3A:1B:14:13:40:AC:F3:8A:DE:4D:ED:22
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/vJNky0OYG-s6GxQTQKzzit5N7SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.246.0/24
Signature Algorithm: sha256WithRSAEncryption
92:39:0c:16:78:54:7b:40:47:de:92:53:2e:3d:e2:29:f2:27:
50:76:1d:59:b9:e6:27:15:52:5f:bc:5a:44:c2:f1:55:2b:3b:
74:16:f2:77:0d:c6:21:57:a8:f6:bf:aa:ff:80:6e:43:1e:77:
9c:1a:6c:2b:fd:1f:c2:06:d1:56:d3:5c:8d:16:79:9c:5d:4e:
6b:5f:58:f2:13:d5:02:87:96:38:7b:e9:c5:cb:11:0b:7a:12:
4b:2e:8c:b6:d9:86:7e:9a:f3:ce:9b:cd:8a:2e:25:60:bd:bd:
d9:3d:eb:52:52:6c:73:9f:77:bd:2f:7b:20:2e:a3:b7:8b:37:
a0:ef:a6:d1:aa:1e:ca:e4:bb:e6:b5:d6:bc:89:71:5a:fa:a4:
20:22:f8:1a:45:f3:06:1b:5e:14:65:b6:b4:8a:9b:98:b9:59:
89:32:d1:4a:91:5e:dd:0b:4d:fa:c2:2b:c7:c0:84:9c:d7:a6:
a6:50:90:4d:ae:41:bf:bc:0d:f9:98:f9:09:a8:a6:e3:a3:9a:
b3:04:93:4c:5c:6d:27:07:a3:7e:ac:d2:54:e9:f7:80:c0:9f:
dd:54:82:e0:a0:78:32:c1:70:be:d5:98:43:ad:e7:3e:40:1d:
97:2b:44:c2:5b:5b:3a:76:d4:0d:ae:83:a7:67:25:99:1d:8c:
a4:c5:ad:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:37:07 2026 by rpki-client