Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/xw2XXt5PPsZeg5vj7vtPE1TH3tE.roa
File: xw2XXt5PPsZeg5vj7vtPE1TH3tE.roa (raw, json)
Hash identifier: TFidTL5I8XfL87xIhewmgkAs0eQCaKHu5VsnRgFZ1CI=
Subject key identifier: C7:0D:97:5E:DE:4F:3E:C6:5E:83:9B:E3:EE:FB:4F:13:54:C7:DE:D1
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A0B9AF480ACF47A87284EA10EF8CAB0430
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/xw2XXt5PPsZeg5vj7vtPE1TH3tE.roa
Signing time: Sat 19 Sep 2026 12:41:07 +0000
ROA not before: Sat 19 Sep 2026 12:41:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 85.92.141.0/24 maxlen: 24
89.30.199.0/24 maxlen: 24
89.30.206.0/24 maxlen: 24
213.247.44.0/24 maxlen: 24
213.247.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:af:48:0a:cf:47:a8:72:84:ea:10:ef:8c:ab:04:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 19 12:41:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c70d975ede4f3ec65e839be3eefb4f1354c7ded1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:62:59:18:6d:dd:ec:d9:3d:b9:fe:62:6f:
1e:54:e1:bd:42:a8:89:4a:da:ce:61:8a:c4:a9:2d:
4c:e9:3e:60:ef:f3:1f:ce:fc:06:df:5f:91:62:49:
cb:d5:58:68:ed:a3:17:01:30:ea:35:d1:06:f4:b9:
b9:ca:a6:6a:c7:b2:a1:84:92:4b:8b:02:97:3e:19:
bb:c5:6a:91:ca:73:f7:99:19:12:5a:4e:f1:17:b1:
c4:82:b2:97:c5:60:34:56:ff:ac:6c:41:9e:de:8b:
a7:62:39:fb:fa:1e:d1:14:81:32:eb:81:2a:f8:84:
d0:c6:24:ea:f3:cf:35:a5:e2:fe:f0:58:a2:30:b4:
db:3e:9f:a0:e5:45:6c:35:02:3d:6c:69:52:ff:09:
d9:87:56:82:80:7c:54:b3:50:a8:27:63:dd:45:1f:
5a:9e:e9:9c:3f:1d:e4:33:1c:80:5a:10:a5:9d:28:
5c:8b:ee:45:db:47:df:91:98:39:6b:51:74:17:90:
3f:a2:7f:8b:3c:0b:0a:81:52:d5:b4:18:48:f5:d0:
c5:7d:d2:66:62:c8:55:16:0c:e2:d4:69:09:dc:e7:
cd:36:1e:58:87:b6:ea:7f:e4:eb:b7:92:a0:6a:de:
e4:a7:1c:b1:83:0c:9f:f1:00:24:ee:8b:4c:d8:52:
a1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0D:97:5E:DE:4F:3E:C6:5E:83:9B:E3:EE:FB:4F:13:54:C7:DE:D1
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/xw2XXt5PPsZeg5vj7vtPE1TH3tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.141.0/24
89.30.199.0/24
89.30.206.0/24
213.247.44.0/24
213.247.50.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:e1:22:21:fd:c3:bc:ab:be:59:5e:45:79:08:f9:83:2e:14:
23:24:99:91:9c:ee:b4:7a:e1:10:47:b7:fe:1e:e2:f2:2f:14:
ee:ed:d9:d7:ca:70:b3:23:4a:81:4e:4c:b5:7a:1e:23:19:f6:
24:99:99:57:9f:0b:1b:6d:48:14:31:84:ff:a7:ac:4a:35:df:
d1:a7:27:c4:af:71:c5:a0:d5:38:47:bf:0f:ce:1b:30:a2:41:
bf:6f:c4:69:c8:0d:84:cf:32:88:22:36:95:76:f7:69:58:f7:
23:03:e0:9f:66:4f:f2:5b:02:c6:4b:fc:45:04:69:03:9a:fc:
d5:15:f2:3b:3f:52:e9:25:f8:87:0c:d2:96:cd:51:83:4f:58:
23:a0:4f:b8:93:55:37:59:33:ea:82:b6:de:98:72:61:5a:c2:
91:1a:06:2b:20:64:3d:58:18:0e:6b:c1:79:13:f0:2f:39:bd:
da:c9:86:96:80:d8:34:94:91:18:7c:6b:e7:a8:ee:e9:33:16:
90:c6:64:e4:33:e5:6f:77:00:3a:5a:59:4f:55:f7:ec:d3:5d:
39:ce:4a:da:99:4f:9d:68:d2:24:fa:e0:25:27:3d:d7:08:8d:
7f:de:70:28:58:a0:82:97:6f:b5:75:a2:66:63:c9:38:37:be:
ca:0f:0c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:45:37 2026 by rpki-client