Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/rpxiUjoKnwHh744xJvOBFGn49wA.roa
File: rpxiUjoKnwHh744xJvOBFGn49wA.roa (raw, json)
Hash identifier: Hs/kvEaRs/h/B/Qj7Jzp4o6weuUSHswLl+1E3XDTp7c=
Subject key identifier: AE:9C:62:52:3A:0A:9F:01:E1:EF:8E:31:26:F3:81:14:69:F8:F7:00
Certificate issuer: /CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
Certificate serial: 01A08D6B317A4EFF40EB90B9B8A4F4299AB6
Authority key identifier: 57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/rpxiUjoKnwHh744xJvOBFGn49wA.roa
Signing time: Thu 10 Sep 2026 22:23:27 +0000
ROA not before: Thu 10 Sep 2026 22:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48129
IP address blocks: 81.30.113.0/24 maxlen: 24
81.30.115.0/24 maxlen: 24
81.30.116.0/24 maxlen: 24
81.30.117.0/24 maxlen: 24
81.30.118.0/24 maxlen: 24
81.30.119.0/24 maxlen: 24
81.30.124.0/24 maxlen: 24
81.30.125.0/24 maxlen: 24
81.30.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:6b:31:7a:4e:ff:40:eb:90:b9:b8:a4:f4:29:9a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
Validity
Not Before: Sep 10 22:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae9c62523a0a9f01e1ef8e3126f3811469f8f700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:a0:cf:68:8e:7b:31:d8:fb:7d:84:03:96:
2e:65:66:3c:ae:85:28:a4:04:36:2f:d6:a6:12:64:
e3:14:93:9a:e9:79:80:a9:13:53:b4:44:69:7f:49:
f5:88:58:0a:9b:fe:4b:d6:99:fa:9a:ae:db:90:17:
cf:4f:c8:ed:5f:87:4b:7b:7f:ff:dc:82:f6:36:e9:
32:af:99:ae:5b:3c:68:5d:3b:ba:b4:60:83:b4:04:
f3:f7:17:e3:79:ba:c7:97:05:53:33:7b:5b:d9:3b:
b9:33:20:c4:7b:ef:af:96:fa:80:c3:e5:2a:fe:1e:
0c:cd:5b:35:54:07:80:54:af:00:0c:74:fc:e4:e3:
48:46:b3:35:b6:a6:ad:f9:d5:24:88:6a:53:b8:5d:
0d:00:a0:93:91:62:c2:6b:f4:4a:9a:ad:91:0a:16:
bf:8e:a2:6a:df:47:29:fe:67:2d:25:be:a6:d0:af:
29:94:d5:b7:ca:38:45:d6:8f:e2:99:6b:35:54:26:
59:3e:81:c2:29:9a:9d:19:62:7a:80:a9:24:27:ea:
e9:2e:8c:ac:d1:26:2d:cd:93:da:f5:91:82:49:be:
db:40:84:02:7b:90:ae:cc:2b:71:fb:42:2d:2a:83:
8d:cf:8d:45:22:50:3a:9c:ea:f4:62:c6:13:92:b5:
b8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9C:62:52:3A:0A:9F:01:E1:EF:8E:31:26:F3:81:14:69:F8:F7:00
X509v3 Authority Key Identifier:
keyid:57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/rpxiUjoKnwHh744xJvOBFGn49wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.113.0/24
81.30.115.0-81.30.119.255
81.30.124.0-81.30.126.255
Signature Algorithm: sha256WithRSAEncryption
1e:0e:1a:81:4f:ea:e8:43:73:eb:09:c1:68:da:38:ca:86:2b:
8e:26:4b:57:42:a1:41:77:cb:a6:43:a0:5c:3a:c6:97:dd:81:
0d:5b:a5:7e:03:8a:ce:83:f9:83:34:38:5b:fd:bf:e4:c7:b1:
5e:6b:bc:c5:9a:67:eb:7a:32:2d:a0:65:24:6d:b1:08:b6:51:
0c:1b:b1:7c:11:1c:9b:ef:ce:3c:b2:d5:44:89:5f:52:2c:fb:
d9:55:92:71:c8:0a:e3:63:d1:a5:bc:68:1f:35:30:b7:b0:02:
93:f8:08:39:66:7f:4e:7f:73:db:de:6d:b5:99:1d:52:e1:72:
5a:91:ec:c1:24:48:c2:e1:01:c2:a0:00:9a:d0:4f:5e:1b:40:
50:6e:5e:02:67:99:4c:c2:3e:a0:c5:a9:40:d8:fc:08:76:0c:
70:ca:d2:1c:1d:b5:aa:83:d4:d0:b1:b0:48:10:aa:42:83:a4:
c5:f5:55:d5:dd:5b:18:b2:cd:45:df:66:c7:b1:79:a3:c2:35:
63:32:9f:73:7a:82:63:bc:99:c2:ce:7a:8a:5d:91:97:98:84:
b1:2e:2f:67:3c:d3:f8:dd:b5:70:2f:3b:e3:29:6a:ab:d1:5e:
be:2d:e1:04:fa:fb:46:a8:41:fc:a0:26:22:3d:7c:b1:15:73:
31:f1:3b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:27:26 2026 by rpki-client