Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c00d60-5db6-4737-aa7f-fb6f95de1ed0/1/27qwpEcmCN_n8WXHk92y3bElVec.roa
File: 27qwpEcmCN_n8WXHk92y3bElVec.roa (raw, json)
Hash identifier: AGxJBrf7HxUPwaiyEy6FYLKvwl8PQU6C90kD79ZmrRQ=
Subject key identifier: DB:BA:B0:A4:47:26:08:DF:E7:F1:65:C7:93:DD:B2:DD:B1:25:55:E7
Certificate issuer: /CN=ee0ca3308be345b3988c05a2161b165358718329
Certificate serial: 019E87D255BDD649C91596DF81BD8B9A1FDC
Authority key identifier: EE:0C:A3:30:8B:E3:45:B3:98:8C:05:A2:16:1B:16:53:58:71:83:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gyjMIvjRbOYjAWiFhsWU1hxgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c00d60-5db6-4737-aa7f-fb6f95de1ed0/1/27qwpEcmCN_n8WXHk92y3bElVec.roa
Signing time: Tue 02 Jun 2026 10:12:49 +0000
ROA not before: Tue 02 Jun 2026 10:12:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3308
IP address blocks: 193.163.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c00d60-5db6-4737-aa7f-fb6f95de1ed0/1/7gyjMIvjRbOYjAWiFhsWU1hxgyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c00d60-5db6-4737-aa7f-fb6f95de1ed0/1/7gyjMIvjRbOYjAWiFhsWU1hxgyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gyjMIvjRbOYjAWiFhsWU1hxgyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:d2:55:bd:d6:49:c9:15:96:df:81:bd:8b:9a:1f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0ca3308be345b3988c05a2161b165358718329
Validity
Not Before: Jun 2 10:12:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbbab0a4472608dfe7f165c793ddb2ddb12555e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ed:93:bb:eb:12:fe:1f:ef:74:3e:98:3d:6b:
c1:e5:94:35:82:a1:2c:90:f1:cc:39:57:71:d8:57:
fe:cf:bd:93:6f:d1:cd:cf:0c:a1:45:34:6a:f1:00:
36:aa:fd:e0:c0:9c:5f:1f:0f:52:93:75:e9:25:40:
c5:0c:37:be:c1:0e:bb:f7:cf:ed:17:35:19:87:c3:
83:27:74:f9:b2:64:4f:91:15:2f:5f:f2:b9:a0:45:
a9:42:07:15:9b:12:73:ed:b4:a1:e8:2b:5c:13:1d:
ff:15:17:3e:02:3b:b5:0d:29:cd:fc:db:1b:b1:a9:
ae:a7:15:f2:b9:4d:11:2b:be:42:aa:e3:db:ec:a2:
2d:ad:eb:96:56:3e:cd:ef:89:1f:04:69:cf:8f:05:
f4:05:50:47:da:01:18:65:8f:69:f6:03:2c:f0:07:
5e:84:09:35:59:64:be:27:90:db:e8:5a:3e:d1:59:
1a:44:4e:e8:22:fc:26:ef:58:da:8e:e5:bf:40:08:
ce:1c:a5:a7:77:2e:d8:90:0b:5e:7d:35:44:ca:6e:
33:90:7c:f0:1a:4d:62:66:e6:99:fa:1d:46:83:d3:
95:0d:32:cb:e5:ec:ec:97:71:f8:4a:73:4f:69:3d:
76:ba:13:90:b7:59:8d:58:bc:94:fb:17:88:ae:9f:
69:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BA:B0:A4:47:26:08:DF:E7:F1:65:C7:93:DD:B2:DD:B1:25:55:E7
X509v3 Authority Key Identifier:
keyid:EE:0C:A3:30:8B:E3:45:B3:98:8C:05:A2:16:1B:16:53:58:71:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gyjMIvjRbOYjAWiFhsWU1hxgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c00d60-5db6-4737-aa7f-fb6f95de1ed0/1/27qwpEcmCN_n8WXHk92y3bElVec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c00d60-5db6-4737-aa7f-fb6f95de1ed0/1/7gyjMIvjRbOYjAWiFhsWU1hxgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.152.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ab:b6:42:95:6d:85:88:d6:4c:63:24:46:85:51:15:0c:97:
a3:3d:1e:ac:be:6d:ba:38:df:cd:ee:94:e3:5f:c2:3e:01:ff:
76:d5:9d:b0:4c:bd:86:f1:e2:a8:de:30:cf:97:ed:87:d4:ae:
56:e1:be:e4:b6:7d:5a:dc:67:87:db:1b:79:91:51:64:7b:a1:
7e:18:7c:e1:bf:f9:eb:b8:36:b3:f2:1d:ca:ad:0a:2c:30:3b:
d1:3e:07:71:12:71:f4:2d:8e:3f:97:24:82:9e:3a:26:6c:ad:
8c:04:80:4c:bd:3e:7c:4c:b7:b8:d6:3f:da:8c:87:18:e2:58:
14:47:64:e0:cc:75:40:27:bf:ac:89:0b:ef:af:70:61:61:63:
9d:09:44:44:19:43:98:b1:d2:3c:a5:27:7c:b6:ed:5f:b1:a7:
b8:b5:f7:1d:23:fa:bc:c3:4b:a6:b6:38:7d:de:40:78:e9:38:
0e:80:f0:55:87:15:b4:f0:f8:1f:e9:ed:30:45:cd:ae:07:15:
9a:ab:1d:0d:1d:76:e7:b8:9f:39:ef:9b:c8:62:6c:f1:56:52:
3d:b8:64:8b:b6:ef:74:41:53:94:f1:17:95:5d:15:98:09:c6:
f8:3a:36:46:06:d9:75:1e:7c:19:a2:3c:94:0d:cf:0c:0d:f5:
e0:9c:1c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:13 2026 by rpki-client