Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/27SFGjL64PRRMSLcGYBH49SrHwY.roa
File: 27SFGjL64PRRMSLcGYBH49SrHwY.roa (raw, json)
Hash identifier: PITM8gWftdzoJkt0rkZ9FWqRBqnEUQ3T5vRe+zc5/CY=
Subject key identifier: DB:B4:85:1A:32:FA:E0:F4:51:31:22:DC:19:80:47:E3:D4:AB:1F:06
Certificate issuer: /CN=4459120809c23bf3033e3f573995276f0c7a2533
Certificate serial: 019F2368895ADFFDBFF3406C617FAE763BBE
Authority key identifier: 44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/27SFGjL64PRRMSLcGYBH49SrHwY.roa
Signing time: Thu 02 Jul 2026 15:18:01 +0000
ROA not before: Thu 02 Jul 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 5.252.188.0/24 maxlen: 24
5.252.189.0/24 maxlen: 24
5.252.190.0/24 maxlen: 24
5.252.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:89:5a:df:fd:bf:f3:40:6c:61:7f:ae:76:3b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459120809c23bf3033e3f573995276f0c7a2533
Validity
Not Before: Jul 2 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbb4851a32fae0f4513122dc198047e3d4ab1f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3d:c7:dd:2d:2d:8d:fd:25:8c:da:97:d3:e6:
8f:0d:92:1d:68:f5:10:c5:c9:bc:d0:ca:18:42:63:
44:81:b1:7e:29:bc:f1:24:21:ea:e5:f4:83:c7:6c:
aa:b5:03:d0:5a:ac:7f:6d:04:f5:56:63:30:24:b7:
65:b6:d2:d8:77:96:4f:44:a0:1a:35:f8:91:77:27:
a0:32:06:cc:aa:91:f1:5c:ce:d1:2b:c3:36:f2:8d:
de:25:74:a2:c2:e4:ba:27:d2:66:f0:9e:38:9d:74:
52:5e:5b:b5:c3:0b:3d:29:28:ba:6f:f3:33:34:c7:
e3:88:04:ce:19:8b:43:4b:03:fa:e7:12:08:90:63:
7d:96:08:f3:59:be:7d:2c:a6:3a:00:ab:1d:cf:d3:
c8:49:db:6e:27:3e:47:78:df:ab:e6:79:59:fc:bd:
a3:0e:a1:fe:57:08:d8:a9:95:56:0f:be:a6:eb:bb:
42:9f:5a:b2:44:52:03:7f:56:fd:3f:ff:cb:96:07:
81:f8:90:21:09:ec:3c:aa:73:05:50:b0:d7:20:a6:
91:22:48:5f:7e:9b:c8:04:94:c0:54:78:8d:6c:78:
95:17:24:65:69:ee:54:48:57:3a:68:59:61:dd:d6:
3f:1f:e1:af:b5:26:da:27:bf:9b:f1:cd:6d:48:6d:
db:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B4:85:1A:32:FA:E0:F4:51:31:22:DC:19:80:47:E3:D4:AB:1F:06
X509v3 Authority Key Identifier:
keyid:44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/27SFGjL64PRRMSLcGYBH49SrHwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.188.0/22
Signature Algorithm: sha256WithRSAEncryption
03:2b:6f:20:f7:67:6e:e3:32:f7:00:a6:c7:3d:26:1f:12:3f:
5c:f0:c9:28:8f:ef:5e:0a:64:a3:ec:ef:1c:bc:4a:d0:db:19:
cb:27:4a:38:07:39:4a:44:86:30:a6:bc:42:79:2b:ca:2d:90:
b6:5a:56:fa:60:47:ac:b8:b9:a8:5f:4e:eb:bc:de:45:d0:a1:
da:65:13:b9:38:86:fe:94:09:f8:9d:a5:19:39:f6:a1:85:33:
2a:93:6f:5b:44:39:3c:bf:92:e5:d4:d6:3b:41:db:d8:fe:e6:
ef:07:09:15:c0:fa:38:3e:e3:ae:11:0b:b1:e5:f0:0e:14:38:
f6:6a:6b:2a:02:72:38:14:99:55:1b:73:e3:80:3f:eb:ae:2d:
69:b9:68:7d:33:98:1f:44:2e:69:fc:63:d7:7f:7b:39:5c:46:
cc:dd:08:83:b5:90:a2:86:cd:cf:84:39:a8:88:93:bf:df:87:
3e:27:85:d1:07:b3:57:ab:09:d9:07:18:d5:62:94:00:32:91:
89:7d:87:e5:32:a2:1e:79:85:95:5d:98:e8:56:c2:46:dc:bc:
40:9a:34:b0:52:8f:95:5b:80:f9:a6:2e:10:d3:11:62:6e:a1:
91:3b:d8:02:27:7c:bc:a2:a8:0d:19:0e:41:b1:88:df:9c:4f:
a3:1a:be:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:10 2026 by rpki-client