Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/27IwrqzHJ1PTxKgZ4mRud-Jlt-0.roa
File: 27IwrqzHJ1PTxKgZ4mRud-Jlt-0.roa (raw, json)
Hash identifier: dXjrxYJpgIXfXGQTYOM3wkmSN/Cj+D6fh6NunNMrU9s=
Subject key identifier: DB:B2:30:AE:AC:C7:27:53:D3:C4:A8:19:E2:64:6E:77:E2:65:B7:ED
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019E2B9C3280DB560E28127D864380E45C6B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/27IwrqzHJ1PTxKgZ4mRud-Jlt-0.roa
Signing time: Fri 15 May 2026 12:28:37 +0000
ROA not before: Fri 15 May 2026 12:28:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197622
IP address blocks: 45.94.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:9c:32:80:db:56:0e:28:12:7d:86:43:80:e4:5c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 15 12:28:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbb230aeacc72753d3c4a819e2646e77e265b7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0f:93:30:cd:ee:42:80:54:e6:ba:39:47:15:
54:3f:b2:e4:95:74:0a:96:b3:20:3f:0f:0f:19:1a:
39:0c:fe:e1:c6:54:36:02:28:5e:e2:85:58:73:9f:
e1:84:b9:d1:8f:96:dd:76:28:d4:fb:10:41:3b:30:
39:8a:df:53:ec:85:7d:98:76:57:a5:26:3a:ca:22:
9b:ee:6a:96:15:6f:25:50:35:8b:63:5e:c3:e7:a6:
c2:e3:90:9f:97:50:9a:e5:20:dd:de:f5:95:91:16:
25:78:14:46:55:c6:ee:8e:5b:2f:21:dd:c9:74:a9:
53:37:b3:8c:37:8d:96:f3:a6:31:36:6f:83:4d:f6:
de:78:04:40:e4:da:b3:c8:ca:c9:4b:64:99:69:f6:
54:0a:37:79:f0:9b:f5:f6:ed:eb:f1:b8:b0:e4:bd:
1e:b7:4d:fe:0f:01:c1:26:0f:db:c8:6f:b0:8f:16:
5c:dc:7a:f4:e7:fc:67:c2:00:54:64:ba:46:de:e0:
90:03:10:c3:dc:5a:b0:40:3a:1e:05:02:c7:d7:17:
02:2d:28:37:10:06:43:f1:f8:65:4e:65:24:27:3b:
85:a9:e6:54:c5:8b:7d:d9:0d:ee:03:27:cb:da:08:
64:85:ee:b7:33:fd:48:f0:e7:f7:d2:20:c3:85:25:
a5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B2:30:AE:AC:C7:27:53:D3:C4:A8:19:E2:64:6E:77:E2:65:B7:ED
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/27IwrqzHJ1PTxKgZ4mRud-Jlt-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.38.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:07:51:63:84:76:4e:e8:8f:1a:7b:f5:4f:8e:88:cb:cb:a6:
a6:e0:c9:1c:3a:52:72:8a:62:55:7e:5a:28:ad:27:4c:9f:be:
e0:69:87:42:a4:d1:c6:5b:25:4b:84:50:8e:ee:89:24:8f:e3:
99:5a:40:39:f2:7c:0a:d6:09:b4:f9:72:d8:65:bc:9b:1e:6f:
61:d1:f9:f2:9b:60:86:9d:b6:86:81:00:86:27:7d:fe:db:b5:
4c:19:9c:c1:7e:b1:c9:14:d8:80:c7:2d:7b:a9:f9:cc:9a:1c:
c4:de:cf:2d:1d:ab:eb:e6:84:84:d8:d8:82:7d:c0:f1:51:4e:
a4:99:57:b7:bf:03:cb:f5:bc:05:26:50:5e:f3:cc:43:e6:2f:
f5:97:ec:b2:3e:b6:14:40:32:73:a8:e9:e6:53:46:d7:02:df:
d9:77:67:1f:c2:5f:ad:aa:e5:b9:ef:46:0a:64:0a:3d:2d:86:
77:42:31:0d:93:2e:24:74:cf:db:13:46:d9:16:6d:0c:6a:55:
ee:b2:a2:c0:38:fc:95:84:07:4c:5c:9c:07:4a:00:61:78:8d:
31:5b:d7:a4:b2:5b:bc:c5:03:83:c3:52:c3:c8:af:c9:f5:0c:
83:d3:75:fb:98:4e:ef:84:95:8a:ad:ca:8c:e4:aa:09:19:67:
91:3a:da:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 20:11:00 2026 by rpki-client