Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E5kbwRgwTw7xbPs2sB-HHcDQYhI.roa
File: E5kbwRgwTw7xbPs2sB-HHcDQYhI.roa (raw, json)
Hash identifier: Cylse8f+f3FoK/j20X5z32buptliIt8YE85eL+uyte8=
Subject key identifier: 13:99:1B:C1:18:30:4F:0E:F1:6C:FB:36:B0:1F:87:1D:C0:D0:62:12
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0198E744D539C375ADE698435BF4356EAE6D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E5kbwRgwTw7xbPs2sB-HHcDQYhI.roa
Signing time: Tue 26 Aug 2025 16:45:04 +0000
ROA not before: Tue 26 Aug 2025 16:45:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207911
IP address blocks: 193.27.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e7:44:d5:39:c3:75:ad:e6:98:43:5b:f4:35:6e:ae:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 26 16:45:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13991bc118304f0ef16cfb36b01f871dc0d06212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:95:0b:67:60:f2:98:cc:7e:95:aa:f7:a9:
c6:17:32:a2:ca:4f:6f:b9:ab:8b:cf:6a:81:e2:e5:
42:d3:e7:70:dc:f5:a3:83:e6:c2:7a:86:62:b9:ca:
ee:2c:0f:b1:10:61:cb:14:2f:1c:91:3e:60:fb:aa:
73:0d:e3:2a:12:43:50:a6:5d:a8:a9:30:7b:44:31:
1b:f9:e6:19:f5:69:68:34:40:a0:61:4b:02:a1:75:
f6:a0:07:44:07:26:ae:78:af:c0:2e:a6:75:08:34:
53:9d:13:92:f7:71:17:2f:94:7d:a9:11:16:5f:25:
b1:89:52:f1:9d:7e:1c:83:29:30:bb:90:e0:d6:cf:
90:52:ee:37:84:1a:4d:8b:e5:ee:20:79:14:d8:a3:
d3:f2:36:ce:87:7a:7f:28:4b:69:f9:60:1e:ba:63:
71:2a:01:29:05:36:aa:79:4c:7d:b6:cc:e7:5e:b0:
60:c2:92:2a:29:da:9b:6a:0b:3d:2b:00:7b:d8:c4:
f5:f6:cb:0b:58:7a:73:fa:57:af:7e:ee:cb:b0:89:
6d:ef:95:59:b0:7b:7b:7a:d2:62:85:f1:f3:f8:55:
53:30:0e:43:2d:d5:12:fd:56:ea:73:39:52:be:e8:
f1:72:7d:69:e0:ef:a2:1c:d7:a4:a3:8a:d3:db:36:
7a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:99:1B:C1:18:30:4F:0E:F1:6C:FB:36:B0:1F:87:1D:C0:D0:62:12
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E5kbwRgwTw7xbPs2sB-HHcDQYhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.21.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:80:6c:17:29:1d:e4:71:73:b2:ae:4b:60:c4:ff:87:09:78:
10:3e:4e:5e:26:b9:5c:9f:c3:25:a9:b8:9e:a3:72:21:17:1f:
01:7a:95:aa:67:95:9d:06:d6:c5:cd:6b:60:47:13:ea:3e:0a:
82:c4:c4:bb:8f:ac:77:dc:50:70:1c:ae:fc:03:9b:19:2e:dd:
3a:0a:08:be:9c:0d:c0:47:d7:30:41:aa:a6:8c:54:56:8b:a3:
e3:85:56:3c:70:74:eb:2d:0d:29:44:1b:ab:d7:e0:e4:c4:b0:
b7:1f:a9:a3:bf:73:ed:6f:68:9b:6c:34:63:34:d4:33:f7:1d:
a0:16:69:67:ca:eb:92:be:5c:da:e8:ab:0d:1e:ec:50:bf:79:
92:88:83:9e:c1:1f:d3:f2:9b:8d:10:85:63:15:7a:d6:78:f7:
de:90:dc:21:37:70:dc:a7:f3:59:21:29:2a:34:f3:a4:51:b0:
aa:6d:af:58:68:b4:f4:a8:56:95:26:f6:71:52:f2:96:ff:f5:
56:08:4d:03:71:f8:75:75:a5:55:16:d6:0c:aa:a9:a4:52:1e:
8d:ed:3b:15:9b:cc:dd:87:1c:61:6d:9a:73:f0:6a:d2:a0:6f:
b0:ad:2e:a2:4f:71:88:ff:b6:cc:4f:a1:c1:7a:43:9a:85:e1:
01:46:b2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 20:55:22 2025 by rpki-client