Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/keJ27iZANYzzcX7TF41JEPA4bBA.roa
File: keJ27iZANYzzcX7TF41JEPA4bBA.roa (raw, json)
Hash identifier: +g7LtyQp916LXKV8dbtjb11RVNxY1a18iqEi6MjpWXc=
Subject key identifier: 91:E2:76:EE:26:40:35:8C:F3:71:7E:D3:17:8D:49:10:F0:38:6C:10
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019CFB6D00B4A2C7065A87EB2C385A4F17B6
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/keJ27iZANYzzcX7TF41JEPA4bBA.roa
Signing time: Tue 17 Mar 2026 10:52:30 +0000
ROA not before: Tue 17 Mar 2026 10:52:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214862
IP address blocks: 163.5.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:6d:00:b4:a2:c7:06:5a:87:eb:2c:38:5a:4f:17:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 17 10:52:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91e276ee2640358cf3717ed3178d4910f0386c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:c8:ac:7d:4b:1f:fe:4b:d2:97:ea:35:59:
57:d4:05:52:39:50:56:34:c4:c6:2a:4f:8b:23:7c:
7f:6b:7e:52:95:05:0e:10:9a:87:62:3b:41:ca:35:
40:01:9d:d7:6b:19:e7:44:a7:c5:30:27:67:91:d0:
39:12:55:f0:db:fa:24:78:0a:22:03:22:b4:b9:8c:
81:99:28:90:a2:7c:73:61:42:95:76:3b:78:d8:2a:
1e:21:ed:53:7a:00:a5:15:b2:05:44:47:a6:b7:db:
0b:33:37:ac:ac:f2:a2:58:15:21:34:08:f7:75:2f:
65:39:39:e2:8c:65:1f:19:44:b3:e7:ec:62:3b:32:
80:70:77:a0:47:75:da:4c:60:3a:96:db:c6:bc:b7:
b8:d6:bc:f3:b2:76:dd:30:f1:e6:ef:83:c4:c0:71:
cb:01:1a:c5:80:fd:9e:8c:b8:d7:c1:b6:13:d3:79:
21:10:c4:0d:02:bc:2d:76:f8:c7:41:57:45:8d:e8:
d7:0d:26:b5:bf:0e:bb:08:97:28:fe:d9:25:ce:e7:
2f:1a:23:ec:7e:d9:1d:ad:21:a1:7a:ac:5e:7e:c9:
9e:a2:25:19:e3:bb:ce:6f:2f:28:ec:1b:e1:d4:a8:
e2:61:2f:99:c8:95:7f:66:81:c1:82:b2:79:5f:bd:
f6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E2:76:EE:26:40:35:8C:F3:71:7E:D3:17:8D:49:10:F0:38:6C:10
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/keJ27iZANYzzcX7TF41JEPA4bBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.237.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:2e:a1:b5:8f:54:e7:2c:10:f1:4b:f3:3f:4a:5a:2e:72:cb:
3d:f0:7d:7f:30:4c:2d:39:c7:88:e8:39:03:35:e3:5a:8f:b4:
bb:f1:89:11:8e:7f:3d:e5:99:20:87:10:f4:39:c8:b6:8e:60:
e0:71:96:04:a4:83:48:2a:5f:7c:2c:7d:55:70:99:53:1a:2b:
a0:0a:81:fa:55:d5:91:75:61:d1:58:b7:a6:d3:ab:8e:a6:7d:
fb:3c:65:e3:ae:62:a2:d7:97:1b:94:8f:6b:0d:94:af:39:0e:
df:0c:81:0b:8e:b6:da:78:0b:b0:a1:f5:c0:73:18:75:38:e2:
d0:9a:63:f0:b1:a9:e3:21:e5:cd:88:da:53:66:28:27:27:db:
e4:d2:7e:a9:bb:13:2e:dc:f3:44:eb:ca:f2:bc:75:55:d8:98:
bc:b7:9d:c6:97:85:72:76:27:6d:42:87:87:79:02:ba:19:1f:
a8:6c:dc:92:f4:6a:bd:45:8e:03:f5:b7:c1:b3:87:04:d4:25:
f4:d5:71:55:a4:32:5c:7b:5e:a3:d2:e9:07:de:4f:1f:82:27:
4e:e6:d5:ca:04:c9:b0:7a:54:27:97:7a:8e:bb:0f:0b:11:fa:
26:31:2c:c9:02:6c:e8:02:e1:ea:c9:5c:be:42:ea:3f:d2:75:
ed:54:23:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:37:08 2026 by rpki-client