Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/KE3GupBR2iGoEZP8QqZIbP9I-xE.roa
File: KE3GupBR2iGoEZP8QqZIbP9I-xE.roa (raw, json)
Hash identifier: Xuer3yKNUbClZo8SA2R+1gQjYc7yVthlpiw4kBX8aYY=
Subject key identifier: 28:4D:C6:BA:90:51:DA:21:A8:11:93:FC:42:A6:48:6C:FF:48:FB:11
Certificate issuer: /CN=8eb89727f9f8ece69df9bec4cc11cabcee164bc3
Certificate serial: 019F2368EEAA88C61D718959CDE648B83D8B
Authority key identifier: 8E:B8:97:27:F9:F8:EC:E6:9D:F9:BE:C4:CC:11:CA:BC:EE:16:4B:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/KE3GupBR2iGoEZP8QqZIbP9I-xE.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57651
IP address blocks: 193.247.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ee:aa:88:c6:1d:71:89:59:cd:e6:48:b8:3d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb89727f9f8ece69df9bec4cc11cabcee164bc3
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=284dc6ba9051da21a81193fc42a6486cff48fb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7c:9f:01:08:4f:23:39:58:7d:ab:58:fb:f5:
8d:c3:82:df:31:5e:e8:bc:7e:df:7a:06:cc:60:8a:
68:a8:00:bf:e7:d3:1e:8c:28:30:15:b6:78:2b:a6:
31:5d:5d:c4:1c:b4:9a:3a:bc:0f:01:2a:79:6c:74:
f7:b1:a9:b2:72:35:dc:16:d2:ba:6f:7d:92:e7:84:
d0:e6:0a:ee:ac:77:ba:94:0d:2a:ed:18:76:72:34:
8e:57:98:9d:46:31:ef:65:03:d6:a6:b8:de:31:48:
06:0c:f7:06:e5:97:ba:0a:5b:d1:30:6f:5f:8f:28:
9e:11:7c:1b:cb:0e:d4:e8:cd:19:6d:9f:e6:7c:08:
2c:2c:78:28:96:4e:cb:81:86:9a:76:20:36:f2:82:
a4:d4:67:a9:ea:c1:f5:1e:c4:44:1d:68:9e:d7:ba:
25:d2:d5:0f:94:e9:84:df:b1:4e:e0:ae:8d:27:e3:
97:77:8f:c1:0a:5d:86:95:b2:83:ff:4e:a8:05:fe:
f4:18:f2:00:4c:99:5d:12:a5:ae:aa:d5:71:15:3e:
a5:2e:f8:e0:3b:40:21:6e:bb:09:c1:e6:2f:b3:41:
8f:cf:4e:ff:51:dd:23:18:bf:5a:8c:28:f8:1b:77:
82:07:d4:d8:ec:e8:4c:7b:d0:65:07:65:88:1f:86:
97:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4D:C6:BA:90:51:DA:21:A8:11:93:FC:42:A6:48:6C:FF:48:FB:11
X509v3 Authority Key Identifier:
keyid:8E:B8:97:27:F9:F8:EC:E6:9D:F9:BE:C4:CC:11:CA:BC:EE:16:4B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/KE3GupBR2iGoEZP8QqZIbP9I-xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.238.0/24
Signature Algorithm: sha256WithRSAEncryption
19:7b:38:f9:98:1a:f3:b9:fd:cf:62:f7:68:3e:72:a4:c1:5b:
ed:5c:d5:2f:65:f0:1a:38:02:21:71:88:71:7e:eb:e7:a4:cf:
68:ca:bd:9f:5e:ae:60:4f:4b:c6:46:77:b0:74:8c:05:e5:d5:
20:52:84:1c:79:96:35:cd:99:33:ad:b3:9b:fd:00:01:37:f9:
85:59:45:bb:4a:c1:1c:2b:0a:9e:2f:7e:9e:2f:40:48:be:f3:
a6:3c:6d:9f:61:c4:68:b2:1b:31:06:07:a9:54:cc:6a:da:14:
3c:30:fe:b6:40:7e:a2:81:62:b7:89:5f:a4:3c:34:f9:ef:f6:
24:7c:65:5c:87:05:1c:1a:0b:79:ad:c7:c7:ef:3f:a9:76:92:
a2:61:a4:df:97:93:f6:29:d9:01:61:88:f0:8f:a2:7c:9b:a2:
d7:9d:0a:9c:29:6b:27:b6:38:11:09:fc:b8:2a:0b:0f:af:aa:
a3:46:cb:85:5c:c4:82:9d:31:79:7d:88:e2:02:b2:90:1f:69:
53:3f:57:19:60:18:65:e9:35:29:2f:4b:d9:d3:b4:28:58:d3:
12:2c:d9:e0:fc:23:07:21:64:60:10:e8:d0:d6:2d:59:67:14:
e5:92:6e:d5:1e:92:c8:41:17:e8:12:01:23:dd:52:8a:d4:a0:
12:2a:4e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:48:51 2026 by rpki-client