Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/C-eRdGJheWWO-BQH20gVo6-55lU.roa
File: C-eRdGJheWWO-BQH20gVo6-55lU.roa (raw, json)
Hash identifier: AbD58rM5EB/Q++PaApU6j4w5JzUDMVH5itkiJf48ScE=
Subject key identifier: 0B:E7:91:74:62:61:79:65:8E:F8:14:07:DB:48:15:A3:AF:B9:E6:55
Certificate issuer: /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Certificate serial: 019EA8D41583E2A502BD5CF6170A50DF008B
Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/C-eRdGJheWWO-BQH20gVo6-55lU.roa
Signing time: Mon 08 Jun 2026 20:02:11 +0000
ROA not before: Mon 08 Jun 2026 20:02:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36040
IP address blocks: 139.28.107.48/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a8:d4:15:83:e2:a5:02:bd:5c:f6:17:0a:50:df:00:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Validity
Not Before: Jun 8 20:02:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0be79174626179658ef81407db4815a3afb9e655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:17:e1:5e:7c:1f:24:93:71:55:c6:9b:76:40:
eb:f3:60:d0:e2:02:55:db:21:2f:c2:7c:61:3c:45:
7b:7e:52:6f:0e:68:5e:ad:99:d3:35:3c:80:15:d9:
38:f8:b9:36:00:97:1b:77:13:5f:f3:f1:e5:cd:26:
80:19:68:58:53:91:be:25:05:01:02:ab:f2:21:e6:
ac:20:9b:f5:95:6e:df:48:34:6a:a9:31:f0:9f:5f:
6b:3c:69:39:4f:8c:ec:23:1a:e4:a5:fa:ea:02:50:
08:c9:66:1a:2a:19:e3:c8:1b:22:32:4e:f5:f6:de:
9d:7a:27:76:70:89:c2:b5:64:e6:44:78:76:50:e0:
6d:39:d1:3d:6c:79:21:a6:fa:f7:21:12:dd:0e:80:
a1:3b:96:26:77:0f:99:68:0c:93:57:a8:fa:7b:ad:
c0:d5:ed:5c:9b:60:32:20:59:d3:d1:44:cc:01:20:
23:9c:fe:09:96:de:31:00:1c:45:6a:f4:57:60:6a:
a9:2b:06:a5:52:55:4e:e2:a3:c0:6d:6f:a8:10:45:
cf:57:a0:48:58:15:cf:4e:72:92:cf:9b:a4:a4:d1:
2d:8d:1a:ad:30:0c:47:54:5b:f9:a1:ad:b7:fc:d4:
be:02:0c:40:f0:b8:9b:8b:8d:db:91:7c:32:7b:54:
24:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E7:91:74:62:61:79:65:8E:F8:14:07:DB:48:15:A3:AF:B9:E6:55
X509v3 Authority Key Identifier:
keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/C-eRdGJheWWO-BQH20gVo6-55lU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.107.48/28
Signature Algorithm: sha256WithRSAEncryption
73:c0:45:e8:fc:f3:01:ad:91:36:93:d5:48:8f:e9:20:cb:51:
a8:bd:45:53:da:16:c0:03:94:cc:58:74:f3:a2:f3:e6:a3:55:
79:ee:0b:a1:b1:da:a0:7d:4e:f1:05:56:13:84:fe:d2:ab:d9:
62:3b:a6:51:03:f6:e3:f0:a7:05:b1:3d:2b:22:86:52:7d:03:
ce:b9:8a:0c:6c:a7:42:20:45:db:07:78:c9:75:43:67:26:be:
ce:89:eb:8a:46:12:75:db:0b:08:8b:4b:c3:c4:82:a3:5a:62:
b7:ef:76:2b:c5:0d:c7:a9:2a:0f:60:d3:56:ec:63:d4:cf:3f:
53:72:3a:df:bb:b0:79:cb:ce:b4:b5:2a:4b:6f:14:bd:74:1f:
45:d0:55:fb:c3:ed:31:52:9d:eb:4d:76:ed:fa:a0:f6:35:39:
5b:f9:65:4e:2c:e3:7c:31:8e:91:92:dc:7c:7c:ec:a0:62:6e:
bb:6d:1d:58:48:0c:a9:36:b1:3e:4d:6a:d2:ec:ce:62:41:75:
5d:d8:d1:42:ba:d2:9a:af:84:51:c6:b3:12:50:96:56:21:b6:
51:07:42:32:99:34:6a:2e:fb:e8:ee:76:e2:8a:99:61:bc:fd:
20:c2:06:d0:60:ec:e9:e7:0c:26:35:5c:33:a5:38:c2:ad:44:
ad:14:4d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:12 2026 by rpki-client