Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ERILEsaWtQQhGOwgROqfTqH6MJI.roa
File: ERILEsaWtQQhGOwgROqfTqH6MJI.roa (raw, json)
Hash identifier: PL7WJwbcvj1EiXs7dZJzXsPJ2ZvKZ/ufu8JTwMwAHk0=
Subject key identifier: 11:12:0B:12:C6:96:B5:04:21:18:EC:20:44:EA:9F:4E:A1:FA:30:92
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0198DC4A2A3A287D4792E8AB73D49CD542A2
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ERILEsaWtQQhGOwgROqfTqH6MJI.roa
Signing time: Sun 24 Aug 2025 13:35:04 +0000
ROA not before: Sun 24 Aug 2025 13:35:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a0c:9a40:8470::/48 maxlen: 48
2a0c:9a40:8a80::/44 maxlen: 48
2a0c:9a40:9600::/40 maxlen: 48
2a0c:9a40:9800::/40 maxlen: 48
2a0c:9a44:cf::/48 maxlen: 48
2a0e:7d41:8888::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:dc:4a:2a:3a:28:7d:47:92:e8:ab:73:d4:9c:d5:42:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Aug 24 13:35:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11120b12c696b5042118ec2044ea9f4ea1fa3092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:ee:e6:4c:51:c4:76:7f:2f:13:75:b6:28:
10:05:f7:10:af:61:3c:be:9a:86:4a:8d:a6:06:5d:
b3:a6:0d:a3:e3:1d:25:32:ae:cf:d4:3c:63:8b:3c:
16:79:76:5f:0f:bd:27:fe:42:ea:9e:37:2f:d4:1a:
fc:49:23:43:e8:fd:69:64:44:1e:f3:7d:26:13:0a:
9e:33:57:c8:2b:b5:cc:3b:b0:0c:2e:53:7e:d1:ff:
ef:38:b5:59:f2:e6:ac:36:18:68:cd:33:cf:4c:a8:
e5:5f:f4:59:60:10:04:c2:21:8c:3e:8e:59:e0:af:
67:43:79:6b:e7:89:b1:7c:af:0f:01:37:2a:05:24:
78:0f:b5:d0:75:e1:94:5f:7a:d3:77:79:bb:75:44:
e8:ad:fb:66:93:5c:e6:9e:bb:f0:ed:67:f1:0a:c3:
81:f7:c3:18:36:55:5c:de:a8:50:e5:8a:b2:68:0d:
b1:34:08:77:78:6e:81:3c:f0:a0:c2:84:11:23:84:
c8:41:cf:f4:d7:eb:07:96:fe:55:1a:8d:dd:28:28:
95:69:74:08:57:d8:22:77:19:80:69:84:49:64:24:
19:24:b9:bd:eb:8f:ea:d7:3d:9c:f0:7f:20:46:e9:
4d:41:67:7a:5c:12:be:18:dd:59:c9:01:cb:41:47:
8f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:12:0B:12:C6:96:B5:04:21:18:EC:20:44:EA:9F:4E:A1:FA:30:92
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ERILEsaWtQQhGOwgROqfTqH6MJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8470::/48
2a0c:9a40:8a80::/44
2a0c:9a40:9600::/40
2a0c:9a40:9800::/40
2a0c:9a44:cf::/48
2a0e:7d41:8888::/48
Signature Algorithm: sha256WithRSAEncryption
69:45:43:f1:db:15:05:46:8d:3b:ff:f8:d5:80:5d:00:5c:06:
16:85:8f:ce:9a:d0:37:22:f9:2a:34:81:b6:90:c9:3e:52:3f:
d4:71:01:05:1f:b4:82:72:1c:8d:05:20:1b:2d:c0:ad:47:92:
ad:f4:d8:eb:3c:aa:b6:04:29:38:b8:55:64:72:39:13:97:64:
9c:77:4a:7a:84:2e:c4:0f:05:6c:90:72:d4:47:0c:c8:fb:84:
bf:f1:80:67:4d:c0:e4:e1:d8:6e:0c:9f:67:e3:94:25:a5:55:
2d:d2:d7:34:81:b8:d5:12:78:a1:22:11:20:62:81:c9:65:e3:
63:6d:c0:7c:52:5a:03:45:ce:19:9d:71:b1:ad:14:e8:9c:8e:
0c:19:e4:ce:cf:c8:4b:eb:80:50:61:01:3b:c6:ab:5e:4f:63:
bd:c2:0b:64:d9:e7:e9:f9:f2:37:92:16:c2:22:59:69:58:e8:
61:37:a1:96:fb:c6:48:aa:b8:b9:81:65:f2:ce:c1:93:ac:a0:
f6:82:1c:97:13:e9:04:00:a6:59:df:82:d9:98:a9:c1:fb:fe:
30:b3:32:b9:d7:5f:98:71:90:01:38:c6:0b:b4:35:a9:2d:18:
9b:b5:37:48:2a:09:16:a1:6a:c0:76:93:5f:7c:94:ce:94:c3:
02:8a:1d:37
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAZjcSio6KH1Hkuirc9Sc1UKiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUwODI0MTMzNTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTEyMGIxMmM2OTZiNTA0MjExOGVjMjA0NGVhOWY0ZWExZmEzMDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV3u5kxRxHZ/LxN1tigQBfcQr2E8
vpqGSo2mBl2zpg2j4x0lMq7P1DxjizwWeXZfD70n/kLqnjcv1Br8SSND6P1pZEQe
830mEwqeM1fIK7XMO7AMLlN+0f/vOLVZ8uasNhhozTPPTKjlX/RZYBAEwiGMPo5Z
4K9nQ3lr54mxfK8PATcqBSR4D7XQdeGUX3rTd3m7dUTorftmk1zmnrvw7WfxCsOB
98MYNlVc3qhQ5YqyaA2xNAh3eG6BPPCgwoQRI4TIQc/01+sHlv5VGo3dKCiVaXQI
V9gidxmAaYRJZCQZJLm964/q1z2c8H8gRulNQWd6XBK+GN1ZyQHLQUePywIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFBESCxLGlrUEIRjsIETqn06h+jCSMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvRVJJTEVzYVd0UVFoR093Z1JPcWZUcUg2TUpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAAjA0AwcAKgyaQIRw
AwcEKgyaQIqAAwYAKgyaQJYDBgAqDJpAmAMHACoMmkQAzwMHACoOfUGIiDANBgkq
hkiG9w0BAQsFAAOCAQEAaUVD8dsVBUaNO//41YBdAFwGFoWPzprQNyL5KjSBtpDJ
PlI/1HEBBR+0gnIcjQUgGy3ArUeSrfTY6zyqtgQpOLhVZHI5E5dknHdKeoQuxA8F
bJBy1EcMyPuEv/GAZ03A5OHYbgyfZ+OUJaVVLdLXNIG41RJ4oSIRIGKByWXjY23A
fFJaA0XOGZ1xsa0U6JyODBnkzs/IS+uAUGEBO8arXk9jvcILZNnn6fnyN5IWwiJZ
aVjoYTehlvvGSKq4uYFl8s7Bk6yg9oIclxPpBACmWd+C2Zipwfv+MLMyuddfmHGQ
ATjGC7Q1qS0Ym7U3SCoJFqFqwHaTX3yUzpTDAoodNw==
-----END CERTIFICATE-----
Generated at Sat Sep 6 08:24:41 2025 by rpki-client