Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/ERqoMB1EdTu-WuTzFfa9zq0xENU.roa
File: ERqoMB1EdTu-WuTzFfa9zq0xENU.roa (raw, json)
Hash identifier: JBCpcS00xzJTn3hkHBlQy1mjAraFDf4IIBmEBDuwd58=
Subject key identifier: 11:1A:A8:30:1D:44:75:3B:BE:5A:E4:F3:15:F6:BD:CE:AD:31:10:D5
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 019F22CCA1A6C033B50EDBC43B1F82734191
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/ERqoMB1EdTu-WuTzFfa9zq0xENU.roa
Signing time: Thu 02 Jul 2026 12:27:43 +0000
ROA not before: Thu 02 Jul 2026 12:27:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 2.59.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:cc:a1:a6:c0:33:b5:0e:db:c4:3b:1f:82:73:41:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Jul 2 12:27:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=111aa8301d44753bbe5ae4f315f6bdcead3110d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:23:12:b1:51:2b:aa:66:bd:0b:50:0e:b3:d9:
2b:fa:ee:82:85:99:78:93:66:6d:02:a9:f5:bc:95:
70:be:89:fe:c4:cb:85:ed:55:b6:16:21:2e:c0:f4:
d7:c0:ab:90:55:92:44:44:79:89:ea:20:9f:22:96:
76:eb:18:4e:60:dd:fc:83:6b:b0:9d:96:00:54:25:
de:a6:c0:97:e5:f1:bb:7f:36:d7:94:d5:3f:0b:98:
f8:01:c9:f7:e6:59:3a:06:fb:4d:75:13:4a:b9:32:
b7:91:d1:bd:14:01:4a:9a:6b:5c:4c:a0:7c:60:e5:
3a:84:84:4e:f0:76:fc:2a:52:1c:64:c6:06:1a:e9:
86:b0:2a:e9:d1:b1:83:a5:1b:0e:92:d1:66:c0:2d:
ae:0e:56:5a:e5:15:e5:cc:dc:09:dc:26:50:82:e1:
72:cb:bf:8f:f9:a9:5d:df:bc:fe:ad:21:e9:ac:2e:
71:13:c6:1b:66:5f:17:fd:e1:6e:b0:36:6b:c6:5b:
cc:90:1f:70:d8:c3:16:64:19:a8:70:4a:b4:76:95:
16:15:83:78:70:c6:c4:8e:05:11:19:70:0d:9e:c1:
87:fc:c1:7a:ef:b6:84:53:d1:16:49:7a:e6:cc:fe:
e9:47:93:d7:5a:83:06:b5:9d:8e:5a:65:9d:a5:73:
49:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1A:A8:30:1D:44:75:3B:BE:5A:E4:F3:15:F6:BD:CE:AD:31:10:D5
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/ERqoMB1EdTu-WuTzFfa9zq0xENU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.117.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:fc:2d:02:8a:52:20:bd:68:2b:1a:2c:90:6f:1d:53:18:fb:
a7:f2:31:d8:d0:58:b2:b6:d3:98:a1:c3:c6:a1:07:6b:62:ab:
12:e4:e3:e8:54:d6:f2:20:df:c2:00:ed:ce:e6:c7:43:28:48:
a5:22:7a:07:a9:88:38:4c:b1:7d:12:9d:5b:e7:7a:7a:a6:eb:
37:64:d0:0c:f3:b6:cc:17:2b:2f:88:41:63:68:7e:06:8f:70:
76:2b:80:dd:f2:f5:a6:04:83:41:78:24:ef:3c:91:3c:d5:22:
e3:c3:91:a1:70:b8:ca:30:f2:c7:25:6f:90:90:cf:68:45:c9:
b6:11:c3:01:86:4c:14:c3:2b:70:fe:b1:61:ba:b0:64:b6:6c:
ca:40:14:d5:ad:a9:95:54:c5:57:fb:df:cc:60:96:44:d1:3e:
59:81:18:a9:5f:1d:f2:ab:a1:56:e6:ac:01:1a:6d:39:f9:17:
81:1d:e3:dc:93:51:f0:51:44:08:06:7e:12:7d:2c:db:0a:3e:
87:a9:c2:48:30:53:09:3b:8f:98:2f:bd:a4:1a:0f:c9:b8:68:
74:37:3d:82:98:d3:57:54:3b:0c:56:37:6f:c9:bc:6d:48:bf:
ca:8f:6c:3d:6b:a5:6d:1f:4d:dd:5e:a8:8b:6f:0a:67:ee:73:
f2:43:2f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:31:04 2026 by rpki-client