Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/er2u2A5fxwDwKk8I_aFrua5mW3E.roa
File: er2u2A5fxwDwKk8I_aFrua5mW3E.roa (raw, json)
Hash identifier: 87VZDZOisyVCTghwIF8VORXxqHspRvJIpu824m7zNSY=
Subject key identifier: 7A:BD:AE:D8:0E:5F:C7:00:F0:2A:4F:08:FD:A1:6B:B9:AE:66:5B:71
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D99B09A4EDD9AFC97B095C697D5A92C78
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/er2u2A5fxwDwKk8I_aFrua5mW3E.roa
Signing time: Fri 17 Apr 2026 04:26:20 +0000
ROA not before: Fri 17 Apr 2026 04:26:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 91.208.61.0/24 maxlen: 24
212.192.16.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:b0:9a:4e:dd:9a:fc:97:b0:95:c6:97:d5:a9:2c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 17 04:26:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7abdaed80e5fc700f02a4f08fda16bb9ae665b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:b1:1b:5a:3e:27:35:ae:e7:70:de:ac:2f:
1e:17:a3:e9:a2:df:6f:9c:c1:b4:f2:a3:83:ea:42:
42:14:1e:88:91:79:fb:0b:01:2f:66:6c:9a:5c:6e:
76:e8:22:34:dc:f6:2e:7d:8a:27:5c:6e:7d:d4:f0:
5e:dc:2a:b0:6a:b6:f4:2a:7a:ba:cf:b6:fa:df:d0:
cf:c1:68:22:4f:2e:6d:f6:e5:d6:6d:3f:c2:81:28:
45:42:cb:ed:31:46:e3:9d:7d:a7:2a:6d:20:88:88:
3f:44:b2:85:07:ec:8c:88:6c:80:17:46:7a:50:d3:
42:dd:1a:d3:92:f5:8d:e9:51:ea:24:60:29:64:47:
7d:c9:f0:08:71:86:10:f4:f5:25:c7:59:95:4b:cf:
53:7b:c0:da:3b:39:80:ae:77:53:6f:af:bc:76:b2:
7c:5f:92:5a:60:25:05:98:9a:20:51:51:83:20:b2:
65:c3:87:12:d1:5b:e1:96:a9:75:a0:79:10:ec:3e:
ba:7e:fd:31:7f:71:3e:8a:51:e7:00:a7:db:eb:85:
e5:f6:f5:47:b8:7b:5f:4a:ad:04:cd:8a:35:62:99:
03:c1:c7:18:f3:23:fc:f4:a5:18:c7:49:0c:f1:1b:
81:a9:28:4b:a6:78:ac:a9:14:3c:ff:25:0f:50:3d:
a5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BD:AE:D8:0E:5F:C7:00:F0:2A:4F:08:FD:A1:6B:B9:AE:66:5B:71
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/er2u2A5fxwDwKk8I_aFrua5mW3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.61.0/24
212.192.16.0/23
Signature Algorithm: sha256WithRSAEncryption
34:06:66:4d:9c:34:69:22:cb:11:1b:68:05:b3:fd:40:00:cc:
e2:fe:64:fa:fa:2e:db:f9:a0:79:62:e2:71:90:13:3e:ab:ab:
0c:15:bc:b3:58:29:4c:fa:22:fe:bb:b9:e1:89:e0:5c:a3:c8:
6a:12:5f:3c:d3:48:ee:d1:d3:15:80:12:de:b3:d9:f7:b5:c5:
42:18:89:9f:65:fd:c2:1d:3a:e8:76:a6:2c:ea:5a:29:7b:21:
03:70:85:d5:a9:52:4c:8c:eb:f0:a8:9b:bb:7c:8e:1c:b9:14:
03:88:1c:5e:5c:69:67:92:e8:a9:7b:47:41:15:37:7a:0b:a6:
1c:d9:22:c1:fd:05:f5:52:96:86:3f:3c:a1:55:fc:70:fd:23:
d1:34:59:d1:c3:36:b4:21:61:07:40:75:f5:fa:9f:71:70:cc:
15:04:2a:09:fd:2f:9f:49:a5:4d:42:f4:6e:85:7b:69:2f:11:
e1:e4:95:ed:1f:89:73:d3:3d:7b:f6:d8:be:58:27:04:26:e3:
f1:e5:45:6b:94:3f:9e:ad:d2:d3:77:89:4e:96:ed:2c:68:72:
6c:e1:4e:be:e2:13:55:d3:58:52:c7:4e:ba:05:e8:3e:bd:60:
b5:6d:3b:9f:48:3e:61:aa:a6:ad:b7:63:59:0b:55:bd:fa:52:
93:c9:47:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:46:39 2026 by rpki-client