Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/er_rwL0usAKGdp1cd-4r_3wkqgM.roa
File: er_rwL0usAKGdp1cd-4r_3wkqgM.roa (raw, json)
Hash identifier: s0g7qH9i0RnM2iXZ8NIWx07ZOx+cLrqoxoVUT4Oh0ug=
Subject key identifier: 7A:BF:EB:C0:BD:2E:B0:02:86:76:9D:5C:77:EE:2B:FF:7C:24:AA:03
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019FA95BCFC9E6D397527BB808C0E1E0BB05
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/er_rwL0usAKGdp1cd-4r_3wkqgM.roa
Signing time: Tue 28 Jul 2026 15:33:14 +0000
ROA not before: Tue 28 Jul 2026 15:33:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198180
IP address blocks: 93.89.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:5b:cf:c9:e6:d3:97:52:7b:b8:08:c0:e1:e0:bb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jul 28 15:33:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7abfebc0bd2eb00286769d5c77ee2bff7c24aa03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:ce:4c:9c:1c:5a:fe:22:ee:bb:3f:e1:45:
34:0e:b0:33:88:9b:ac:97:c6:7b:84:22:dc:f4:d0:
a4:1d:1e:f9:9c:da:5a:98:1a:7f:1f:33:b8:1e:6c:
4e:86:7f:55:65:2d:c3:ba:cf:0d:fd:04:4d:f2:d0:
54:c5:4c:95:71:de:3d:7f:2c:16:1e:39:1b:a2:f6:
17:51:06:bd:8b:de:88:f8:29:28:d8:bd:51:c2:a6:
10:50:3b:f2:d3:6b:0c:49:f1:97:ea:ce:2a:9e:a0:
56:75:96:71:91:ac:6b:65:47:97:8c:4d:4c:32:9f:
6c:90:74:87:37:1f:f1:ea:3d:19:b2:f5:83:54:57:
8a:dc:7a:c0:f3:2c:5b:96:a6:b6:3b:2d:e5:39:12:
50:be:36:69:5a:47:eb:44:3c:07:fa:6a:a4:bf:9e:
6f:4e:9a:91:da:94:92:26:2a:d1:17:9f:51:ca:14:
e7:53:f5:46:ef:a4:34:9c:d1:12:da:5d:74:34:ba:
69:b1:3e:00:fa:7f:b2:2f:df:84:6e:9c:ce:a5:05:
88:fc:e7:35:10:ba:8c:58:98:f6:b1:ae:a4:d5:72:
0b:43:a8:76:60:5f:5d:b4:46:9c:a1:28:9a:2a:93:
28:87:b6:4a:09:13:7f:04:7f:7b:9f:1b:7c:62:4c:
6d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BF:EB:C0:BD:2E:B0:02:86:76:9D:5C:77:EE:2B:FF:7C:24:AA:03
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/er_rwL0usAKGdp1cd-4r_3wkqgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.217.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f2:6e:d1:fc:38:b9:b9:58:53:16:62:49:f8:3b:78:f4:9c:
48:f9:45:99:9f:7a:87:b0:f4:a4:1b:a5:90:4c:1f:de:98:0c:
30:55:06:b0:ef:4a:7d:be:75:d3:32:a2:2a:5f:e8:a9:38:ea:
90:11:d4:ac:bc:a8:5d:cd:17:ec:7e:47:f6:3d:9d:83:6c:8c:
33:60:33:b8:57:0b:f4:48:6e:0b:83:db:f8:b0:7a:e8:2e:d9:
9f:33:75:2e:00:24:69:b4:6a:2a:d4:1e:14:34:1d:5d:e6:99:
ef:7d:40:32:32:f6:14:ab:a7:b7:e1:cf:59:9b:11:3e:6e:39:
e9:3b:f4:9b:ca:83:d5:ef:1f:44:98:ec:32:16:39:fe:85:31:
f2:e0:5c:ba:d4:40:04:28:52:43:22:9b:16:f5:44:c2:96:12:
9a:05:9a:0d:26:4a:ab:b1:44:36:b0:e0:91:87:68:41:7f:60:
98:61:08:47:14:dc:44:b8:89:1e:d1:e5:3e:1d:60:de:b0:34:
d5:97:a6:a6:56:86:3f:2a:ce:6e:c0:a2:49:fc:a8:ed:23:05:
31:9a:a0:27:25:22:a1:2b:e3:29:aa:83:9e:29:4a:34:96:ae:
8f:7e:c7:f3:c2:bf:51:10:db:91:7c:55:20:12:25:03:cd:87:
1e:1f:5c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:19:07 2026 by rpki-client