Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/10ERo6SBKyOy3ZrAqV4J64cZaoc.roa
File: 10ERo6SBKyOy3ZrAqV4J64cZaoc.roa (raw, json)
Hash identifier: 9+V2gj0uzFw3W0O6tMI7MXR0N7JiszNc58aN07dtg4M=
Subject key identifier: D7:41:11:A3:A4:81:2B:23:B2:DD:9A:C0:A9:5E:09:EB:87:19:6A:87
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 019FF016C25B8FD4392CDC1448710444A796
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/10ERo6SBKyOy3ZrAqV4J64cZaoc.roa
Signing time: Tue 11 Aug 2026 09:10:51 +0000
ROA not before: Tue 11 Aug 2026 09:10:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 94.231.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:16:c2:5b:8f:d4:39:2c:dc:14:48:71:04:44:a7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Aug 11 09:10:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d74111a3a4812b23b2dd9ac0a95e09eb87196a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:ac:38:38:d9:1d:70:7c:e9:59:5a:6a:19:
02:32:d4:b3:df:c8:2e:27:32:e0:24:bb:e7:f8:16:
f2:24:ae:bd:2b:3e:1f:63:53:b6:b6:5f:1e:91:98:
c6:5a:19:47:27:5b:b7:99:96:fa:dd:c5:41:38:a6:
c1:79:90:1c:4e:7b:68:56:fa:8b:53:36:94:c2:31:
fc:a6:47:73:41:d2:61:6f:d3:17:66:0c:64:10:6b:
cf:10:da:f4:99:9b:2b:3f:2e:ec:5b:81:ca:1c:39:
b1:6b:73:c1:3e:fe:32:d1:d1:e2:91:ac:91:a8:5e:
f2:87:fd:1f:41:e5:13:16:de:dd:e1:b7:f6:07:b2:
7f:10:dd:8f:f9:23:f1:5e:d4:f6:d6:23:8a:37:bc:
c6:84:ba:58:15:a7:8e:0a:ca:99:6c:17:d8:99:45:
97:01:a0:c2:78:39:48:7b:ac:a0:53:d2:ae:25:02:
10:b9:be:c3:c8:a1:de:ce:5d:09:0a:d7:3e:6a:8e:
82:dd:88:81:f6:9a:07:15:4d:23:15:e6:0d:35:62:
7d:8c:09:0d:70:e3:64:e8:f8:81:4f:03:d5:4f:01:
f3:a6:e4:88:73:5d:16:30:fd:58:c5:af:b7:72:e0:
9e:6d:0c:f2:ed:2b:84:5d:81:4f:9f:32:f5:ee:e7:
45:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:41:11:A3:A4:81:2B:23:B2:DD:9A:C0:A9:5E:09:EB:87:19:6A:87
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/10ERo6SBKyOy3ZrAqV4J64cZaoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.230.0/24
Signature Algorithm: sha256WithRSAEncryption
84:dc:e5:19:02:2f:7a:b3:ba:d0:3d:63:03:e3:7b:da:b5:61:
14:4c:b9:a7:37:8c:11:c5:15:87:e5:81:c1:8d:1c:74:2c:25:
9f:bb:10:9c:e2:df:0c:ed:bc:5f:43:04:f9:b2:a9:e5:d0:4f:
62:18:6f:d1:d8:65:b1:67:bd:4c:f9:45:10:24:48:21:41:40:
4a:46:82:7a:fc:ce:70:48:70:16:50:38:c8:7d:ac:44:c4:2d:
a2:29:cc:3f:63:0d:ba:9a:61:3c:07:24:7f:8a:98:bd:64:e5:
c7:69:70:be:a2:fe:4d:81:4a:c9:9d:cb:13:46:87:40:86:29:
3f:bd:68:9b:b3:af:0b:f7:c0:65:90:b6:2b:69:b1:23:74:d4:
05:8e:ee:98:94:46:52:d1:e0:ed:19:57:1d:34:f7:89:4a:a1:
e4:98:6d:55:61:a6:8c:70:87:04:7d:59:6e:47:fe:4d:e7:fd:
23:26:bb:ea:2e:24:bd:a6:4d:6e:59:69:f9:0b:a9:95:1d:bb:
44:35:f4:02:5f:3c:4a:16:7f:ab:1a:ee:95:5e:6b:0c:6f:c2:
4a:ac:ec:55:a6:bb:28:b3:c1:a6:85:dd:55:5a:36:e6:e2:0f:
bc:b7:4b:95:b3:bf:62:56:6f:b1:bb:ae:77:57:53:cb:2d:27:
47:94:70:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:10:41 2026 by rpki-client