Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ERhvMOjcSvV4qU2K1VzDD3Pf0-4.roa
File: ERhvMOjcSvV4qU2K1VzDD3Pf0-4.roa (raw, json)
Hash identifier: 4AWyhnL13bWvfZtrnJToZZaO0nEnwzde6CMESQWfCCI=
Subject key identifier: 11:18:6F:30:E8:DC:4A:F5:78:A9:4D:8A:D5:5C:C3:0F:73:DF:D3:EE
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A15E586B6056913F759FDDE727EE981D6E
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ERhvMOjcSvV4qU2K1VzDD3Pf0-4.roa
Signing time: Wed 21 Oct 2026 12:03:35 +0000
ROA not before: Wed 21 Oct 2026 12:03:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205544
IP address blocks: 217.145.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:58:6b:60:56:91:3f:75:9f:dd:e7:27:ee:98:1d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Oct 21 12:03:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11186f30e8dc4af578a94d8ad55cc30f73dfd3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:d3:40:16:22:57:3c:67:f0:3f:09:cc:cf:
ba:e6:0f:bd:9f:d8:98:9a:82:ad:32:75:55:fd:46:
66:0b:b1:b3:c8:cc:d0:d5:0e:5c:ed:20:6e:7a:c8:
76:b7:98:ed:80:36:96:f7:89:4b:f6:e1:38:b7:c2:
1b:19:1c:45:29:39:83:7b:da:ce:c4:a9:de:fe:e0:
91:e9:bf:f4:ea:07:2f:9a:df:fb:d3:d2:06:98:24:
a2:37:ce:50:fe:8f:b1:59:49:3c:74:d8:50:4d:1e:
52:c7:9e:33:c0:83:94:8a:c2:f1:ea:ab:c5:50:5a:
5f:0b:e2:76:a9:d8:3b:84:40:fb:0c:76:3c:82:8c:
05:09:c6:77:d4:a6:fb:ec:fa:42:a8:b8:ca:fd:db:
7d:79:92:83:0d:ff:f4:23:ca:a7:f7:4e:3f:c7:5c:
6c:1d:6c:91:45:e5:40:3f:8a:67:31:58:b5:81:c0:
f8:b4:14:57:e8:88:71:cb:e8:c7:e1:34:fe:6d:1e:
14:f3:a3:19:32:f9:b8:9b:35:d7:80:97:44:9a:38:
95:46:95:c2:52:9e:f3:ce:79:ff:31:b2:78:02:f1:
19:19:5b:8f:f9:97:71:a4:39:9e:86:b9:6d:41:f6:
8f:66:27:ba:02:73:88:59:b8:30:67:94:ab:c4:c0:
2b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:18:6F:30:E8:DC:4A:F5:78:A9:4D:8A:D5:5C:C3:0F:73:DF:D3:EE
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ERhvMOjcSvV4qU2K1VzDD3Pf0-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.145.65.0/24
Signature Algorithm: sha256WithRSAEncryption
42:b0:77:7b:b9:fe:f9:c7:22:c2:2c:cf:67:fc:5e:83:0e:14:
ff:0a:f2:63:ff:41:09:5e:55:4a:e1:11:c5:1a:8d:0c:08:65:
30:4b:4a:2d:c5:fc:5f:95:89:38:8c:45:ee:04:d6:6f:0c:00:
cf:93:12:22:2e:5b:33:1b:66:7e:d5:10:7f:c9:20:bf:a7:1f:
f0:7f:ee:3a:e2:31:3f:5e:14:6a:fc:7b:52:35:3d:b0:38:62:
e3:11:e9:b2:d5:85:cb:2d:90:6f:fe:ee:d5:da:ce:27:2d:8e:
5a:44:73:f0:dd:be:c1:ae:37:e1:e2:06:83:c9:18:bd:12:8c:
e9:c2:11:ed:84:4c:b7:9b:a7:6c:a1:bc:cc:d8:30:69:84:f0:
57:bb:82:f1:bc:0b:2f:d4:59:f0:09:84:8f:60:0e:95:34:8a:
2b:d7:af:c4:f1:93:14:f2:ec:99:e0:c3:1f:75:41:45:c8:d9:
79:7c:30:64:e1:4a:fa:6b:0c:0c:61:3d:03:be:b1:43:c3:f2:
f5:87:17:17:55:e6:1d:de:a8:ca:68:8a:97:c3:b6:f4:fd:74:
b4:a6:cc:74:70:b1:19:1d:fb:b7:18:45:46:70:48:e4:90:c5:
3c:eb:06:fa:31:64:17:fa:22:94:b6:a3:a9:90:63:b6:86:0f:
59:b2:d5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:52:48 2026 by rpki-client