Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/ermUONr4wbzZL81t9vT5wYBGbO0.roa
File: ermUONr4wbzZL81t9vT5wYBGbO0.roa (raw, json)
Hash identifier: Xyuzc1sAlAmu0LMYANAuH2woiq1ng2c1n+BCuzK3gRA=
Subject key identifier: 7A:B9:94:38:DA:F8:C1:BC:D9:2F:CD:6D:F6:F4:F9:C1:80:46:6C:ED
Certificate issuer: /CN=a16102e80735fec8921e9f509fc53b10e2be9505
Certificate serial: 01A0D89BA63E6E90DBC6331045E3011E049F
Authority key identifier: A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/ermUONr4wbzZL81t9vT5wYBGbO0.roa
Signing time: Fri 25 Sep 2026 12:47:54 +0000
ROA not before: Fri 25 Sep 2026 12:47:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201988
IP address blocks: 2a0e:e001::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:9b:a6:3e:6e:90:db:c6:33:10:45:e3:01:1e:04:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16102e80735fec8921e9f509fc53b10e2be9505
Validity
Not Before: Sep 25 12:47:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ab99438daf8c1bcd92fcd6df6f4f9c180466ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a1:0e:e0:bf:26:41:63:09:ee:cc:79:5c:70:
70:5a:14:30:1f:31:6a:a6:bb:5c:61:2d:d2:4b:83:
35:86:98:73:f9:6f:bd:cc:05:13:d9:0a:6d:3a:fd:
53:6a:e2:fd:39:15:14:fa:53:6d:99:13:e1:5c:45:
f9:89:95:db:b1:4f:bd:37:e4:03:5b:cb:64:38:2e:
1f:c8:53:e7:cc:1e:ed:3a:71:a6:e9:a5:4d:ae:db:
04:7f:44:a8:81:4d:59:2b:30:cd:5a:25:76:95:41:
23:70:ae:10:29:5c:18:d4:27:fb:b7:3b:d2:fb:85:
63:74:2c:ce:9f:f1:d7:74:39:8c:60:04:20:ce:70:
e6:2e:b0:8a:22:69:0a:69:66:71:b4:ae:8e:d9:00:
29:fb:5c:0a:2d:62:f9:df:33:eb:66:06:58:8a:8c:
b4:c3:95:04:17:a0:b5:68:5a:ab:25:fb:50:6a:18:
af:de:11:67:12:98:d7:bc:bc:55:35:69:e2:8c:97:
01:ce:dd:8d:50:5f:36:76:42:3d:63:ec:c3:78:64:
97:90:76:1f:c1:24:df:3a:23:3b:76:76:e9:cf:dc:
51:6d:e9:30:64:c8:06:2d:cd:88:a8:24:92:97:fe:
2a:3d:d0:ea:7b:1b:fb:c4:bd:7a:16:37:3b:d2:10:
0c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B9:94:38:DA:F8:C1:BC:D9:2F:CD:6D:F6:F4:F9:C1:80:46:6C:ED
X509v3 Authority Key Identifier:
keyid:A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/ermUONr4wbzZL81t9vT5wYBGbO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e001::/44
Signature Algorithm: sha256WithRSAEncryption
b0:c8:a8:ab:82:c9:54:3e:a4:bd:31:92:bc:54:f2:f5:82:d1:
3a:6b:f8:56:e2:02:7d:17:ae:cd:ea:03:d3:74:d6:ae:f9:14:
8f:dd:9e:d5:0d:07:60:3e:23:b0:58:1d:49:71:c2:85:fd:6f:
62:cb:6b:2c:6f:24:d8:22:94:ab:28:fe:c5:04:11:6b:54:ae:
3a:cf:be:e3:3b:db:fe:7c:14:de:23:91:08:c7:eb:58:59:a3:
20:c0:eb:28:3b:01:d5:c2:a7:45:42:df:74:5d:57:27:10:73:
7d:cc:1a:f1:27:fe:ec:45:79:d2:2d:d1:ca:f9:f2:0e:81:28:
ca:cf:94:35:19:d4:07:48:87:d0:0a:9c:39:b1:39:81:0c:99:
6f:18:70:1e:b2:17:a7:c2:f0:c9:a3:29:45:7e:83:73:f2:0c:
86:98:15:e5:25:69:c2:0a:a9:0c:04:7b:10:0e:75:50:1b:89:
51:de:73:e4:a7:15:59:a3:ae:f2:ad:a1:b3:85:cc:16:d2:57:
a3:19:43:4a:0c:92:ba:d8:97:8f:af:f6:6b:6b:6d:5b:5c:17:
6a:bb:85:b9:e2:48:e3:0d:6c:07:9a:26:6b:c3:b1:d1:c9:62:
56:45:de:a0:59:06:06:26:e9:80:f7:b8:19:55:42:6e:d1:46:
a2:83:72:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:23:27 2026 by rpki-client