Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/erW8LenmE07YpIlq2UiaPLbTHRY.roa
File: erW8LenmE07YpIlq2UiaPLbTHRY.roa (raw, json)
Hash identifier: ryAYbA45+mCp7UF8NMvRhWhwCEVlA2MdeLlfo2S/HmM=
Subject key identifier: 7A:B5:BC:2D:E9:E6:13:4E:D8:A4:89:6A:D9:48:9A:3C:B6:D3:1D:16
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 01A18768FEB9E5308995C9A7F927E55E700F
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/erW8LenmE07YpIlq2UiaPLbTHRY.roa
Signing time: Thu 29 Oct 2026 11:26:07 +0000
ROA not before: Thu 29 Oct 2026 11:26:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60404
IP address blocks: 91.204.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:68:fe:b9:e5:30:89:95:c9:a7:f9:27:e5:5e:70:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Oct 29 11:26:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ab5bc2de9e6134ed8a4896ad9489a3cb6d31d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:2f:a0:9b:f0:db:91:2f:d5:b9:4d:54:2f:
94:0a:25:46:de:fc:f0:ac:81:ed:91:8d:4e:26:a1:
b7:cf:d2:6a:79:44:7c:f1:3a:d4:d6:79:78:8c:af:
a0:ea:b5:38:2e:89:12:bf:01:90:40:15:39:08:bc:
b1:30:e6:eb:02:99:02:5a:44:bd:f3:b6:93:f1:28:
73:34:38:dd:89:8e:2c:5e:a0:bd:7f:cc:11:5a:71:
18:10:ee:f0:8f:c8:73:2a:0e:59:ca:a8:a2:85:6f:
97:79:3c:ff:1e:ba:55:3a:39:49:c9:6e:23:56:13:
43:87:86:55:24:11:48:11:c0:23:5c:2d:79:6d:86:
5f:15:cf:0d:24:f4:79:a6:6e:db:a9:89:36:d2:3c:
1b:d1:1a:40:ac:4d:38:a5:09:ba:49:26:dc:f8:9c:
67:6e:e3:b8:fe:10:1b:a9:78:f7:72:37:48:a6:23:
cc:38:84:00:b4:27:9f:fb:8b:d0:77:1f:4b:81:c6:
5a:32:51:36:cf:96:dc:ac:fc:af:05:c2:f5:ce:62:
ff:84:ba:29:f9:4b:32:7f:24:7d:15:01:9f:c2:eb:
20:a3:8d:45:e6:f1:c6:06:22:eb:df:88:87:96:f7:
02:a9:70:f6:18:5f:75:52:48:df:cc:f5:65:97:45:
76:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B5:BC:2D:E9:E6:13:4E:D8:A4:89:6A:D9:48:9A:3C:B6:D3:1D:16
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/erW8LenmE07YpIlq2UiaPLbTHRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.73.0/24
Signature Algorithm: sha256WithRSAEncryption
09:fa:26:0f:4f:ac:51:5e:be:da:2d:36:88:bc:94:b3:46:eb:
a3:7f:2c:a9:9d:0c:7c:99:68:e8:2f:b0:c7:45:23:c8:3f:30:
09:50:32:bb:fc:97:b7:cb:d9:50:55:d7:76:0e:02:ae:bb:55:
38:d2:4b:53:80:a4:3b:35:3c:55:c5:7b:40:27:5b:bd:e6:da:
dd:8c:4b:b0:ab:d1:dd:56:23:32:fb:a0:92:b5:a1:2f:0e:22:
77:0d:ed:9b:53:a9:12:0d:bd:b7:1c:16:41:b0:89:33:61:23:
09:54:25:4a:86:8b:0b:bc:d9:a6:83:ca:e7:5a:9d:8f:3f:38:
f4:2c:2f:98:da:15:f1:24:20:56:1b:b2:29:b0:c0:49:eb:df:
5c:6e:0f:61:11:46:4d:9f:3a:82:1e:f0:d8:9e:0d:2f:ab:3c:
2d:fe:6d:f9:ec:c1:bd:0a:fb:4b:d1:20:23:81:a5:ff:ea:f8:
a5:d6:92:a5:73:13:0c:9e:a1:a9:da:f5:65:79:9f:47:d1:db:
9a:07:86:7d:be:43:2c:0b:79:17:13:93:38:55:11:c6:23:6e:
22:1a:29:ed:bf:e1:76:1c:87:f7:5f:d3:3c:a5:c9:65:6d:cc:
1c:f5:32:bd:f6:73:f5:db:2c:be:be:0f:36:97:8f:03:f0:6a:
4d:94:2f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:08:17 2026 by rpki-client