Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/7jsYQEdezNNFEcPagYJhhcxcGpw.roa
File: 7jsYQEdezNNFEcPagYJhhcxcGpw.roa (raw, json)
Hash identifier: 573FGfquEy4wMV+IC0hPQaSmWfduSjD5MRwt7ba/uAo=
Subject key identifier: EE:3B:18:40:47:5E:CC:D3:45:11:C3:DA:81:82:61:85:CC:5C:1A:9C
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 01A1010C602D8D7111B70EEC5D8ED55CD4BC
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/7jsYQEdezNNFEcPagYJhhcxcGpw.roa
Signing time: Sat 03 Oct 2026 09:15:50 +0000
ROA not before: Sat 03 Oct 2026 09:15:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206715
IP address blocks: 92.242.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:0c:60:2d:8d:71:11:b7:0e:ec:5d:8e:d5:5c:d4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Oct 3 09:15:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee3b1840475eccd34511c3da81826185cc5c1a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:c0:ad:f9:20:3f:87:62:93:3e:d8:34:84:
55:2f:df:93:13:15:2a:d9:f8:01:09:b8:d7:e4:b2:
4b:30:18:a3:94:e0:b7:8e:a4:9c:74:94:ca:b3:d4:
1f:1d:a2:d9:d6:58:f6:ef:ed:79:11:35:be:fc:7b:
b3:6e:cb:11:5c:7a:dc:e1:6f:91:42:ab:1c:c2:0b:
53:01:90:6e:9a:e3:96:4e:0f:06:47:07:a1:06:88:
05:5b:b4:e0:1e:cb:b1:2e:f4:b1:f1:7a:81:4e:81:
46:8a:bb:74:63:35:cd:18:46:79:92:55:d1:00:26:
a7:58:c9:bd:da:60:0c:d6:4d:b0:ba:fd:50:bc:f2:
d3:44:a1:3e:df:3f:7f:d0:c3:f9:43:5b:fd:6e:d9:
ff:8a:f7:85:8e:e0:d4:72:51:7e:bf:37:4f:02:53:
7e:08:28:f7:e8:3b:b0:df:41:63:72:58:27:f5:c2:
16:be:01:49:98:88:53:ca:db:e9:16:63:a8:06:60:
72:59:f2:d7:11:27:f6:76:b5:0a:a0:54:8a:08:d5:
95:bd:91:54:d7:77:91:d1:ca:bf:b8:85:73:24:b8:
16:66:49:d3:a4:00:d9:72:be:8f:44:16:5b:2a:38:
11:2d:8b:81:99:2a:39:12:d6:3e:a7:f4:f1:09:d1:
be:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3B:18:40:47:5E:CC:D3:45:11:C3:DA:81:82:61:85:CC:5C:1A:9C
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/7jsYQEdezNNFEcPagYJhhcxcGpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.165.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:04:de:ed:05:ca:9c:f4:ad:a3:8c:1b:b2:00:26:7c:dc:de:
ca:7a:b5:de:4f:d5:d2:81:78:df:18:bd:f6:9b:6c:28:a7:16:
38:a4:11:05:d5:d0:11:50:80:a7:b2:88:9e:52:31:52:7d:dd:
d1:16:49:c2:dc:d1:bc:71:ec:42:0d:7c:6f:0f:88:e1:f9:b8:
b3:70:c1:9f:ce:1d:6f:c3:6a:de:e4:bc:7d:f2:60:b6:47:76:
a6:6d:eb:a8:66:82:cc:b9:de:07:76:01:8c:11:f2:8c:03:f1:
1c:b9:bf:4c:cd:27:5d:06:bf:be:cb:20:70:d0:87:e0:a4:8a:
6e:6b:94:cf:15:d2:21:8b:45:84:7d:51:ae:cb:30:e4:9e:52:
84:29:44:27:9b:21:61:f6:fb:80:59:06:79:7c:48:de:cf:3f:
83:9d:96:09:1b:dc:9c:b1:43:0b:b2:5e:aa:06:86:55:aa:7b:
24:a0:8a:b1:89:b3:3d:25:bb:2f:29:26:8b:6d:cc:d0:50:00:
6f:8d:a4:0f:d7:18:9c:88:2a:10:cb:b5:24:7b:33:e3:34:9e:
68:da:12:80:af:a5:7c:ec:46:80:48:b9:82:95:36:51:4d:9e:
60:bb:d2:ec:84:64:bb:5e:aa:4a:db:61:fc:c1:4c:75:4b:81:
ed:d1:e9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 12:57:49 2026 by rpki-client