Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/9aoZjeP82sIrz0suU7b3xGsNc6I.roa
File: 9aoZjeP82sIrz0suU7b3xGsNc6I.roa (raw, json)
Hash identifier: 9awhXlx1E7KdK8ach9rj/A1Y4XfGeb5QIQogGD1J5eY=
Subject key identifier: F5:AA:19:8D:E3:FC:DA:C2:2B:CF:4B:2E:53:B6:F7:C4:6B:0D:73:A2
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 019FF9A1626921A56CDAE4D8B4A05E5AE787
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/9aoZjeP82sIrz0suU7b3xGsNc6I.roa
Signing time: Thu 13 Aug 2026 05:38:51 +0000
ROA not before: Thu 13 Aug 2026 05:38:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 164.138.0.0/20 maxlen: 32
195.13.36.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:a1:62:69:21:a5:6c:da:e4:d8:b4:a0:5e:5a:e7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Aug 13 05:38:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5aa198de3fcdac22bcf4b2e53b6f7c46b0d73a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:db:59:6f:96:1b:70:a0:d7:05:a4:6d:1f:
97:2e:19:4b:a7:26:07:11:d9:02:47:0e:9b:03:05:
e7:a7:a2:3b:af:fb:41:c8:f4:a6:94:fe:3e:17:d7:
1d:91:b1:83:7e:b9:e3:4c:ef:0d:1a:ec:fa:ab:8d:
ce:32:f8:e9:83:d8:85:5e:f3:fd:87:40:dd:ae:03:
5c:7a:1a:9d:13:30:0f:b8:e0:c9:8f:f9:54:cc:37:
45:d7:32:0a:8f:a5:fd:13:ef:3a:2d:0a:1e:a6:5e:
65:2c:86:06:09:91:7c:cb:c1:98:9d:40:a5:5a:45:
cc:3e:50:88:f6:be:24:7f:78:8b:e7:d9:bb:23:6b:
9c:ef:8d:c8:b2:0e:c7:da:92:12:5c:86:f8:fa:3a:
86:68:59:15:8f:2b:4b:e8:4c:6d:ae:c9:a9:2f:d8:
58:79:e4:1d:ae:c9:49:e2:15:34:09:a3:a2:cd:4f:
89:d1:67:79:95:21:68:40:76:dd:42:f8:e0:10:66:
47:7a:31:f6:bf:97:8b:d1:35:da:b5:6e:22:16:9e:
dd:cc:6e:67:dc:94:00:08:9a:7b:29:74:a8:0f:1a:
79:5a:ee:a5:c2:cc:a5:19:5e:39:70:2d:c5:53:a6:
5b:aa:a7:c5:72:7a:56:9e:41:b9:fb:33:46:84:fa:
d0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AA:19:8D:E3:FC:DA:C2:2B:CF:4B:2E:53:B6:F7:C4:6B:0D:73:A2
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/9aoZjeP82sIrz0suU7b3xGsNc6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.0.0/20
195.13.36.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:61:7d:47:f7:82:09:46:46:c2:2c:8b:c8:03:87:31:df:8d:
04:56:0f:c1:10:fb:f8:2f:6b:a3:dc:a1:1a:07:0a:48:75:d1:
35:b5:df:0f:38:1f:01:2e:8f:b5:10:9f:20:fe:db:0a:18:30:
d9:b9:64:39:18:e9:04:1f:42:67:72:53:f7:08:a1:b5:37:4c:
69:d6:6a:d2:5e:11:ff:8a:70:53:c2:2c:af:04:82:30:4c:93:
47:95:b9:67:82:23:1e:7e:34:50:4b:a8:c2:df:96:8b:2d:1c:
d5:9e:8a:04:9b:58:79:01:9b:a8:26:2e:ed:66:d2:e5:88:0d:
14:1e:db:ac:56:9c:c4:58:60:ad:fd:c7:3d:8c:e5:85:d3:d8:
9c:bd:f1:63:6f:14:11:1f:ca:73:dd:96:d0:50:7c:25:fd:1b:
33:5f:7c:d3:9f:9d:bb:d1:83:84:fc:56:b0:00:0d:cd:4b:1e:
a7:e0:00:b1:bb:aa:82:97:aa:00:28:26:a8:f6:ae:df:7d:e6:
a1:79:53:a5:b0:91:2b:d1:cd:fd:af:66:17:4d:f0:87:c3:26:
7b:8e:4e:ba:ed:0a:1d:3d:6d:dc:5c:7e:b0:27:0d:bf:e1:9a:
68:7c:37:92:99:ce:9f:8e:21:26:d9:f2:6d:95:81:ae:74:01:
30:6f:b7:ef
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/5oWJpIaVs2uTYtKBeWueHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTI1NDA0YzZkZDQ3MmYxMDAxZWQ5ZmZkZjcyNjc2MmFj
NzcwMWQwHhcNMjYwODEzMDUzODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWFhMTk4ZGUzZmNkYWMyMmJjZjRiMmU1M2I2ZjdjNDZiMGQ3M2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPHbWW+WG3Cg1wWkbR+XLhlLpyYH
EdkCRw6bAwXnp6I7r/tByPSmlP4+F9cdkbGDfrnjTO8NGuz6q43OMvjpg9iFXvP9
h0DdrgNcehqdEzAPuODJj/lUzDdF1zIKj6X9E+86LQoepl5lLIYGCZF8y8GYnUCl
WkXMPlCI9r4kf3iL59m7I2uc743Isg7H2pISXIb4+jqGaFkVjytL6ExtrsmpL9hY
eeQdrslJ4hU0CaOizU+J0Wd5lSFoQHbdQvjgEGZHejH2v5eL0TXatW4iFp7dzG5n
3JQACJp7KXSoDxp5Wu6lwsylGV45cC3FU6ZbqqfFcnpWnkG5+zNGhPrQQwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPWqGY3j/NrCK89LLlO298RrDXOiMB8GA1UdIwQY
MBaAFBESVATG3UcvEAHtn/33JnYqx3AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYt
NmRmZTBmN2Q1M2JkLzEvOWFvWmplUDgyc0lyejBzdVU3YjN4R3NOYzZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYtNmRmZTBmN2Q1M2Jk
LzEvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEpIoAAwQA
ww0kMA0GCSqGSIb3DQEBCwUAA4IBAQB/YX1H94IJRkbCLIvIA4cx340EVg/BEPv4
L2uj3KEaBwpIddE1td8POB8BLo+1EJ8g/tsKGDDZuWQ5GOkEH0JnclP3CKG1N0xp
1mrSXhH/inBTwiyvBIIwTJNHlblngiMefjRQS6jC35aLLRzVnooEm1h5AZuoJi7t
ZtLliA0UHtusVpzEWGCt/cc9jOWF09icvfFjbxQRH8pz3ZbQUHwl/RszX3zTn527
0YOE/FawAA3NSx6n4ACxu6qCl6oAKCao9q7ffeaheVOlsJEr0c39r2YXTfCHwyZ7
jk667QodPW3cXH6wJw2/4ZpofDeSmc6fjiEm2fJtlYGudAEwb7fv
-----END CERTIFICATE-----
Generated at Thu Aug 13 18:10:39 2026 by rpki-client