Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/RTRTE9xKUc0wvrWSoT5TmS_0ono.roa
File: RTRTE9xKUc0wvrWSoT5TmS_0ono.roa (raw, json)
Hash identifier: K3MbfdP7df/nyXsDcN13J2oQ2i4nh5PqKxDwz2z01xU=
Subject key identifier: 45:34:53:13:DC:4A:51:CD:30:BE:B5:92:A1:3E:53:99:2F:F4:A2:7A
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 01A112265B23D85945738415F008D28F1A27
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/RTRTE9xKUc0wvrWSoT5TmS_0ono.roa
Signing time: Tue 06 Oct 2026 16:57:45 +0000
ROA not before: Tue 06 Oct 2026 16:57:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 164.138.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:26:5b:23:d8:59:45:73:84:15:f0:08:d2:8f:1a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Oct 6 16:57:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45345313dc4a51cd30beb592a13e53992ff4a27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:60:69:05:0b:51:3d:14:64:9d:21:85:7f:
81:8c:47:10:d1:82:cd:82:80:0a:5f:a1:6f:6d:fe:
4c:74:55:78:9c:36:01:1b:7d:7b:fa:31:c5:da:82:
cd:43:fd:e7:4e:18:a5:f2:98:2e:4f:a9:df:f7:58:
c2:91:de:cd:3a:4a:21:a9:7d:b1:39:3e:ee:d4:4a:
bf:8e:3b:97:f2:9c:b3:19:83:20:a5:77:c8:8d:99:
88:dd:71:9a:e3:94:54:5b:bd:c4:10:1c:6f:da:83:
18:7d:ef:cc:bf:c4:b8:c3:3a:40:f5:08:2a:5b:48:
91:af:71:83:79:7a:f2:99:cc:48:75:ac:65:59:9f:
e3:43:29:3b:50:93:2f:04:32:70:77:d1:d1:b7:3f:
86:67:03:b3:ef:ee:69:7a:d0:12:79:f1:f0:f2:92:
c7:fe:3d:df:ab:2f:2f:b6:d9:7d:eb:79:e6:d3:4a:
c6:0f:64:3b:b7:8a:c7:dc:f2:ed:ce:0f:82:1d:06:
1e:82:f9:00:9f:1d:95:d6:9f:3d:02:2d:ae:a6:e6:
bf:19:9a:26:42:48:a7:35:ac:00:17:34:6a:4e:38:
c4:2e:e8:2a:21:6c:62:c5:e3:5f:8c:a6:04:c2:8f:
c0:22:f0:13:3a:91:54:47:e4:30:a7:fa:91:bc:a1:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:34:53:13:DC:4A:51:CD:30:BE:B5:92:A1:3E:53:99:2F:F4:A2:7A
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/RTRTE9xKUc0wvrWSoT5TmS_0ono.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.5.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:d1:d7:e5:05:c0:fa:4c:50:d7:d8:ba:7e:a6:e3:0b:ad:0f:
1f:50:ea:d3:44:85:5a:47:f2:97:7b:ab:4a:4a:c3:e3:f2:2f:
b6:bc:e5:c0:4f:e9:b5:a6:c5:a2:29:29:e4:81:32:23:c4:1b:
10:6f:16:f5:8b:22:ed:1b:f3:64:13:40:64:6a:1a:2d:4d:05:
4d:54:8d:37:f3:6a:ef:15:da:97:b7:25:09:9d:0b:b6:12:a2:
de:63:4d:a3:08:3b:b1:ad:47:25:5b:61:d5:2c:77:e5:6d:a3:
6d:68:e5:a9:4e:eb:8a:6f:67:c2:54:41:56:ba:0e:d0:7e:b4:
00:27:d6:8c:89:e4:2f:fb:97:70:cc:23:0c:77:66:85:56:93:
83:60:32:9d:1f:7a:5c:f6:b0:c5:2b:ec:b5:e5:23:3e:3d:14:
5c:af:3d:4c:64:97:21:77:b7:90:a1:ee:e6:da:b2:99:59:9f:
e9:cd:d5:89:99:88:22:a8:0a:84:53:f7:70:b7:36:e6:8b:10:
5e:35:bf:ef:41:13:26:eb:3f:04:cf:9d:26:f7:62:e2:d4:30:
8c:47:60:af:ee:1d:29:f5:2f:99:e6:9a:8c:f5:fa:60:e0:fd:
b0:51:3d:29:81:7e:4b:d1:99:6d:9d:59:86:4c:7e:38:be:f4:
9d:17:0f:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaESJlsj2FlFc4QV8AjSjxonMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTI1NDA0YzZkZDQ3MmYxMDAxZWQ5ZmZkZjcyNjc2MmFj
NzcwMWQwHhcNMjYxMDA2MTY1NzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTM0NTMxM2RjNGE1MWNkMzBiZWI1OTJhMTNlNTM5OTJmZjRhMjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyJgaQULUT0UZJ0hhX+BjEcQ0YLN
goAKX6Fvbf5MdFV4nDYBG317+jHF2oLNQ/3nThil8pguT6nf91jCkd7NOkohqX2x
OT7u1Eq/jjuX8pyzGYMgpXfIjZmI3XGa45RUW73EEBxv2oMYfe/Mv8S4wzpA9Qgq
W0iRr3GDeXrymcxIdaxlWZ/jQyk7UJMvBDJwd9HRtz+GZwOz7+5petASefHw8pLH
/j3fqy8vttl963nm00rGD2Q7t4rH3PLtzg+CHQYegvkAnx2V1p89Ai2upua/GZom
QkinNawAFzRqTjjELugqIWxixeNfjKYEwo/AIvATOpFUR+Qwp/qRvKEz4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEU0UxPcSlHNML61kqE+U5kv9KJ6MB8GA1UdIwQY
MBaAFBESVATG3UcvEAHtn/33JnYqx3AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYt
NmRmZTBmN2Q1M2JkLzEvUlRSVEU5eEtVYzB3dnJXU29UNVRtU18wb25vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYtNmRmZTBmN2Q1M2Jk
LzEvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApIoFMA0G
CSqGSIb3DQEBCwUAA4IBAQC90dflBcD6TFDX2Lp+puMLrQ8fUOrTRIVaR/KXe6tK
SsPj8i+2vOXAT+m1psWiKSnkgTIjxBsQbxb1iyLtG/NkE0BkahotTQVNVI0382rv
FdqXtyUJnQu2EqLeY02jCDuxrUclW2HVLHflbaNtaOWpTuuKb2fCVEFWug7QfrQA
J9aMieQv+5dwzCMMd2aFVpODYDKdH3pc9rDFK+y15SM+PRRcrz1MZJchd7eQoe7m
2rKZWZ/pzdWJmYgiqAqEU/dwtzbmixBeNb/vQRMm6z8Ez50m92Li1DCMR2Cv7h0p
9S+Z5pqM9fpg4P2wUT0pgX5L0ZltnVmGTH44vvSdFw+q
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:22 2026 by rpki-client