Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/TN5P9w7h4Kjz55hfkF-A64fRWa0.roa
File: TN5P9w7h4Kjz55hfkF-A64fRWa0.roa (raw, json)
Hash identifier: +OBS1l7R4y6HHpr9OOFlgfqW/zx4t3/pMaE6QtHti/0=
Subject key identifier: 4C:DE:4F:F7:0E:E1:E0:A8:F3:E7:98:5F:90:5F:80:EB:87:D1:59:AD
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 01A05DB627958880A4F346383B7E0C44108B
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/TN5P9w7h4Kjz55hfkF-A64fRWa0.roa
Signing time: Tue 01 Sep 2026 16:03:33 +0000
ROA not before: Tue 01 Sep 2026 16:03:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51765
IP address blocks: 164.138.0.0/22 maxlen: 22
164.138.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:b6:27:95:88:80:a4:f3:46:38:3b:7e:0c:44:10:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Sep 1 16:03:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cde4ff70ee1e0a8f3e7985f905f80eb87d159ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:87:be:89:37:db:ee:72:31:dc:cd:ec:41:c7:
b6:3e:bf:a9:80:6c:03:d1:b1:89:77:79:3a:a1:cb:
2a:5a:a2:64:16:93:18:c9:9b:76:97:b8:fc:14:7e:
b3:99:3b:3d:3d:ae:a0:33:d5:bb:72:dc:e9:43:9b:
bc:46:a0:6b:90:06:c4:ea:2f:f8:e2:ae:fc:53:56:
52:ca:9d:67:b6:a3:29:aa:4b:ee:8e:fb:c4:2f:d4:
15:f1:8d:4a:67:90:fd:76:a1:6a:d1:c3:7e:e6:5b:
3f:5c:f5:3e:49:b8:0d:1d:ae:2a:b8:8a:da:c3:09:
5a:e7:c2:26:91:ec:a2:56:3c:6f:b1:fd:90:bb:b7:
45:00:a3:d8:24:5a:17:90:a7:0b:a3:30:58:87:18:
f8:7d:0f:0b:18:b5:fa:f2:7d:5f:da:41:57:85:f4:
5c:ca:33:6d:a4:b3:48:7b:0e:ba:a5:58:19:b2:dd:
2d:26:8f:e5:59:f6:66:80:89:dd:e2:6d:02:bd:28:
25:91:d4:b9:c6:3e:d7:bd:ff:d5:49:38:c1:8a:e1:
b5:00:6b:69:bc:63:c5:4f:30:29:02:6a:e2:6b:21:
47:43:f2:1e:ca:f6:71:bd:92:4f:dc:bf:c1:fb:a3:
89:3a:23:2c:ea:8d:83:b1:59:76:82:a7:55:75:50:
3f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DE:4F:F7:0E:E1:E0:A8:F3:E7:98:5F:90:5F:80:EB:87:D1:59:AD
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/TN5P9w7h4Kjz55hfkF-A64fRWa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.0.0/22
164.138.12.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:83:48:bf:5a:dc:c4:e7:88:53:a3:13:18:f6:bd:24:9c:e5:
35:f8:62:3b:6a:95:23:8a:d8:f2:e5:7a:25:82:7d:a1:44:10:
38:c6:6d:47:fa:a8:50:d2:ad:2d:a4:11:88:1b:4b:13:40:4d:
ca:96:a9:a9:3a:1f:f5:20:7f:a2:d8:4e:3c:4b:a9:f2:23:ea:
c9:53:f1:7c:92:c0:5f:5b:9f:f3:21:74:ff:dc:24:25:96:9c:
87:ca:82:b4:59:73:00:4e:68:cb:a3:53:c6:ed:c7:78:f1:c9:
14:83:0c:6d:43:d4:ce:bd:b0:b5:2f:9b:10:7a:68:50:70:0d:
68:25:f8:11:57:ff:c2:8f:bc:bf:89:b1:43:88:ed:2b:b9:74:
02:88:b3:2d:ff:0e:0d:84:50:dc:c6:f7:c3:e4:ff:8d:d2:ba:
31:c0:ac:62:2b:50:b4:22:21:d7:53:4c:25:04:59:0d:bc:e0:
96:38:0a:8b:0b:89:cc:8a:b7:78:f2:97:43:23:6b:d4:c9:cd:
60:9e:da:58:e4:32:64:c9:55:bb:09:40:e8:db:36:66:30:f6:
e1:20:98:fa:99:9d:21:1a:b7:11:40:a3:ee:49:43:f4:51:4f:
11:7f:d8:fc:c6:f9:2e:b9:c6:da:30:6b:30:d0:9e:4a:1b:67:
c2:20:81:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:15 2026 by rpki-client