Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/h5bVoNbZKQGsW8LgGTtCl0H3Y00.roa
File: h5bVoNbZKQGsW8LgGTtCl0H3Y00.roa (raw, json)
Hash identifier: VRBlLbI94nVsPflwlPeAs8oZ8WqmMAa9c7mcZdDmMr0=
Subject key identifier: 87:96:D5:A0:D6:D9:29:01:AC:5B:C2:E0:19:3B:42:97:41:F7:63:4D
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 01A1450678BBA62CEC244ABB40A0FE20D992
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/h5bVoNbZKQGsW8LgGTtCl0H3Y00.roa
Signing time: Fri 16 Oct 2026 14:03:34 +0000
ROA not before: Fri 16 Oct 2026 14:03:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 164.138.9.0/24 maxlen: 24
164.138.10.0/24 maxlen: 24
164.138.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:06:78:bb:a6:2c:ec:24:4a:bb:40:a0:fe:20:d9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Oct 16 14:03:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8796d5a0d6d92901ac5bc2e0193b429741f7634d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:43:7b:48:17:e0:6e:b4:4e:bb:c8:01:76:
f4:2f:86:23:bd:c8:bf:f8:9a:25:6a:05:33:46:76:
38:1a:e6:5f:4f:6d:fd:99:35:f1:41:a0:c0:67:16:
df:86:0d:11:27:bc:64:20:26:3b:5f:7d:49:6f:0e:
1d:a1:17:40:c3:5a:ad:4a:d7:74:c7:ce:34:c3:0c:
04:9e:af:c9:91:12:da:1e:36:42:c0:49:f6:f9:28:
55:fe:08:01:85:7c:8a:21:98:5b:a0:47:55:21:99:
fe:2f:da:97:1b:b6:0f:89:55:93:3f:c4:8b:63:25:
33:98:b7:30:07:7e:63:db:ba:b1:69:37:2c:66:1e:
a7:15:bc:bd:ea:85:b6:b7:a5:f8:25:bc:d2:aa:ab:
42:30:62:6f:67:9d:e5:99:fd:16:51:bd:a6:c5:62:
27:13:28:de:24:ea:58:f3:bc:5b:92:ec:25:48:10:
e5:3d:c7:50:db:22:bb:36:c7:df:cc:cd:ab:88:87:
3d:04:6c:eb:c1:7d:9f:2d:3b:f3:5c:af:91:05:95:
0b:3c:03:e4:dd:56:bb:52:da:a1:79:8d:f3:e0:a4:
c6:0d:44:10:04:6e:68:cf:71:7a:66:17:19:50:37:
3c:05:01:41:87:84:e2:d8:a1:38:f0:2b:a7:a0:c3:
f1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:96:D5:A0:D6:D9:29:01:AC:5B:C2:E0:19:3B:42:97:41:F7:63:4D
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/h5bVoNbZKQGsW8LgGTtCl0H3Y00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.9.0-164.138.11.255
Signature Algorithm: sha256WithRSAEncryption
80:59:1e:ac:44:9f:d8:92:b6:86:e5:07:46:d6:a6:1b:6e:b6:
a8:eb:36:78:4c:cd:d2:e9:00:13:72:48:4e:33:a4:3a:77:39:
ad:d5:fa:b1:44:bc:31:e5:f0:41:1a:9d:99:7a:fa:6f:78:c2:
5a:67:97:64:38:de:ba:69:17:aa:99:85:2d:77:01:0b:42:50:
6d:9e:91:aa:5e:ae:1a:8f:11:28:74:74:21:98:b3:e6:af:ef:
26:09:52:79:a8:ba:e0:1a:c4:ec:9e:24:68:69:a1:c1:a2:f9:
26:fd:10:a0:ca:e8:44:16:b0:d3:ae:95:9f:f8:bc:07:5c:26:
74:75:85:46:8e:bd:5e:dc:e3:07:3c:c6:3c:8e:26:e0:1a:55:
3c:ad:1d:e3:6d:7c:7f:3b:f9:d0:38:68:36:53:c3:af:bb:c0:
31:9c:96:bb:97:70:c1:b0:cd:3c:dd:93:0d:72:be:74:df:a2:
8c:7e:75:6f:33:62:fd:a1:c1:64:ac:2e:a3:f8:56:42:eb:df:
92:9e:0d:8c:53:f1:9b:53:2b:dd:a1:6d:2e:65:08:c4:ab:3e:
da:15:92:b9:db:39:a7:1d:9d:cb:a6:c9:fe:25:de:24:84:82:
10:c7:38:18:6d:8d:3e:99:c3:6b:56:0e:8b:b5:8a:f6:ac:4a:
44:3b:61:b2
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaFFBni7pizsJEq7QKD+INmSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTI1NDA0YzZkZDQ3MmYxMDAxZWQ5ZmZkZjcyNjc2MmFj
NzcwMWQwHhcNMjYxMDE2MTQwMzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Nzk2ZDVhMGQ2ZDkyOTAxYWM1YmMyZTAxOTNiNDI5NzQxZjc2MzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthJDe0gX4G60TrvIAXb0L4Yjvci/
+JolagUzRnY4GuZfT239mTXxQaDAZxbfhg0RJ7xkICY7X31Jbw4doRdAw1qtStd0
x840wwwEnq/JkRLaHjZCwEn2+ShV/ggBhXyKIZhboEdVIZn+L9qXG7YPiVWTP8SL
YyUzmLcwB35j27qxaTcsZh6nFby96oW2t6X4JbzSqqtCMGJvZ53lmf0WUb2mxWIn
EyjeJOpY87xbkuwlSBDlPcdQ2yK7NsffzM2riIc9BGzrwX2fLTvzXK+RBZULPAPk
3Va7UtqheY3z4KTGDUQQBG5oz3F6ZhcZUDc8BQFBh4Ti2KE48CunoMPxPQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIeW1aDW2SkBrFvC4Bk7QpdB92NNMB8GA1UdIwQY
MBaAFBESVATG3UcvEAHtn/33JnYqx3AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYt
NmRmZTBmN2Q1M2JkLzEvaDViVm9OYlpLUUdzVzhMZ0dUdENsMEgzWTAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYtNmRmZTBmN2Q1M2Jk
LzEvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACkigkD
BAKkiggwDQYJKoZIhvcNAQELBQADggEBAIBZHqxEn9iStoblB0bWphtutqjrNnhM
zdLpABNySE4zpDp3Oa3V+rFEvDHl8EEanZl6+m94wlpnl2Q43rppF6qZhS13AQtC
UG2ekaperhqPESh0dCGYs+av7yYJUnmouuAaxOyeJGhpocGi+Sb9EKDK6EQWsNOu
lZ/4vAdcJnR1hUaOvV7c4wc8xjyOJuAaVTytHeNtfH87+dA4aDZTw6+7wDGclruX
cMGwzTzdkw1yvnTfoox+dW8zYv2hwWSsLqP4VkLr35KeDYxT8ZtTK92hbS5lCMSr
PtoVkrnbOacdncumyf4l3iSEghDHOBhtjT6Zw2tWDou1ivasSkQ7YbI=
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:19 2026 by rpki-client