Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/mE7nCWgLjdrpwOLUU5iWPiG9LqY.roa
File: mE7nCWgLjdrpwOLUU5iWPiG9LqY.roa (raw, json)
Hash identifier: U1zju7eMp5j3/1hkG6J6Khf8nbNlxEhaVR5cGilHSPs=
Subject key identifier: 98:4E:E7:09:68:0B:8D:DA:E9:C0:E2:D4:53:98:96:3E:21:BD:2E:A6
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 019FCE77095B355BEF1D9016787DAA145D2F
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/mE7nCWgLjdrpwOLUU5iWPiG9LqY.roa
Signing time: Tue 04 Aug 2026 20:28:55 +0000
ROA not before: Tue 04 Aug 2026 20:28:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 92.242.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:77:09:5b:35:5b:ef:1d:90:16:78:7d:aa:14:5d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Aug 4 20:28:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=984ee709680b8ddae9c0e2d45398963e21bd2ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:ac:a1:51:28:d4:49:09:95:95:02:0f:44:
0e:04:b8:09:4c:4e:3d:5d:d5:02:93:00:98:17:da:
60:e4:df:bd:72:3a:fa:38:38:80:f5:fd:bd:b5:80:
9b:3b:09:77:a0:9c:0c:1e:cc:9c:40:1c:c1:3a:64:
76:a4:c6:1b:79:8b:d2:0c:54:97:a0:61:97:73:0a:
b5:3f:a0:eb:27:c9:a6:9a:b3:73:0a:22:6c:01:26:
a5:9f:24:1b:b6:a6:2a:08:45:0b:ef:c6:34:b1:85:
5a:62:b3:a5:de:94:23:1a:a9:17:8a:20:f6:e3:56:
08:a8:50:3d:32:5e:fa:1f:18:57:c9:a6:4a:b7:38:
fb:05:25:04:50:f3:2c:a7:e4:5a:67:ec:9b:ad:cd:
d9:21:f2:52:b3:09:5d:a2:6b:73:bf:e6:3a:24:0e:
99:b4:e9:a0:e5:04:41:8b:b4:c1:e8:03:2e:b5:0b:
2d:69:30:af:67:44:e7:e9:3f:6b:ae:ea:34:3e:64:
2c:16:57:67:74:70:e9:ca:dc:14:8b:ea:a4:a4:b9:
5d:38:89:d3:43:3d:22:b1:98:32:f7:92:46:90:5c:
75:82:5e:1d:e3:ef:1c:a6:33:e2:45:80:5e:33:f9:
3c:b6:50:d8:5a:18:fe:41:22:6f:c1:5c:29:18:3c:
d8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4E:E7:09:68:0B:8D:DA:E9:C0:E2:D4:53:98:96:3E:21:BD:2E:A6
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/mE7nCWgLjdrpwOLUU5iWPiG9LqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.165.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:55:9f:a1:e0:b0:8b:82:10:b1:18:88:54:0c:fa:cb:eb:bd:
83:3b:d9:91:47:bc:13:29:35:08:07:99:d2:95:80:8f:70:46:
4e:1b:f5:20:38:7d:3a:57:7a:83:d3:c6:59:63:79:cd:ea:8e:
3c:f5:db:22:09:61:35:6d:95:cb:88:d8:bc:6b:3e:bf:5c:a6:
c0:8a:22:2a:b2:c1:c3:1d:40:35:26:dd:ed:1e:7b:ae:36:1f:
45:f4:2d:70:d0:ef:1f:c8:f4:59:33:a6:3e:df:d4:8c:b5:00:
8d:81:42:91:a5:48:90:78:52:c6:0d:30:94:f6:d3:ef:c4:d7:
da:d7:8f:f0:4e:95:a4:bb:1f:2c:cb:1a:0a:35:4a:ae:8b:ba:
d2:e4:68:38:4e:70:30:71:cc:ea:73:ae:4d:2f:ef:10:ca:1a:
4c:27:4a:d2:64:17:d8:c5:d5:ed:4a:1c:d5:a8:0c:73:16:cd:
1e:5e:51:36:46:47:1c:66:fe:0f:4c:2e:c4:e5:16:3b:f0:ab:
5a:1e:03:28:9b:c9:61:c3:17:20:b4:8f:eb:f4:f6:4b:2f:79:
04:90:b9:43:cd:7f:0d:3d:cd:f4:7b:65:e1:6c:1c:62:ae:ba:
b1:d7:32:96:2f:65:8a:9b:42:92:a6:b2:23:fa:12:ad:a1:64:
e5:9d:d2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 18:10:38 2026 by rpki-client