Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/oJ4XRBieSSGnIPoVnPmOFkfY3uI.roa
File: oJ4XRBieSSGnIPoVnPmOFkfY3uI.roa (raw, json)
Hash identifier: G8pk4jmFHyayJIXAb5K32aEVWcg+jJj94B0PATfgeBM=
Subject key identifier: A0:9E:17:44:18:9E:49:21:A7:20:FA:15:9C:F9:8E:16:47:D8:DE:E2
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 019FF9A078F3DADA902F5EB0EDD89F91A6B0
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/oJ4XRBieSSGnIPoVnPmOFkfY3uI.roa
Signing time: Thu 13 Aug 2026 05:37:51 +0000
ROA not before: Thu 13 Aug 2026 05:37:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51765
IP address blocks: 164.138.0.0/22 maxlen: 22
164.138.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:a0:78:f3:da:da:90:2f:5e:b0:ed:d8:9f:91:a6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Aug 13 05:37:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a09e1744189e4921a720fa159cf98e1647d8dee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4b:ec:ce:8e:4a:12:a0:2b:e1:d9:7d:60:c5:
8b:b2:48:93:c3:0a:9e:0d:fb:97:d0:d4:a9:fb:52:
58:a6:e7:19:7e:ca:cf:3a:28:07:db:a5:8b:7c:e7:
c4:16:49:19:d9:9f:b3:41:be:f7:5f:61:f3:d4:61:
7e:e8:7e:ea:ad:87:d3:e0:1a:d9:dc:7b:40:c8:2e:
45:e5:61:6b:31:2c:ea:e1:36:17:9b:ea:2d:b8:c5:
fe:45:6b:f7:0e:39:d8:79:b6:38:77:25:7c:0a:86:
96:c7:ea:82:ec:11:80:dd:55:e2:7e:91:6b:a7:42:
02:ff:9d:fb:17:43:e5:05:07:d2:64:39:fd:fa:d8:
aa:68:d4:5a:dc:f4:67:d0:d2:60:dd:f2:04:9f:06:
d8:08:5a:7e:1c:d1:25:67:94:71:53:c4:b7:7b:a9:
69:9f:82:c4:a8:57:36:d9:4a:fb:ca:19:88:08:55:
9d:85:ce:9b:bb:f3:57:87:c6:3d:48:1a:0e:6b:31:
df:71:82:4b:5f:59:47:15:ed:3b:20:6c:fc:5f:64:
0a:48:48:3b:ee:96:47:86:fd:f7:52:0a:aa:a1:2c:
de:10:3c:6b:bd:50:f2:80:89:6e:15:3f:1f:6c:f7:
2d:62:91:da:63:90:57:f0:5a:5f:7d:8e:f3:66:f4:
36:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9E:17:44:18:9E:49:21:A7:20:FA:15:9C:F9:8E:16:47:D8:DE:E2
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/oJ4XRBieSSGnIPoVnPmOFkfY3uI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.0.0/22
164.138.12.0/22
Signature Algorithm: sha256WithRSAEncryption
92:0f:f0:ea:83:c5:bb:b2:c6:d7:5f:d3:73:df:79:b7:14:db:
f6:be:cc:aa:1c:4e:68:17:0e:0d:78:eb:6a:b6:ac:48:1b:90:
46:90:aa:4e:92:44:b6:4f:55:c7:f7:15:23:09:4f:93:a8:d2:
84:b9:63:ad:b0:eb:a0:15:f2:fd:1b:91:64:b5:e2:a7:3e:e5:
4b:cb:a1:05:2e:9b:bd:9d:b2:36:e4:59:8b:44:22:da:a1:1c:
9b:5b:de:70:cb:6d:51:da:40:a9:28:3d:29:15:53:45:f9:44:
c7:03:2b:8a:5c:20:95:86:fc:86:f9:03:b1:6b:17:a9:37:c0:
a9:57:18:75:20:09:9d:1a:4b:f5:f7:86:b0:15:a5:67:c8:4e:
7a:1a:e9:af:6e:c1:8d:68:72:4b:55:fb:1f:58:40:68:cc:69:
cd:94:8f:e0:21:30:99:51:ed:17:60:4d:c1:be:66:83:57:8b:
97:2e:02:42:95:da:ac:e1:c3:cb:97:8c:08:68:30:8b:c6:39:
db:02:3f:6d:a9:1a:cd:50:cd:cc:85:75:ce:bd:64:90:67:d7:
63:62:b7:db:3f:99:b2:6a:75:d7:6d:8a:d4:17:6c:53:af:c5:
2a:3c:65:92:9e:dc:f7:83:05:02:d1:29:be:50:aa:b8:57:57:
fe:dd:30:be
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/5oHjz2tqQL16w7difkaawMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTI1NDA0YzZkZDQ3MmYxMDAxZWQ5ZmZkZjcyNjc2MmFj
NzcwMWQwHhcNMjYwODEzMDUzNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDllMTc0NDE4OWU0OTIxYTcyMGZhMTU5Y2Y5OGUxNjQ3ZDhkZWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Uvszo5KEqAr4dl9YMWLskiTwwqe
DfuX0NSp+1JYpucZfsrPOigH26WLfOfEFkkZ2Z+zQb73X2Hz1GF+6H7qrYfT4BrZ
3HtAyC5F5WFrMSzq4TYXm+otuMX+RWv3DjnYebY4dyV8CoaWx+qC7BGA3VXifpFr
p0IC/537F0PlBQfSZDn9+tiqaNRa3PRn0NJg3fIEnwbYCFp+HNElZ5RxU8S3e6lp
n4LEqFc22Ur7yhmICFWdhc6bu/NXh8Y9SBoOazHfcYJLX1lHFe07IGz8X2QKSEg7
7pZHhv33UgqqoSzeEDxrvVDygIluFT8fbPctYpHaY5BX8FpffY7zZvQ2OQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKCeF0QYnkkhpyD6FZz5jhZH2N7iMB8GA1UdIwQY
MBaAFBESVATG3UcvEAHtn/33JnYqx3AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYt
NmRmZTBmN2Q1M2JkLzEvb0o0WFJCaWVTU0duSVBvVm5QbU9Ga2ZZM3VJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYtNmRmZTBmN2Q1M2Jk
LzEvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCpIoAAwQC
pIoMMA0GCSqGSIb3DQEBCwUAA4IBAQCSD/Dqg8W7ssbXX9Nz33m3FNv2vsyqHE5o
Fw4NeOtqtqxIG5BGkKpOkkS2T1XH9xUjCU+TqNKEuWOtsOugFfL9G5FkteKnPuVL
y6EFLpu9nbI25FmLRCLaoRybW95wy21R2kCpKD0pFVNF+UTHAyuKXCCVhvyG+QOx
axepN8CpVxh1IAmdGkv194awFaVnyE56GumvbsGNaHJLVfsfWEBozGnNlI/gITCZ
Ue0XYE3BvmaDV4uXLgJCldqs4cPLl4wIaDCLxjnbAj9tqRrNUM3MhXXOvWSQZ9dj
YrfbP5myanXXbYrUF2xTr8UqPGWSntz3gwUC0Sm+UKq4V1f+3TC+
-----END CERTIFICATE-----
Generated at Thu Aug 13 18:10:40 2026 by rpki-client