Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/tR3JIILCUmampae68zfNR46wdoE.roa
File: tR3JIILCUmampae68zfNR46wdoE.roa (raw, json)
Hash identifier: aOqdmbX2NCdGMxgtkhoy2Vkl/dGODFCPv3lOT4iO6Dc=
Subject key identifier: B5:1D:C9:20:82:C2:52:66:A6:A5:A7:BA:F3:37:CD:47:8E:B0:76:81
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 01A13E3D64DB3C68BF1E9A93A9152E2E56C5
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/tR3JIILCUmampae68zfNR46wdoE.roa
Signing time: Thu 15 Oct 2026 06:26:13 +0000
ROA not before: Thu 15 Oct 2026 06:26:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 164.138.7.0/24 maxlen: 24
164.138.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:3d:64:db:3c:68:bf:1e:9a:93:a9:15:2e:2e:56:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Oct 15 06:26:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b51dc92082c25266a6a5a7baf337cd478eb07681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1b:05:3e:3d:b3:3f:8d:d9:4a:2b:d4:e4:96:
6a:84:87:99:f8:14:32:46:16:a4:23:4d:37:84:e7:
d3:0b:42:c4:38:79:1f:58:7b:4d:93:70:50:95:f6:
7d:15:2d:f5:5a:10:3b:c0:97:81:fb:fb:d5:3a:4a:
3a:41:f7:c9:c6:8f:8e:05:3b:94:32:2d:9b:10:58:
36:3c:96:31:64:00:6c:70:ef:10:48:03:98:17:7a:
2d:46:de:f2:84:d7:ce:be:83:b1:2f:8e:3e:85:ce:
35:0a:47:f0:4d:09:62:99:d9:64:90:a9:dc:53:cb:
69:63:71:97:5e:58:8a:a1:a3:76:fe:61:ae:57:70:
f8:cd:98:8e:33:56:de:0b:48:d0:54:5b:e8:02:a6:
11:39:f4:c5:68:0b:34:03:a2:67:db:64:d8:3b:0e:
72:dc:75:6e:b8:de:b4:0f:d4:c3:c5:87:10:e3:ba:
f3:af:d8:59:7c:2e:05:1b:57:39:4e:6d:47:d9:0c:
fb:37:96:c7:dc:02:a0:75:c3:66:95:40:66:f1:74:
f7:de:05:56:a1:0e:ec:b7:cf:8a:e7:97:40:5f:ab:
c2:1a:69:85:b4:fd:0b:f1:5e:6a:73:c8:cb:fc:61:
23:bc:91:32:14:09:df:74:98:e1:d6:31:4a:2d:f8:
cd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1D:C9:20:82:C2:52:66:A6:A5:A7:BA:F3:37:CD:47:8E:B0:76:81
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/tR3JIILCUmampae68zfNR46wdoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.7.0-164.138.8.255
Signature Algorithm: sha256WithRSAEncryption
43:b6:ee:89:e7:aa:90:01:81:fc:91:40:0c:8d:b1:67:6a:7e:
65:3b:80:e7:cb:01:ab:1f:a0:3c:1b:18:6f:10:f4:9e:a7:5d:
38:55:bf:1a:0d:c3:2f:6b:bd:b5:92:2c:4f:6f:d1:7a:62:85:
b6:72:cc:2c:57:cb:ab:86:18:66:b3:5e:0c:b5:eb:28:c2:de:
0a:96:69:45:4c:63:ea:d9:5e:0d:f4:e2:76:c8:f1:bc:3d:ee:
cd:db:59:f3:bb:57:a8:10:61:ca:a2:0b:04:99:ec:6d:a0:35:
75:39:72:ec:bb:37:9b:07:8e:26:65:a3:c3:25:7f:69:a4:47:
80:a2:a0:8c:78:36:b1:36:28:4f:dd:26:50:14:d3:36:a3:d2:
43:41:2e:78:f7:2f:6f:27:63:cc:09:67:cf:58:c1:93:68:3e:
82:72:7c:25:f9:ed:cd:7c:69:c9:76:00:41:75:6c:e9:6a:9e:
45:41:3e:ca:3e:6d:40:3e:43:5e:a3:73:d4:00:17:9a:36:ff:
ee:16:50:60:d7:24:59:24:04:d5:8d:a4:45:95:f8:2d:b9:37:
42:63:4e:1b:7b:c4:53:de:43:d2:54:48:35:6b:a8:2e:64:f5:
8a:3d:fb:1b:da:ed:c2:29:1d:0d:e0:a7:e8:52:12:3c:87:0e:
c9:3e:48:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:08 2026 by rpki-client