Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/vnUXnydR0DGVu-Jzm4RtvrnYOwg.roa
File: vnUXnydR0DGVu-Jzm4RtvrnYOwg.roa (raw, json)
Hash identifier: T2RgyQjJF3ogU00QFDBSWVRSfWceiKFKCTyfu3XyyA4=
Subject key identifier: BE:75:17:9F:27:51:D0:31:95:BB:E2:73:9B:84:6D:BE:B9:D8:3B:08
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 01A0D74C9200149C0426AEC6ABA229EC180B
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/vnUXnydR0DGVu-Jzm4RtvrnYOwg.roa
Signing time: Fri 25 Sep 2026 06:41:54 +0000
ROA not before: Fri 25 Sep 2026 06:41:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203997
IP address blocks: 164.138.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:4c:92:00:14:9c:04:26:ae:c6:ab:a2:29:ec:18:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Sep 25 06:41:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be75179f2751d03195bbe2739b846dbeb9d83b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:71:c5:ce:f7:d2:40:fe:11:48:2e:a1:33:
20:b2:49:f9:71:5b:9d:a8:1e:e5:43:91:4c:ec:a1:
0a:30:8e:dd:c9:a0:f6:ce:fd:1f:e8:ce:66:b2:39:
5a:7a:a0:49:f7:26:66:5e:e6:49:6e:aa:e2:6f:55:
f5:9c:eb:a5:96:33:58:ad:31:60:a5:0f:8f:42:1d:
a3:ae:5f:3a:41:28:8e:6a:c7:2a:af:36:6e:4a:5f:
e6:d1:91:e9:80:3a:97:10:ab:37:1f:74:b7:f4:8d:
d3:89:49:ea:e2:17:02:5c:c7:07:c2:f0:0c:9c:01:
64:c4:e2:c9:b0:60:fe:e4:e2:a2:2c:9a:f1:f1:33:
7f:74:11:82:3e:10:56:b0:55:b6:2f:8b:83:ec:76:
4b:ec:63:a9:79:e8:df:2d:9d:20:7e:68:bf:56:fc:
20:81:d5:f6:26:b0:02:cb:1c:e5:7d:70:ab:58:c5:
d0:0c:e6:d7:6b:59:6a:2c:eb:59:32:35:87:a9:04:
e7:e0:5e:5a:3b:2f:65:fd:03:4c:a3:e2:22:54:39:
52:da:6a:d4:be:62:f7:86:f3:ad:47:13:2e:da:bd:
47:5e:d2:c3:e5:5d:72:bf:91:e1:f3:a1:4b:37:06:
84:a4:49:df:97:2c:ad:a9:cb:3b:b2:81:9c:12:7f:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:75:17:9F:27:51:D0:31:95:BB:E2:73:9B:84:6D:BE:B9:D8:3B:08
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/vnUXnydR0DGVu-Jzm4RtvrnYOwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.4.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:42:fb:a3:6e:4a:88:34:3b:b1:4b:6a:e3:12:aa:af:0f:44:
ed:09:aa:d2:5a:fb:7a:1c:13:a3:7b:2d:05:75:73:a8:d2:67:
d3:d1:79:5a:d3:53:e3:12:e5:44:4a:0c:42:c4:c4:93:52:5a:
18:60:52:a9:51:36:bd:69:b0:31:49:08:77:41:58:72:bf:bd:
29:79:d4:5a:a4:db:14:0f:21:4c:e2:c6:07:cc:c2:12:d5:26:
a6:58:e8:da:6f:df:86:6d:01:93:2a:8e:d3:0f:7a:44:06:82:
5a:fc:a3:0b:d6:2f:b5:d1:1d:bc:bf:a5:8e:04:f3:d6:52:50:
4f:39:e0:b5:52:6e:e4:02:94:f6:a9:43:b4:28:0d:8c:f6:66:
d1:a5:fd:09:6d:70:5d:1a:d0:03:73:29:58:19:19:65:da:2d:
cb:c5:9d:5a:35:d2:b0:d3:37:36:21:d2:54:bb:05:67:08:f0:
1a:1f:62:0a:1e:39:8b:4b:79:d6:71:f9:76:01:a2:13:c2:65:
28:9b:10:4d:91:ab:05:33:ea:ca:5b:6c:70:f7:c5:a7:6f:ea:
82:76:3e:f3:2a:fa:b9:21:67:12:ec:8c:95:84:80:1c:9d:9c:
4e:4e:f0:67:25:2b:ca:b6:32:fe:32:3b:5a:2f:e4:92:0a:83:
78:af:38:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:40:11 2026 by rpki-client