Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Er0gna1Ao6i_h1uI03CBuG6DDqQ.roa
File: Er0gna1Ao6i_h1uI03CBuG6DDqQ.roa (raw, json)
Hash identifier: TomzlXw4pYAX79JT2NruPyS/6nzlgMzigQCWfaldpgU=
Subject key identifier: 12:BD:20:9D:AD:40:A3:A8:BF:87:5B:88:D3:70:81:B8:6E:83:0E:A4
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019FA01A6E2866A3DC8D91F91AA96DF2C675
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Er0gna1Ao6i_h1uI03CBuG6DDqQ.roa
Signing time: Sun 26 Jul 2026 20:25:14 +0000
ROA not before: Sun 26 Jul 2026 20:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209866
IP address blocks: 201.3.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:1a:6e:28:66:a3:dc:8d:91:f9:1a:a9:6d:f2:c6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 26 20:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12bd209dad40a3a8bf875b88d37081b86e830ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:29:4d:b5:47:b3:90:e9:20:6a:54:0c:0a:
5b:04:db:a1:1b:4c:fa:d0:c7:36:0c:ee:d3:fe:4c:
b3:a3:ca:eb:28:93:10:90:0c:01:f0:67:43:ee:60:
54:d2:fe:5d:a3:c4:97:3b:3c:a5:4c:8c:aa:74:d6:
cb:59:ae:27:60:d1:dd:47:f8:a5:55:59:cd:a9:2c:
a9:b6:32:c6:82:59:5d:85:46:8d:85:b7:5b:a3:f0:
ef:31:93:cb:9f:51:be:5d:b6:7e:67:8c:64:10:d5:
1f:c0:52:f6:9b:be:91:a7:d3:14:d2:3d:d5:3f:53:
f1:dd:dc:c7:cc:73:08:57:a5:6b:cd:fa:7f:f1:ae:
1b:36:1b:d1:50:b5:ef:38:08:3f:5c:78:e9:2b:b8:
a4:14:64:9d:4b:35:77:d2:0a:be:a1:c3:56:98:e0:
a5:5c:ec:2a:a2:33:f1:7e:6a:38:80:f9:8a:b8:12:
49:36:bd:7e:82:df:c7:39:a3:a5:07:5f:52:3e:11:
f6:92:a9:03:90:4c:3e:0e:a2:9d:a1:4f:32:1b:35:
15:7c:3f:98:6b:97:6c:68:5f:dd:c3:94:5d:29:b3:
7c:8f:77:e2:68:bd:6a:3c:63:a9:8e:d4:12:b7:11:
6a:ac:30:8b:05:e9:12:e5:d6:f3:61:5a:9e:24:86:
19:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BD:20:9D:AD:40:A3:A8:BF:87:5B:88:D3:70:81:B8:6E:83:0E:A4
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Er0gna1Ao6i_h1uI03CBuG6DDqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.120.0/23
Signature Algorithm: sha256WithRSAEncryption
39:b5:58:1a:71:7b:9d:91:00:c5:de:eb:34:08:e0:0a:7c:6e:
be:16:8c:d3:66:78:42:81:46:ee:13:4c:73:63:1b:92:53:7f:
10:55:f2:d2:65:d1:0f:4d:d7:c5:92:58:de:31:d2:ee:7c:61:
76:9d:6f:4d:7f:b5:4a:1e:39:b2:33:8d:9c:af:32:a3:2d:9c:
91:78:67:2a:b5:24:e0:4e:0f:43:4c:7d:fd:1e:46:8f:1f:6a:
1f:40:54:de:f4:89:6f:8e:17:f4:2f:48:9d:9a:0c:36:00:fb:
31:f2:c2:2d:af:f8:bd:a2:3a:70:08:c6:e1:47:c7:64:93:a3:
1d:3d:0c:83:00:78:7c:c3:1d:35:16:27:10:26:7e:f5:99:be:
d3:55:b2:e8:06:58:73:61:a6:32:bf:54:38:80:21:72:19:17:
7c:e5:80:a2:7e:45:31:7d:dd:20:60:a7:71:cb:87:9e:99:25:
7f:1a:4c:50:62:ac:a6:79:6b:88:77:a1:46:da:28:dc:bf:3c:
db:95:e8:00:12:31:a6:a5:8e:df:de:d8:8b:61:02:2d:d1:53:
9f:1f:a5:db:8c:fc:03:f9:36:12:85:2d:d2:df:72:70:94:5e:
71:98:db:10:12:cc:4b:22:38:ba:cd:f0:6b:16:08:80:ef:46:
13:9a:bb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:08:53 2026 by rpki-client