Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/LX6mhH_wBNTHgTV0Wr4sXS50kJ0.roa
File: LX6mhH_wBNTHgTV0Wr4sXS50kJ0.roa (raw, json)
Hash identifier: HzUPlGWzaXcN2DwW7/zu6cSqWzjIwFjguiSiBP9ebDo=
Subject key identifier: 2D:7E:A6:84:7F:F0:04:D4:C7:81:35:74:5A:BE:2C:5D:2E:74:90:9D
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 01A13E402468359F8B263B3DAEE840F856A3
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/LX6mhH_wBNTHgTV0Wr4sXS50kJ0.roa
Signing time: Thu 15 Oct 2026 06:29:13 +0000
ROA not before: Thu 15 Oct 2026 06:29:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 92.242.164.0/22 maxlen: 32
164.138.0.0/20 maxlen: 32
195.13.36.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:40:24:68:35:9f:8b:26:3b:3d:ae:e8:40:f8:56:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Oct 15 06:29:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d7ea6847ff004d4c78135745abe2c5d2e74909d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:78:bd:f3:7b:b4:8a:75:c7:f9:3d:44:84:
12:94:fc:64:d3:92:ba:81:24:1d:0f:cc:6d:7b:7d:
88:cd:95:60:4c:ff:2e:d1:58:2b:9a:02:f4:0e:7b:
01:89:a7:2b:8d:ce:64:e0:80:c0:40:25:c5:cf:66:
31:25:d9:ff:7d:35:ca:1d:e9:8b:c3:f7:8e:a1:29:
ab:07:e4:19:47:db:e0:a8:cd:03:30:a2:99:9b:b7:
13:59:a2:96:c6:c0:1c:fe:da:f8:52:98:1c:31:b3:
19:6d:c0:d4:c2:5b:87:6e:42:98:f0:ae:32:04:2b:
8c:1b:64:89:05:a7:e5:7d:26:dc:36:a9:0f:06:11:
4a:66:81:8e:67:d4:4d:69:76:74:a2:2f:eb:f6:d7:
27:94:fd:23:f3:c7:73:81:43:63:e1:de:c5:b6:4f:
3e:00:08:28:67:68:33:6a:bf:98:61:ed:21:5f:e7:
f1:13:6c:b1:ad:f3:db:d1:16:54:4b:1c:c9:62:9b:
86:9a:b3:c5:7a:53:69:41:a4:a7:33:db:a6:99:80:
cd:e5:5f:bd:1a:bb:a2:73:26:73:87:b3:27:5b:b2:
0e:a3:65:5b:78:70:3c:c6:fb:e6:c7:6d:2e:c8:ad:
b6:12:c7:23:c0:bc:7a:87:cb:fb:e7:93:07:e2:c0:
7b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7E:A6:84:7F:F0:04:D4:C7:81:35:74:5A:BE:2C:5D:2E:74:90:9D
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/LX6mhH_wBNTHgTV0Wr4sXS50kJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.164.0/22
164.138.0.0/20
195.13.36.0/24
Signature Algorithm: sha256WithRSAEncryption
71:f7:6c:e8:c6:7f:8b:0c:f9:66:67:38:55:c4:be:f0:a5:ff:
4c:c8:da:71:bc:4f:2c:96:61:cc:43:d3:84:f0:72:a1:39:ab:
ee:68:cb:9b:56:59:1d:7d:1d:69:d1:50:57:da:98:b8:68:50:
7d:3a:18:1e:da:28:8d:e7:c2:d4:ba:8f:a3:0e:49:fc:d6:b2:
e2:30:36:6f:b5:e7:92:53:f9:7c:74:6a:3e:b8:fe:b2:cc:a8:
2d:94:8d:68:1f:c7:04:72:8c:9b:12:5d:f9:9a:1d:44:90:2d:
9b:47:12:81:40:58:c1:19:25:48:b4:20:e9:92:3b:4e:49:fd:
31:91:8e:37:8b:8d:cf:28:1c:3b:3f:e4:8f:b7:6d:7a:ec:27:
6a:51:1c:76:6b:e8:39:6d:ed:9b:2e:1f:c3:38:c6:3d:00:6d:
92:11:85:cc:d9:b5:aa:4c:a8:a0:88:a7:a9:a8:58:c8:24:29:
6e:be:ef:4a:fd:05:73:f4:d6:24:7e:97:6d:07:b7:e0:bb:5a:
78:08:86:d9:fd:89:44:ba:89:c0:6c:07:6a:2f:d1:04:c6:23:
5f:e7:74:51:db:b2:a6:f2:5a:f8:a1:bd:3f:21:63:ab:f6:cd:
4d:65:24:31:e2:d2:c6:fe:95:2b:49:ff:cb:54:af:68:0e:12:
83:93:4d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:30:47 2026 by rpki-client