Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/O-kPL51RwlGez8pEnbJxbW-ISOc.roa
File: O-kPL51RwlGez8pEnbJxbW-ISOc.roa (raw, json)
Hash identifier: wUb1lBOUWdo1qebtORUqDsfWv7RnWMa9pObuYoS5EnU=
Subject key identifier: 3B:E9:0F:2F:9D:51:C2:51:9E:CF:CA:44:9D:B2:71:6D:6F:88:48:E7
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 01A080D1FC92DAFE33781D806809DBF0BE23
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/O-kPL51RwlGez8pEnbJxbW-ISOc.roa
Signing time: Tue 08 Sep 2026 11:40:40 +0000
ROA not before: Tue 08 Sep 2026 11:40:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51765
IP address blocks: 164.138.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:d1:fc:92:da:fe:33:78:1d:80:68:09:db:f0:be:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Sep 8 11:40:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3be90f2f9d51c2519ecfca449db2716d6f8848e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:64:55:18:7f:e1:66:27:9a:53:f8:93:bf:67:
e1:b5:1f:64:92:b3:f2:de:9c:16:2b:3d:0c:c1:ef:
55:f5:9d:56:58:5c:99:a2:cb:41:c7:25:9a:e4:c6:
25:12:b6:8b:9d:67:c5:4c:8f:8f:fa:19:8f:ef:74:
2f:a2:ef:81:cd:ea:88:c9:66:6b:3d:04:a7:0b:6d:
e5:7d:93:b2:38:6f:56:53:d8:97:6f:85:ef:4a:ad:
ed:39:86:c3:31:f2:00:e3:c7:5e:25:02:f8:a7:75:
bf:54:f8:74:18:8b:5a:aa:3d:d9:15:07:6f:ba:1e:
63:9f:dd:4b:c6:81:0e:23:57:3d:72:ee:d2:5c:97:
f9:59:8b:9a:e7:3f:31:a5:ca:99:a0:dd:8d:3b:7f:
17:f4:d8:ce:fd:a7:74:4d:bd:3f:5f:d5:ed:bc:a3:
ca:81:1b:00:13:11:39:50:0f:31:90:e2:70:35:40:
71:a7:b9:da:80:85:49:94:eb:87:20:10:56:8b:35:
e1:db:bc:75:01:b3:ad:30:3a:d1:60:9d:be:e1:75:
d0:00:b7:46:29:cb:06:54:3c:38:48:c3:ce:c9:9e:
c7:9e:7e:98:2d:0a:31:5f:35:7d:c2:54:53:c5:bb:
95:a0:50:07:20:5c:0e:8a:1a:6d:62:f0:8b:93:93:
e8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E9:0F:2F:9D:51:C2:51:9E:CF:CA:44:9D:B2:71:6D:6F:88:48:E7
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/O-kPL51RwlGez8pEnbJxbW-ISOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.12.0/22
Signature Algorithm: sha256WithRSAEncryption
d4:d0:e6:87:71:2b:42:35:1d:7e:e0:3d:fc:8b:d0:de:00:3d:
a1:f6:9e:9e:49:a1:a3:9f:97:2d:ae:c0:56:80:35:f4:5b:8b:
6c:aa:79:9f:f1:19:cb:40:1e:aa:c2:00:c1:82:93:98:1c:17:
5d:2a:b1:91:29:18:5d:6f:ef:0e:77:11:d2:ce:0e:6b:1e:0b:
31:1b:d4:d7:76:01:75:ce:b9:e0:03:13:a8:5e:67:a8:33:c6:
50:22:ee:05:eb:f4:41:b9:7f:53:82:56:ba:94:d6:66:f8:36:
4a:c5:00:a1:ae:fe:0f:79:c7:57:a2:df:dc:a2:a4:8e:d1:7a:
74:60:0d:e6:fb:80:0b:5e:ec:32:1f:54:c7:1f:87:a8:41:fb:
e8:a1:af:95:72:0e:b1:34:db:bf:fb:77:f3:d7:eb:9a:1e:f8:
23:4b:7b:9a:23:1b:a6:2c:4a:97:6d:0c:80:8f:cb:55:fd:95:
3d:ea:95:e8:06:9e:04:3c:1f:71:1e:4b:76:e0:e1:0e:d8:44:
a8:27:f8:0f:1b:43:85:5e:18:bd:e6:e9:46:4e:70:00:90:62:
a2:7f:4f:83:c9:66:7d:c8:a7:f3:02:31:36:b5:ce:5d:52:48:
e5:c5:50:ff:a5:f7:66:57:3b:0b:8d:36:7f:9c:da:31:45:c2:
07:aa:ae:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:28:06 2026 by rpki-client