Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/O7GDt8dKw3fKOEif7-xxv83MkX8.roa
File: O7GDt8dKw3fKOEif7-xxv83MkX8.roa (raw, json)
Hash identifier: kfZgqTcN9/pOm+4VrhF+ketnsnk9Jw6GuPo/q4is8H0=
Subject key identifier: 3B:B1:83:B7:C7:4A:C3:77:CA:38:48:9F:EF:EC:71:BF:CD:CC:91:7F
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 019D4584B3F961FD29443C3EC6B21BC81104
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/O7GDt8dKw3fKOEif7-xxv83MkX8.roa
Signing time: Tue 31 Mar 2026 20:10:17 +0000
ROA not before: Tue 31 Mar 2026 20:10:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213689
IP address blocks: 164.138.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:45:84:b3:f9:61:fd:29:44:3c:3e:c6:b2:1b:c8:11:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Mar 31 20:10:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3bb183b7c74ac377ca38489fefec71bfcdcc917f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:23:00:42:37:37:f9:4c:b2:56:c6:cd:a8:
3e:63:90:98:bf:c4:07:83:d6:58:27:b7:84:62:b0:
59:de:26:29:70:f4:c0:38:3e:00:51:83:c6:48:df:
ff:0e:58:72:ed:2d:02:6b:d6:ca:9f:17:e4:d4:76:
15:a4:a7:03:46:68:50:b7:b0:b8:a1:f9:72:23:eb:
8b:17:da:bb:fe:30:96:11:77:27:69:1e:dc:4e:92:
47:01:4b:b9:6f:d5:1b:52:05:de:27:7c:96:e2:d3:
fc:89:41:d6:4d:38:99:10:e1:83:35:55:3f:77:6e:
dd:63:fc:3a:6f:7b:f3:ee:1e:a7:df:e0:50:89:81:
0a:c7:9d:ee:05:7d:19:1f:87:0d:74:f4:fc:93:1d:
2f:85:4c:d0:01:a1:14:ac:95:ab:93:50:9c:55:ce:
90:5e:87:40:e7:8c:9d:6f:be:91:d4:4d:7a:1f:94:
89:bf:d9:03:c2:4f:c3:67:d9:17:c1:e5:69:44:d7:
86:79:41:ba:8d:42:36:bf:84:6f:a0:42:1b:3d:cf:
53:2e:f0:f6:cb:68:0a:b2:0a:af:32:71:13:3d:cf:
c6:b5:8a:b8:a5:12:00:e1:60:7c:66:6f:f4:a9:04:
9d:6e:66:95:53:ff:4a:aa:e9:6e:88:03:61:cf:eb:
04:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B1:83:B7:C7:4A:C3:77:CA:38:48:9F:EF:EC:71:BF:CD:CC:91:7F
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/O7GDt8dKw3fKOEif7-xxv83MkX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.8.0/21
Signature Algorithm: sha256WithRSAEncryption
ba:67:3d:38:8b:d9:d3:10:a9:46:cc:b0:21:27:21:1d:3d:90:
0a:3e:a0:2f:2c:32:99:85:de:77:b8:3c:cf:73:54:5a:c9:51:
38:8b:60:32:16:d8:6b:92:af:6a:5b:36:c6:8a:c6:e3:3a:1a:
d8:62:9c:09:b1:f0:fb:7c:2a:2d:a4:dd:4f:22:2f:8a:de:54:
82:b4:1e:7d:06:11:92:9a:e9:82:97:47:cf:fd:fe:82:61:13:
3c:a8:d0:da:b6:bd:5e:13:1b:8f:88:fe:8a:fb:00:c6:20:5b:
b7:1b:82:66:36:7c:f6:ed:cf:be:aa:d3:56:f3:9f:e6:35:ac:
9b:54:f6:37:db:e0:6b:09:d7:37:ac:46:f6:75:07:37:aa:c9:
43:2b:05:ca:3a:f3:98:ad:5c:05:b0:84:c0:f4:58:01:f7:81:
22:ba:bd:f2:2b:0a:70:59:ff:b5:da:1f:45:fa:f5:a6:75:35:
2c:cc:f4:9b:48:97:77:48:4f:51:db:ca:ec:8a:88:83:d2:dd:
e8:65:8f:1b:f2:7c:c3:1f:6f:cc:55:f9:9a:ce:3e:27:5c:14:
8b:d0:aa:05:64:34:04:60:42:9b:95:d7:89:00:10:b8:61:44:
80:da:4c:30:01:39:f7:6b:4a:5c:7f:77:5d:db:af:45:01:d1:
7c:ca:8e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:10 2026 by rpki-client