Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/QXxwBNb8gXdd8a5CKVAG17WDeg8.roa
File: QXxwBNb8gXdd8a5CKVAG17WDeg8.roa (raw, json)
Hash identifier: dWYndi8o7Q2l6mEcK6nt6IGPLfLrVv/vo8+jNXCmS84=
Subject key identifier: 41:7C:70:04:D6:FC:81:77:5D:F1:AE:42:29:50:06:D7:B5:83:7A:0F
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 01A05DB627F5F46031EE1DEBD8EA0E2BA2A4
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/QXxwBNb8gXdd8a5CKVAG17WDeg8.roa
Signing time: Tue 01 Sep 2026 16:03:33 +0000
ROA not before: Tue 01 Sep 2026 16:03:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213689
IP address blocks: 164.138.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:b6:27:f5:f4:60:31:ee:1d:eb:d8:ea:0e:2b:a2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Sep 1 16:03:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=417c7004d6fc81775df1ae42295006d7b5837a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:af:a8:02:29:8c:1d:63:ce:97:7e:3f:b7:3e:
41:e7:fb:ae:6f:87:61:58:4d:44:1f:1c:06:80:ee:
02:ac:84:da:be:1e:72:66:6b:8f:7c:5e:57:26:56:
54:85:6b:80:c4:a0:f2:59:35:05:b7:e5:5a:3c:d5:
a0:28:b4:52:e9:59:a3:f5:9a:c6:63:6b:fa:f8:73:
d9:58:cf:3c:b9:b9:29:43:fa:28:52:6b:5f:84:2d:
99:77:0b:df:7c:59:45:e1:f2:12:3e:73:41:5e:b2:
e1:f9:55:82:37:b6:46:0f:c1:a2:f6:5a:9c:c9:b5:
14:c9:cf:33:14:8a:4f:cf:db:ad:de:d5:d5:b0:7d:
ec:90:3d:05:49:ea:b7:a7:e9:40:ee:ea:6a:ae:76:
a6:09:d4:29:6a:5e:4e:17:b5:e8:93:3f:ae:32:d3:
eb:1f:4c:e9:1a:1f:c4:01:1b:1f:7e:f6:3b:6d:9c:
29:c6:bd:d5:2f:7b:7a:d0:ac:3d:fe:22:51:e2:51:
2d:8b:08:1b:06:c8:61:8c:bd:da:f6:b8:08:a9:45:
e3:39:23:37:e6:17:82:6a:83:78:47:d0:4f:17:72:
c3:1a:5e:5b:84:ce:b9:7d:35:5b:d4:fc:b0:b7:f4:
82:c9:96:ad:e4:1d:9f:d2:43:f2:31:4d:ae:08:c7:
be:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7C:70:04:D6:FC:81:77:5D:F1:AE:42:29:50:06:D7:B5:83:7A:0F
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/QXxwBNb8gXdd8a5CKVAG17WDeg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.8.0/22
Signature Algorithm: sha256WithRSAEncryption
04:ab:10:50:df:51:e5:cc:f8:6d:61:31:18:70:1d:b7:32:8b:
74:72:39:14:63:11:0e:5b:39:49:4f:be:d7:65:ad:bd:54:a9:
2b:86:6d:55:77:fc:74:7a:a3:cc:48:93:b3:95:a2:38:d7:d4:
1a:3e:2e:66:83:86:3f:06:75:2b:ea:26:d0:cb:7f:5f:22:1c:
71:a8:17:83:cb:f2:cc:aa:9b:6b:e7:97:5a:b9:2f:fb:30:02:
5e:97:81:37:15:64:8d:ea:21:e3:46:19:06:cb:d1:3e:f5:04:
28:9f:7e:d5:53:cf:99:2e:6d:0e:d1:0d:1d:df:0d:37:ee:b5:
be:ec:7e:d4:cc:fa:af:02:66:a9:53:ac:6b:3d:ef:a8:26:a4:
ba:3f:42:0a:1d:e8:e7:ca:a0:14:c9:49:bc:11:76:02:48:1a:
8a:d3:16:2f:2a:65:57:0d:20:c6:ef:d0:28:64:f2:41:dd:f2:
d7:61:d5:eb:e2:6b:76:b0:65:ad:ff:0c:71:55:11:38:42:76:
1a:47:31:f5:94:ee:12:fc:6e:10:69:d9:09:94:a0:6a:41:08:
4f:0c:31:4a:f6:c1:9e:75:33:d9:f2:2b:f2:f5:ab:66:dd:1e:
1a:69:a8:1c:35:0e:99:71:c5:e1:1c:44:8a:83:23:6c:c4:b0:
d2:b0:24:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:25:00 2026 by rpki-client