Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/ERkEONizgpGBcUj4M6VWv3IFFaw.roa
File: ERkEONizgpGBcUj4M6VWv3IFFaw.roa (raw, json)
Hash identifier: Iw6tLF3DVntPxrSuBh8Lu9AxxPzSwjwMe2mXzXbqfJ0=
Subject key identifier: 11:19:04:38:D8:B3:82:91:81:71:48:F8:33:A5:56:BF:72:05:15:AC
Certificate issuer: /CN=8326912f3a9c7b207fbbe20ff43c0d46cc586c2e
Certificate serial: 019F2368ABD10F5DE3955A44025B2AA30DDC
Authority key identifier: 83:26:91:2F:3A:9C:7B:20:7F:BB:E2:0F:F4:3C:0D:46:CC:58:6C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyaRLzqceyB_u-IP9DwNRsxYbC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/ERkEONizgpGBcUj4M6VWv3IFFaw.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21277
IP address blocks: 185.34.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/gyaRLzqceyB_u-IP9DwNRsxYbC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/gyaRLzqceyB_u-IP9DwNRsxYbC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyaRLzqceyB_u-IP9DwNRsxYbC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ab:d1:0f:5d:e3:95:5a:44:02:5b:2a:a3:0d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8326912f3a9c7b207fbbe20ff43c0d46cc586c2e
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11190438d8b38291817148f833a556bf720515ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:29:1e:25:7f:eb:30:44:0a:bf:5b:76:58:cd:
fe:8c:44:bb:a3:8c:4e:c8:8b:79:f3:86:a3:f0:4a:
0e:52:05:18:66:21:69:ab:15:65:88:ce:ef:1a:71:
4f:8a:a3:6b:c3:4e:a2:a6:28:53:8f:76:a1:47:b2:
5a:83:66:d7:9e:70:54:3f:ca:93:4b:a1:41:cf:96:
e3:1d:31:47:ec:44:d4:b1:4f:c7:a7:36:00:cc:fc:
bb:4f:00:e3:7e:f1:b1:e1:3e:a4:d1:c0:3c:91:fc:
6c:09:72:f4:bd:dd:b7:e1:0b:63:31:4c:9b:fe:84:
18:52:d7:33:f7:99:69:54:2c:e5:2a:32:4c:9a:20:
d1:52:36:25:c3:39:1c:b7:db:2d:04:aa:f8:90:88:
e9:3e:40:f6:b3:96:b4:b6:2f:9d:3b:22:d3:07:80:
b5:c2:76:24:d8:e0:40:56:f6:3a:8a:d7:3e:43:2c:
98:ee:7e:fe:67:6c:f8:92:3d:66:a7:5e:08:af:66:
84:bc:9e:55:50:17:71:4d:cf:4f:e2:a4:4e:30:47:
b6:23:14:2f:78:c9:25:7c:de:f6:0b:37:9b:9b:fd:
38:5d:e7:7b:d4:fc:8e:96:e7:f9:fa:d7:33:07:df:
27:0b:ea:1c:33:4a:38:1b:c7:97:4a:fc:aa:da:12:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:19:04:38:D8:B3:82:91:81:71:48:F8:33:A5:56:BF:72:05:15:AC
X509v3 Authority Key Identifier:
keyid:83:26:91:2F:3A:9C:7B:20:7F:BB:E2:0F:F4:3C:0D:46:CC:58:6C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyaRLzqceyB_u-IP9DwNRsxYbC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/ERkEONizgpGBcUj4M6VWv3IFFaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/gyaRLzqceyB_u-IP9DwNRsxYbC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.16.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:9c:69:71:69:8f:cd:1b:ec:ba:7b:79:c8:98:1d:4b:63:c3:
e5:ac:bf:6c:cc:96:f2:67:50:2c:36:ea:4f:5e:96:58:1c:f2:
63:14:77:ad:3f:b4:05:b8:d0:c6:20:a6:45:82:0b:ad:28:7d:
b8:36:4a:32:14:ef:27:e1:d6:0d:27:fd:af:f4:fd:01:cb:74:
1f:7e:69:fe:32:74:69:52:c1:ce:bf:73:3f:95:6f:bd:e0:52:
03:09:a9:63:06:30:ad:b5:db:6f:41:42:b5:45:a4:d9:92:38:
fc:ba:8b:52:d9:c3:37:b6:e6:83:0e:ce:67:d6:9f:f2:8f:52:
94:c3:1f:7a:df:ed:c4:15:97:98:e7:18:06:41:98:4a:43:f2:
e4:70:a1:64:76:ba:7d:86:1d:95:54:c2:dd:30:f0:12:e4:ba:
e2:5b:0f:5d:99:48:9e:7d:1a:2a:18:8e:c8:ac:0f:d3:d8:d0:
0f:7d:81:e9:21:74:82:4d:c5:83:0a:d0:85:b4:8f:35:72:7f:
7e:31:28:bd:d1:db:5a:17:6d:ff:47:e6:0f:f9:0a:52:64:17:
7c:d4:0f:68:33:70:09:61:f7:ec:84:56:8a:93:c9:40:f9:61:
43:67:7c:e9:6a:c8:23:62:dc:87:2b:00:ef:02:ef:a4:7b:ae:
b5:e6:3e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:43:43 2026 by rpki-client