Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/ERr_HtkQWGUFjzv4scSz1RjkxkY.roa
File: ERr_HtkQWGUFjzv4scSz1RjkxkY.roa (raw, json)
Hash identifier: LrxlextA3UrAvkKiffumcx8o+lgVydKGnEQqNKzGR6Q=
Subject key identifier: 11:1A:FF:1E:D9:10:58:65:05:8F:3B:F8:B1:C4:B3:D5:18:E4:C6:46
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 01A0A50780B4A1D662485B6BAFC40299679C
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/ERr_HtkQWGUFjzv4scSz1RjkxkY.roa
Signing time: Tue 15 Sep 2026 12:25:27 +0000
ROA not before: Tue 15 Sep 2026 12:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 191.40.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:07:80:b4:a1:d6:62:48:5b:6b:af:c4:02:99:67:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Sep 15 12:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=111aff1ed9105865058f3bf8b1c4b3d518e4c646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:08:1c:8a:64:a2:f3:0f:72:2e:ac:91:6f:17:
6e:71:b0:d9:c7:a6:ce:43:23:62:9a:e4:b2:e9:69:
e3:9e:f5:00:fa:b4:bb:f8:da:05:b9:66:e8:ad:8d:
8c:3c:66:cd:13:7c:e4:5b:b6:b8:2b:12:f7:6a:3b:
0f:6c:8f:bf:bc:16:89:86:9b:42:19:f0:90:78:c6:
39:e4:97:be:d7:1d:d1:d5:d7:8e:5b:de:67:57:1c:
81:fa:64:6d:78:c7:8f:97:15:56:4d:bf:70:fa:f1:
4a:27:af:31:cf:5e:c8:f1:5a:0a:9d:08:1b:c0:b4:
a3:c8:4b:49:58:89:2f:3b:4b:e4:01:68:e6:b6:14:
c6:5a:90:74:e1:58:51:79:c5:fa:f4:d8:6a:61:64:
e8:d0:ad:1a:19:03:1e:3c:89:24:7c:26:06:fa:25:
df:27:04:5b:45:84:9f:43:78:0d:cd:c2:a6:5e:cc:
24:28:85:24:92:33:06:aa:e5:50:d8:61:61:02:a3:
e7:c7:95:be:80:74:74:6d:cf:4c:fe:c1:8c:76:82:
d1:aa:88:d8:39:d5:fd:fe:cf:bf:5f:57:8d:ce:03:
ca:23:6e:e1:75:6d:e0:47:54:97:0e:ed:f0:de:cb:
bd:bc:3b:e1:f8:0d:4b:4c:6b:09:df:fb:5b:b5:8d:
ac:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1A:FF:1E:D9:10:58:65:05:8F:3B:F8:B1:C4:B3:D5:18:E4:C6:46
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/ERr_HtkQWGUFjzv4scSz1RjkxkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.40.16.0/24
Signature Algorithm: sha256WithRSAEncryption
91:b8:da:2b:2d:0e:4f:aa:91:4b:51:3e:68:47:37:a4:6e:ca:
37:41:0a:c1:b5:6e:85:ec:7f:58:6b:c5:55:bc:90:34:0e:c8:
6e:f5:fb:c4:20:fb:6d:c3:b5:64:de:c4:22:05:5a:39:04:2e:
7e:10:70:ad:91:14:53:45:0e:26:ab:77:7e:7e:d3:85:10:5d:
f5:d3:d7:74:f7:58:4c:a7:b2:11:0e:74:bb:f4:99:2d:29:ff:
28:82:94:f6:80:ac:b2:a8:f6:f2:40:98:1c:ca:ea:09:77:06:
2a:54:f2:95:6b:71:00:1d:58:de:4b:8f:8a:65:42:9c:f3:32:
7b:41:fc:60:3c:de:d2:9d:f4:81:d4:3e:25:59:e4:1c:26:da:
93:db:c2:ee:40:66:9d:22:9c:4d:4e:e8:ba:a3:38:8b:b2:c7:
6b:d9:be:41:01:1f:6c:52:b2:34:18:69:fb:65:06:24:10:15:
3b:67:9f:32:73:9e:85:d4:8e:c0:66:3c:23:72:5a:bd:a6:9b:
fe:c7:07:28:74:44:e1:08:bf:c2:de:19:f8:29:40:62:d6:4c:
77:24:8f:c2:ef:35:b1:08:9e:ae:38:89:1b:6f:23:f7:9e:c8:
22:79:94:3c:4a:84:1e:bd:c7:e0:65:84:f9:68:48:e5:a6:9d:
5b:07:06:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:24:41 2026 by rpki-client