Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/CK4irD3so3QYUELVooAZ5qcjPWg.roa
File: CK4irD3so3QYUELVooAZ5qcjPWg.roa (raw, json)
Hash identifier: XO2MFAMj7H2U8wEyePG6rE+1Iaq81kv4zxsZhG9FwWk=
Subject key identifier: 08:AE:22:AC:3D:EC:A3:74:18:50:42:D5:A2:80:19:E6:A7:23:3D:68
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 019DFC9A6F1C4A42EB5E1AEAB9948CFBFB74
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/CK4irD3so3QYUELVooAZ5qcjPWg.roa
Signing time: Wed 06 May 2026 09:24:32 +0000
ROA not before: Wed 06 May 2026 09:24:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213689
IP address blocks: 164.138.4.0/22 maxlen: 22
164.138.8.0/21 maxlen: 21
195.13.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:9a:6f:1c:4a:42:eb:5e:1a:ea:b9:94:8c:fb:fb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: May 6 09:24:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08ae22ac3deca374185042d5a28019e6a7233d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:63:82:df:be:17:93:a8:0c:a8:e6:39:45:
13:fa:86:c4:df:d8:a2:b6:97:5d:3c:89:fb:b5:48:
9c:51:1b:b9:06:1c:f0:bf:39:d0:a6:89:3c:9d:5c:
c2:1b:22:2f:c7:ff:ab:71:89:cc:d1:ca:ac:ff:a6:
ca:e0:99:b7:47:f0:b7:f3:c3:cf:31:bd:98:a9:cc:
f3:8c:6d:ac:d9:8d:c0:a4:27:6a:f8:e1:69:78:a4:
5c:3e:6d:f1:4c:58:5a:c9:7b:75:4c:05:35:a1:a3:
93:74:80:3b:ae:88:d2:83:d4:72:6e:7b:83:4c:26:
22:a5:a4:d4:16:0e:5a:19:d4:09:9f:da:62:9c:71:
cb:b5:38:02:ca:ad:6f:5e:d9:59:c2:55:0e:64:3d:
d5:69:31:55:22:de:21:74:99:08:1f:db:e4:23:04:
fd:43:21:32:39:52:ff:c8:44:5f:f1:af:26:5c:cb:
45:7a:71:36:bb:37:4b:61:b9:dc:2c:c7:b5:cf:2a:
f7:7b:d9:c3:39:f2:12:c5:c5:47:83:d4:65:b6:1b:
6d:0f:d0:67:31:36:9e:14:60:eb:91:6e:04:64:da:
d2:c4:00:bd:ca:37:30:89:e4:c6:8f:a1:de:50:bd:
5f:ef:2c:60:a0:4e:0a:cd:64:b9:e6:45:e4:c9:2f:
e3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AE:22:AC:3D:EC:A3:74:18:50:42:D5:A2:80:19:E6:A7:23:3D:68
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/CK4irD3so3QYUELVooAZ5qcjPWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.4.0-164.138.15.255
195.13.36.0/24
Signature Algorithm: sha256WithRSAEncryption
43:64:e5:20:eb:fa:34:29:1a:16:1b:f1:c7:db:17:c5:d6:2a:
f6:e0:73:cd:c3:b0:c2:0c:bd:ce:fc:df:f0:8a:49:d6:ed:53:
cb:fa:b6:01:50:67:85:a0:3f:b1:15:a9:fe:31:57:25:6b:57:
eb:b9:12:a6:fb:b3:da:ea:0c:74:b0:e5:f1:ba:e2:76:89:7b:
ab:90:fb:8e:ad:e2:29:67:73:2a:a5:9e:9b:95:be:d3:03:49:
a2:e1:18:41:2c:0f:61:6d:c0:10:cb:d0:7a:55:02:e1:d0:42:
4e:c4:d8:f1:11:ce:32:05:2d:14:73:f9:b0:97:70:ac:57:84:
da:3d:d5:88:ea:04:af:e4:b7:0a:c9:df:88:62:14:94:ff:34:
cb:13:4a:d8:5c:48:5a:37:ba:66:81:4e:6a:83:0b:49:17:20:
0a:b4:46:a7:d6:0a:0a:71:82:e9:99:4d:20:81:f2:bb:a0:99:
58:6a:5b:b4:bf:e6:1c:19:23:5e:41:a1:1b:77:ee:b7:af:6c:
b1:20:ec:62:a3:08:e7:58:7e:4e:cc:6e:a1:4d:95:d8:24:68:
a2:82:9d:b1:92:90:b3:02:05:7a:f0:ad:df:16:98:26:3f:0f:
4d:92:a8:c1:78:c7:95:39:64:a5:26:b0:8e:63:6d:7d:16:ce:
d6:d0:63:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:38:33 2026 by rpki-client