Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EQWkJu9w-fflGGMm52SHeAMMTZw.roa
File: EQWkJu9w-fflGGMm52SHeAMMTZw.roa (raw, json)
Hash identifier: 8dIZXfJjhhm6qXzBn+RmILfB3Pf0WRR3Zk6+uaf7a58=
Subject key identifier: 11:05:A4:26:EF:70:F9:F7:E5:18:63:26:E7:64:87:78:03:0C:4D:9C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0198E6782B75DB2ED044B17D413602225D9C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EQWkJu9w-fflGGMm52SHeAMMTZw.roa
Signing time: Tue 26 Aug 2025 13:01:31 +0000
ROA not before: Tue 26 Aug 2025 13:01:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44636
IP address blocks: 171.22.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:78:2b:75:db:2e:d0:44:b1:7d:41:36:02:22:5d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 26 13:01:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1105a426ef70f9f7e5186326e7648778030c4d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:60:b5:14:ec:3f:76:2d:43:9b:bb:fa:2a:
e0:60:a1:8f:84:5c:70:10:d2:58:bf:9c:ff:12:4f:
25:b8:58:d1:4c:07:cb:0a:25:a6:b1:d6:17:c2:93:
89:4c:a2:ad:c8:e8:65:05:c4:7b:0f:e7:31:43:60:
24:f7:f7:b5:f8:f9:dd:9d:32:32:02:83:d2:1a:3b:
6d:f0:bf:f7:ea:d2:92:ca:5a:cd:04:fd:31:a5:ae:
bd:24:e7:34:39:45:a7:41:69:93:fc:6c:14:e0:50:
ae:da:5e:47:05:7f:a0:e6:ef:e8:4c:6c:df:03:23:
86:fa:0b:8a:6b:d0:25:0f:db:b6:b7:9b:47:94:17:
07:bf:f0:c2:4e:d6:48:c4:6e:92:e2:2f:59:d8:17:
d1:a6:a2:a3:ab:31:5f:7e:fd:e7:b9:e4:2c:19:c1:
b1:f4:db:cd:2c:89:f4:b9:a4:35:c8:25:11:6a:9e:
05:6c:98:ed:35:42:a6:3f:35:ff:8b:e0:65:54:1f:
01:59:cb:7b:97:3c:fb:cf:59:7e:db:fe:3c:96:da:
62:ab:03:35:2e:8e:ef:fc:59:5f:4b:2f:08:33:eb:
1c:6b:bb:3e:37:99:8a:66:e9:be:9a:bf:42:2c:12:
aa:74:e6:14:99:f1:60:3f:6d:9e:76:cb:bc:cb:da:
17:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:05:A4:26:EF:70:F9:F7:E5:18:63:26:E7:64:87:78:03:0C:4D:9C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EQWkJu9w-fflGGMm52SHeAMMTZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.19.0/24
Signature Algorithm: sha256WithRSAEncryption
01:36:af:9f:06:4d:fd:48:cc:1e:5c:51:8d:1f:b1:6d:2d:c8:
91:74:68:2f:43:81:cf:51:59:30:27:c6:8f:f5:ea:48:48:cf:
54:01:52:a6:f2:d4:10:ab:42:65:07:6c:2c:0d:d6:a6:6e:28:
94:2f:68:25:66:49:e7:1a:88:13:b2:a6:7f:b5:f3:ea:29:ad:
67:f2:68:fb:53:81:94:b9:dd:b8:21:cd:6c:52:a9:27:3e:95:
9c:e8:4e:c4:d5:82:f2:ac:67:6c:74:ca:21:57:ac:2a:31:a1:
04:1d:68:ed:15:16:24:d8:d4:74:4d:0a:eb:89:c3:c7:8f:a5:
9f:62:f9:bd:84:6d:9d:8e:ae:dc:3c:ea:6c:41:d1:af:22:5c:
bb:19:15:1a:b9:6c:d5:82:b7:ce:45:7f:a7:3a:fe:a4:23:65:
f4:1a:d3:9c:68:a4:b5:5b:c3:9e:4c:b4:c1:c3:9f:ec:f1:d2:
83:a6:0a:bc:13:86:b3:64:e3:01:38:4e:f1:c9:0d:61:12:06:
e4:84:50:25:2c:54:76:39:66:44:99:ae:0d:af:8d:94:33:15:
69:18:7d:74:69:d9:39:59:b2:4f:21:69:de:68:c6:45:9b:45:
5b:af:6e:5a:ae:fe:27:de:f2:41:64:54:d1:c9:3e:56:15:81:
a1:0e:a3:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjmeCt12y7QRLF9QTYCIl2cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwODI2MTMwMTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTA1YTQyNmVmNzBmOWY3ZTUxODYzMjZlNzY0ODc3ODAzMGM0ZDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCpgtRTsP3YtQ5u7+irgYKGPhFxw
ENJYv5z/Ek8luFjRTAfLCiWmsdYXwpOJTKKtyOhlBcR7D+cxQ2Ak9/e1+PndnTIy
AoPSGjtt8L/36tKSylrNBP0xpa69JOc0OUWnQWmT/GwU4FCu2l5HBX+g5u/oTGzf
AyOG+guKa9AlD9u2t5tHlBcHv/DCTtZIxG6S4i9Z2BfRpqKjqzFffv3nueQsGcGx
9NvNLIn0uaQ1yCURap4FbJjtNUKmPzX/i+BlVB8BWct7lzz7z1l+2/48ltpiqwM1
Lo7v/FlfSy8IM+sca7s+N5mKZum+mr9CLBKqdOYUmfFgP22edsu8y9oXKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBEFpCbvcPn35RhjJudkh3gDDE2cMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvRVFXa0p1OXctZmZsR0dNbTUyU0hlQU1NVFp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqxYTMA0G
CSqGSIb3DQEBCwUAA4IBAQABNq+fBk39SMweXFGNH7FtLciRdGgvQ4HPUVkwJ8aP
9epISM9UAVKm8tQQq0JlB2wsDdambiiUL2glZknnGogTsqZ/tfPqKa1n8mj7U4GU
ud24Ic1sUqknPpWc6E7E1YLyrGdsdMohV6wqMaEEHWjtFRYk2NR0TQrricPHj6Wf
Yvm9hG2djq7cPOpsQdGvIly7GRUauWzVgrfORX+nOv6kI2X0GtOcaKS1W8OeTLTB
w5/s8dKDpgq8E4azZOMBOE7xyQ1hEgbkhFAlLFR2OWZEma4Nr42UMxVpGH10adk5
WbJPIWneaMZFm0Vbr25arv4n3vJBZFTRyT5WFYGhDqMY
-----END CERTIFICATE-----
Generated at Thu Sep 18 01:37:23 2025 by rpki-client