Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ERn_T-tBSlED1HGLGpmp5TH1mvs.roa
File: ERn_T-tBSlED1HGLGpmp5TH1mvs.roa (raw, json)
Hash identifier: lrTnN9vcg5Es7tx9UN3FM4W5VrH4hjbesmuoNW8w5rk=
Subject key identifier: 11:19:FF:4F:EB:41:4A:51:03:D4:71:8B:1A:99:A9:E5:31:F5:9A:FB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019910698693F9AD129CC898A8161F5FC950
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ERn_T-tBSlED1HGLGpmp5TH1mvs.roa
Signing time: Wed 03 Sep 2025 16:29:35 +0000
ROA not before: Wed 03 Sep 2025 16:29:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47447
IP address blocks: 185.221.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:10:69:86:93:f9:ad:12:9c:c8:98:a8:16:1f:5f:c9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 3 16:29:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1119ff4feb414a5103d4718b1a99a9e531f59afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:91:cf:34:95:37:81:48:25:78:f1:b0:1d:36:
19:77:32:54:85:ad:7b:06:5b:ce:7d:75:c6:63:89:
3e:b4:75:dc:bc:f6:11:9f:fe:bc:9a:e8:c4:33:a6:
0d:05:01:96:8b:3a:68:9e:5e:2f:44:0e:7c:27:18:
e8:7b:54:22:c9:f6:df:96:f3:83:af:48:43:7e:ba:
3d:bb:ec:c3:aa:1b:79:3c:45:3a:02:83:bf:dc:cb:
04:c6:9e:1d:02:2f:31:e3:1f:0f:51:d0:1a:d7:1c:
0b:31:72:24:e3:fc:0a:d8:ca:a8:e8:80:d7:76:8c:
70:0c:c1:bd:47:12:c4:fc:ab:7e:88:d4:d1:c0:9f:
fb:66:af:46:e2:06:f0:5b:9c:8b:ef:4c:6e:34:9e:
25:b3:2d:4e:9b:e2:6f:29:fb:60:88:78:00:26:f9:
4a:9c:e4:7f:83:13:9e:ac:86:72:8f:3e:16:a7:5d:
a7:4c:fe:b4:3c:4e:76:38:6a:77:2c:a0:f0:6d:44:
12:31:a7:32:b9:4f:6b:98:95:65:f0:09:09:d4:9d:
6e:b6:23:40:ab:18:6c:56:9a:f3:75:b7:22:91:fe:
a6:ef:32:58:9c:f2:de:05:94:b9:0f:62:a4:d9:88:
70:10:a1:ac:75:79:da:03:bd:13:6b:7e:b4:ec:5a:
95:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:19:FF:4F:EB:41:4A:51:03:D4:71:8B:1A:99:A9:E5:31:F5:9A:FB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ERn_T-tBSlED1HGLGpmp5TH1mvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.67.0/24
Signature Algorithm: sha256WithRSAEncryption
23:88:8b:9d:61:76:71:4f:8b:53:0e:7a:81:8c:34:55:68:1c:
ed:fb:1c:81:cf:26:64:e3:cc:e4:5a:d3:ad:69:fe:81:17:91:
13:3c:f6:f3:b9:25:86:7f:27:0d:15:58:18:33:23:7b:a6:37:
9f:63:32:35:b8:82:a0:73:e7:c2:91:31:55:21:dd:53:00:f7:
9f:25:22:d2:0e:94:01:5a:0b:dd:9e:b3:a8:5d:c7:66:0b:e0:
3c:b1:87:9c:e8:12:41:5b:e4:8c:57:1a:a7:c8:df:0b:47:ab:
64:8b:62:af:a1:fb:5d:47:9d:b6:d4:f6:8f:cd:c0:09:d3:cc:
4d:ee:17:7f:f7:c4:53:e3:f5:b7:25:68:1f:5e:05:02:3b:24:
02:9e:36:bc:50:ea:ab:27:06:74:1d:1f:0e:81:0a:14:ea:05:
b3:df:77:22:59:09:8d:4e:26:f3:c8:19:68:68:f4:b2:52:34:
10:6b:a3:79:2c:14:88:b7:da:7e:c8:bc:8a:94:b2:cc:5a:8e:
99:bc:db:3a:81:e0:19:8d:0b:b6:a4:76:5c:c6:34:97:87:97:
86:bd:88:8f:90:50:36:17:d1:65:e8:6e:e5:0b:55:b6:b7:c2:
0b:73:64:51:d6:d3:b7:44:69:fb:de:1e:b0:4b:60:78:ba:0e:
fa:d6:bf:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkQaYaT+a0SnMiYqBYfX8lQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwOTAzMTYyOTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTE5ZmY0ZmViNDE0YTUxMDNkNDcxOGIxYTk5YTllNTMxZjU5YWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JHPNJU3gUglePGwHTYZdzJUha17
BlvOfXXGY4k+tHXcvPYRn/68mujEM6YNBQGWizponl4vRA58Jxjoe1QiyfbflvOD
r0hDfro9u+zDqht5PEU6AoO/3MsExp4dAi8x4x8PUdAa1xwLMXIk4/wK2Mqo6IDX
doxwDMG9RxLE/Kt+iNTRwJ/7Zq9G4gbwW5yL70xuNJ4lsy1Om+JvKftgiHgAJvlK
nOR/gxOerIZyjz4Wp12nTP60PE52OGp3LKDwbUQSMacyuU9rmJVl8AkJ1J1utiNA
qxhsVprzdbcikf6m7zJYnPLeBZS5D2Kk2YhwEKGsdXnaA70Ta3607FqV2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBEZ/0/rQUpRA9RxixqZqeUx9Zr7MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvRVJuX1QtdEJTbEVEMUhHTEdwbXA1VEgxbXZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud1DMA0G
CSqGSIb3DQEBCwUAA4IBAQAjiIudYXZxT4tTDnqBjDRVaBzt+xyBzyZk48zkWtOt
af6BF5ETPPbzuSWGfycNFVgYMyN7pjefYzI1uIKgc+fCkTFVId1TAPefJSLSDpQB
WgvdnrOoXcdmC+A8sYec6BJBW+SMVxqnyN8LR6tki2KvoftdR5221PaPzcAJ08xN
7hd/98RT4/W3JWgfXgUCOyQCnja8UOqrJwZ0HR8OgQoU6gWz33ciWQmNTibzyBlo
aPSyUjQQa6N5LBSIt9p+yLyKlLLMWo6ZvNs6geAZjQu2pHZcxjSXh5eGvYiPkFA2
F9Fl6G7lC1W2t8ILc2RR1tO3RGn73h6wS2B4ug761r8p
-----END CERTIFICATE-----
Generated at Sat Sep 6 09:39:48 2025 by rpki-client