Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/EtBWv7v42TBRx3xi5if6zm6OAdo.roa
File: EtBWv7v42TBRx3xi5if6zm6OAdo.roa (raw, json)
Hash identifier: wUjEWMJsxkGqfJP8Q+fyLu6SEzpYpLZd1/pV8n4as7s=
Subject key identifier: 12:D0:56:BF:BB:F8:D9:30:51:C7:7C:62:E6:27:FA:CE:6E:8E:01:DA
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 019937D8C0832ADDAE7D69B32F2195535EB5
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/EtBWv7v42TBRx3xi5if6zm6OAdo.roa
Signing time: Thu 11 Sep 2025 08:16:15 +0000
ROA not before: Thu 11 Sep 2025 08:16:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 88.218.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:d8:c0:83:2a:dd:ae:7d:69:b3:2f:21:95:53:5e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Sep 11 08:16:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12d056bfbbf8d93051c77c62e627face6e8e01da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:53:0e:83:09:8d:76:f0:1b:47:ff:9c:d1:16:
df:63:fd:3e:ad:41:a5:14:95:0c:fe:c5:d5:43:de:
e3:5b:7c:54:7d:1c:45:14:2d:b1:61:52:ec:70:90:
61:f8:5e:53:70:31:22:a5:0b:13:be:60:69:7f:b0:
26:7c:33:e1:02:20:d8:18:64:2a:30:89:0c:36:99:
cb:c6:ca:46:18:85:21:38:d0:de:d4:22:df:14:a3:
bc:41:19:c3:56:5f:ec:fe:32:dd:b7:3f:1c:d9:5c:
b3:b6:7a:04:c3:e9:5a:c1:f6:8d:7c:a7:18:31:74:
ec:fd:89:81:46:f4:b9:a1:4d:8b:39:07:5d:25:7f:
da:9e:0b:da:9c:cd:6b:09:77:d9:c6:c3:f2:52:e1:
1f:e9:b9:1f:b8:5c:e2:7f:92:a4:c3:b3:df:a6:3d:
29:3f:80:2d:00:de:ba:e9:71:1d:19:d5:80:68:8f:
4c:0b:b1:f6:1a:62:fd:ff:12:a7:79:da:51:6b:40:
11:76:85:14:ea:09:11:fb:09:e5:a9:ce:57:41:03:
1e:89:c0:98:b2:8c:22:f6:26:cb:50:fc:9b:cc:90:
c2:f4:72:c0:87:38:34:d4:71:7a:eb:0d:00:32:d1:
2a:81:37:4e:34:35:87:0c:6b:89:e8:9c:b4:dc:b0:
ab:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D0:56:BF:BB:F8:D9:30:51:C7:7C:62:E6:27:FA:CE:6E:8E:01:DA
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/EtBWv7v42TBRx3xi5if6zm6OAdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.42.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:93:09:57:2f:28:b0:5b:6a:97:73:ae:43:7c:ed:9f:1c:80:
3c:aa:03:57:e5:a3:01:7b:d6:8a:0c:86:72:a2:b1:f3:a4:38:
d5:92:19:17:a6:5a:70:94:19:0f:13:6b:d0:a3:fb:0b:62:ba:
0e:a4:37:5b:71:62:ca:96:07:b3:02:ec:15:0d:2e:8d:f2:73:
5b:56:a9:91:83:ed:ea:34:55:78:c3:db:57:72:fc:89:7f:56:
4b:8c:2e:e7:ed:d5:ec:bb:cd:7f:35:c9:11:bd:e8:38:7a:84:
38:25:23:10:27:6e:37:83:ea:7f:76:1d:25:ad:37:f9:9c:6c:
2d:6f:a9:f8:53:ca:f2:71:cf:61:e8:61:84:84:64:d7:fa:17:
91:63:b9:cd:e9:fa:47:04:22:80:d5:97:e4:87:20:b9:e2:44:
a0:a7:1d:9f:ad:b3:a1:f6:4b:d9:65:c4:64:8d:d0:c8:54:0c:
63:d0:44:78:2a:a2:84:ff:5b:ad:46:7b:9b:39:38:ad:cb:ec:
f4:16:58:8b:16:39:d4:69:6f:ac:57:a4:20:a9:9a:64:b4:8c:
2d:3b:ec:e6:92:ce:17:6f:d2:e7:a5:ec:b3:5f:35:11:33:bb:
2d:04:24:2d:d2:2f:0e:3f:bb:17:f9:21:a2:d9:a1:75:73:0a:
eb:6f:c0:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZk32MCDKt2ufWmzLyGVU161MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1
NWMzNjEwHhcNMjUwOTExMDgxNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmQwNTZiZmJiZjhkOTMwNTFjNzdjNjJlNjI3ZmFjZTZlOGUwMWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VMOgwmNdvAbR/+c0RbfY/0+rUGl
FJUM/sXVQ97jW3xUfRxFFC2xYVLscJBh+F5TcDEipQsTvmBpf7AmfDPhAiDYGGQq
MIkMNpnLxspGGIUhONDe1CLfFKO8QRnDVl/s/jLdtz8c2VyztnoEw+lawfaNfKcY
MXTs/YmBRvS5oU2LOQddJX/angvanM1rCXfZxsPyUuEf6bkfuFzif5Kkw7Pfpj0p
P4AtAN666XEdGdWAaI9MC7H2GmL9/xKnedpRa0ARdoUU6gkR+wnlqc5XQQMeicCY
sowi9ibLUPybzJDC9HLAhzg01HF66w0AMtEqgTdONDWHDGuJ6Jy03LCrlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBLQVr+7+NkwUcd8YuYn+s5ujgHaMB8GA1UdIwQY
MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut
M2FhN2RhYTlkM2VjLzEvRXRCV3Y3djQyVEJSeDN4aTVpZjZ6bTZPQWRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj
LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNoqMA0G
CSqGSIb3DQEBCwUAA4IBAQCxkwlXLyiwW2qXc65DfO2fHIA8qgNX5aMBe9aKDIZy
orHzpDjVkhkXplpwlBkPE2vQo/sLYroOpDdbcWLKlgezAuwVDS6N8nNbVqmRg+3q
NFV4w9tXcvyJf1ZLjC7n7dXsu81/NckRveg4eoQ4JSMQJ243g+p/dh0lrTf5nGwt
b6n4U8rycc9h6GGEhGTX+heRY7nN6fpHBCKA1ZfkhyC54kSgpx2frbOh9kvZZcRk
jdDIVAxj0ER4KqKE/1utRnubOTity+z0FliLFjnUaW+sV6QgqZpktIwtO+zmks4X
b9LnpeyzXzURM7stBCQt0i8OP7sX+SGi2aF1cwrrb8BW
-----END CERTIFICATE-----
Generated at Thu Sep 18 08:16:45 2025 by rpki-client