Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Et_toEE1sYjUIyx9vdzI5glA4Zs.roa
File: Et_toEE1sYjUIyx9vdzI5glA4Zs.roa (raw, json)
Hash identifier: W6r8/H0S7MJZjqXc3yJgrpp0e07mq4yFMkcOPWNbbZ0=
Subject key identifier: 12:DF:ED:A0:41:35:B1:88:D4:23:2C:7D:BD:DC:C8:E6:09:40:E1:9B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A3F3B54483F5E88BBA04E99A4F0D6BC00
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Et_toEE1sYjUIyx9vdzI5glA4Zs.roa
Signing time: Sat 01 Nov 2025 11:44:04 +0000
ROA not before: Sat 01 Nov 2025 11:44:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398704
IP address blocks: 217.60.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3f:3b:54:48:3f:5e:88:bb:a0:4e:99:a4:f0:d6:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 1 11:44:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12dfeda04135b188d4232c7dbddcc8e60940e19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4f:fa:39:4c:02:cc:d9:0e:60:5d:a3:41:da:
b6:7c:d4:b6:56:c2:d7:34:4e:02:20:a9:50:b2:6f:
d3:bc:93:e6:a6:83:69:22:c7:8c:8b:20:90:75:a2:
34:7c:3d:70:f9:9d:c1:0c:38:ed:c0:53:0f:36:2e:
7d:5b:18:44:a1:10:bf:3f:a2:fb:0a:dc:b9:67:b5:
23:c0:48:fe:63:cf:0b:a3:4c:53:23:2e:9c:35:b1:
96:ef:56:56:43:dc:5d:8e:40:5b:7c:b5:eb:cb:2b:
d4:68:fc:a4:52:bd:01:85:c6:3f:04:96:9f:65:60:
62:11:06:98:2e:a5:6b:e2:73:aa:bb:b6:c4:8b:8f:
dc:19:a6:19:c6:04:06:15:88:76:a8:d0:df:d4:40:
ac:f3:bc:2c:6b:e0:91:f0:32:5d:a5:24:10:0d:71:
7c:a4:76:d9:cc:1d:d0:ce:9b:d8:6f:5a:85:ed:95:
a5:14:3f:26:68:c5:08:65:41:72:f6:f8:52:8b:e6:
e2:76:f6:d9:e9:fb:0d:d9:fb:78:17:6f:1c:b7:ec:
2a:23:aa:38:10:66:ab:db:03:67:b5:17:10:de:82:
2f:f9:50:46:ba:ae:a9:95:26:85:c6:f8:e8:2c:f0:
21:62:70:b7:cb:6c:c5:0c:50:36:b6:d6:c8:49:e3:
17:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DF:ED:A0:41:35:B1:88:D4:23:2C:7D:BD:DC:C8:E6:09:40:E1:9B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Et_toEE1sYjUIyx9vdzI5glA4Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.188.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:16:9d:d3:61:b9:92:92:0a:fb:65:3f:ca:4e:70:a5:1c:d5:
f8:d1:37:81:0b:87:52:c3:34:21:0e:a6:ad:d5:3f:97:0f:38:
a2:e4:25:b7:b2:ae:1d:8c:1c:02:6f:07:a3:9d:45:8f:49:ec:
94:97:3f:9e:09:78:c7:a1:c4:58:fe:b6:59:80:84:cb:ab:6d:
b6:c8:af:cd:48:a8:da:65:26:06:c9:81:df:2d:a9:ec:47:99:
b3:0a:2a:6a:5d:83:cb:2c:8b:e2:f7:96:8c:ec:17:ee:d2:07:
bc:d6:a4:4d:89:81:ae:d8:22:04:ef:f3:81:0b:75:28:89:dd:
4c:de:60:27:a6:9b:50:c6:9b:a3:ed:89:95:48:2e:34:af:2a:
e3:51:fe:a1:ad:da:6e:ef:98:4d:28:34:c8:60:49:b9:b0:60:
a8:7d:26:dd:d7:be:3d:ca:c9:22:aa:b7:bb:e9:98:79:2d:06:
a5:83:3d:23:4a:bb:60:3c:77:23:36:db:3b:02:9b:d4:df:00:
c6:90:69:b4:74:60:52:97:c2:fb:8f:7a:96:fc:8c:c5:78:69:
dd:23:a0:b2:ab:3f:c5:fc:a6:2d:fd:90:f8:86:92:8d:c2:b3:
f0:6c:ed:c3:3b:f9:ae:73:b3:e4:5a:ac:4b:a7:9b:a6:8b:61:
86:38:a3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 12:11:06 2025 by rpki-client