Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/sp_ETP2RaEyKONTOC69EWe73mcc.roa
File: sp_ETP2RaEyKONTOC69EWe73mcc.roa (raw, json)
Hash identifier: se3ZtZfgcOxHMacQP3qmA3MHEEjUOar/xVrhe71pNSc=
Subject key identifier: B2:9F:C4:4C:FD:91:68:4C:8A:38:D4:CE:0B:AF:44:59:EE:F7:99:C7
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019FD378C2D6A4AD0D7E3EA7282FE844C12C
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/sp_ETP2RaEyKONTOC69EWe73mcc.roa
Signing time: Wed 05 Aug 2026 19:48:54 +0000
ROA not before: Wed 05 Aug 2026 19:48:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 130.78.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d3:78:c2:d6:a4:ad:0d:7e:3e:a7:28:2f:e8:44:c1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Aug 5 19:48:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b29fc44cfd91684c8a38d4ce0baf4459eef799c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ea:d0:64:6d:ca:4b:dc:5e:88:1f:fb:c5:f6:
b7:8e:90:de:7c:86:20:de:ab:9c:02:0d:33:c7:0b:
76:fa:f6:e1:a5:e1:48:00:43:ca:d4:1c:1a:b5:7a:
ab:70:ae:98:1e:f1:1a:70:ab:d2:4e:64:ce:9b:e4:
94:8c:46:b7:fe:c9:86:90:67:2b:6e:3c:be:b0:35:
6b:39:2e:a0:20:c4:f5:e2:c5:20:4b:ec:ae:51:41:
9e:77:f3:8d:31:cc:0f:26:a0:fa:99:40:13:f2:9b:
9e:1c:f1:f8:54:e2:33:6a:73:d9:01:5b:9f:b2:f0:
2a:36:a7:e5:a8:ad:ef:e8:02:64:0d:a3:cd:c5:9c:
cf:db:c8:3c:95:57:18:ac:f9:10:8d:63:63:5a:44:
3c:19:59:1d:79:fe:de:8c:e9:64:11:22:53:44:2c:
c1:3d:fc:c4:d1:c2:20:f8:7c:f0:d2:2e:f2:af:de:
d5:99:95:89:93:d7:2a:e1:1e:74:50:d4:6a:af:b1:
32:e6:d1:7b:bb:15:a0:d7:a6:6a:2f:4b:e9:3e:2e:
d0:8e:e6:82:81:1c:3b:a9:03:07:ad:44:41:be:73:
78:60:96:c0:49:b9:2f:ca:bf:39:4b:8c:98:b3:66:
ad:fb:1e:18:d2:a4:35:09:e7:e4:b3:d9:76:e2:61:
e0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9F:C4:4C:FD:91:68:4C:8A:38:D4:CE:0B:AF:44:59:EE:F7:99:C7
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/sp_ETP2RaEyKONTOC69EWe73mcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.78.184.0/24
Signature Algorithm: sha256WithRSAEncryption
10:3f:56:32:c8:ff:69:9c:e4:0d:04:aa:82:70:1e:92:f8:7b:
cd:71:16:9e:8d:41:48:78:08:57:ba:c7:dc:41:c0:42:2a:3d:
a5:63:4f:d6:fd:ed:d8:fa:13:0c:71:d0:50:18:f7:4a:7c:fc:
b1:f3:ba:28:0c:cb:a6:c9:9f:bb:8b:7f:a2:2e:1b:d9:61:3a:
62:76:ab:9f:96:2e:b7:d4:a4:0a:05:e3:72:09:99:f5:88:b2:
17:f6:25:3f:36:67:dd:db:d1:b8:29:16:3b:59:eb:3f:fb:fd:
af:ea:8b:9a:af:9a:70:56:30:64:fe:b3:a7:15:11:85:da:34:
7e:bf:e5:03:28:d7:3a:f0:e8:78:94:62:d3:a0:6f:73:3e:c6:
00:13:4c:db:26:93:ee:d9:7f:7d:2e:8f:5a:e5:2a:f9:ac:84:
0e:8d:48:14:47:9f:cb:af:78:98:2d:62:a7:ab:4f:c0:8f:f9:
3a:9a:ba:74:09:7d:61:c5:30:5d:f8:06:bd:73:dd:f0:7d:e7:
6d:73:f5:de:77:4a:88:c4:cf:f7:19:44:d7:7e:29:20:89:d7:
d9:b1:e3:9f:58:b0:c1:d5:3e:86:19:3f:ff:53:f8:2a:3e:6a:
b3:aa:93:91:82:d4:bf:c2:fc:2a:06:10:30:e0:c8:31:16:8f:
7a:4b:48:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/TeMLWpK0Nfj6nKC/oRMEsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZTUzYzBiZmMzYzhmYjU2YjgxMTkxMzE3MTQ0NDQzZTBl
MjlkMjUwHhcNMjYwODA1MTk0ODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjlmYzQ0Y2ZkOTE2ODRjOGEzOGQ0Y2UwYmFmNDQ1OWVlZjc5OWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOrQZG3KS9xeiB/7xfa3jpDefIYg
3qucAg0zxwt2+vbhpeFIAEPK1BwatXqrcK6YHvEacKvSTmTOm+SUjEa3/smGkGcr
bjy+sDVrOS6gIMT14sUgS+yuUUGed/ONMcwPJqD6mUAT8pueHPH4VOIzanPZAVuf
svAqNqflqK3v6AJkDaPNxZzP28g8lVcYrPkQjWNjWkQ8GVkdef7ejOlkESJTRCzB
PfzE0cIg+Hzw0i7yr97VmZWJk9cq4R50UNRqr7Ey5tF7uxWg16ZqL0vpPi7QjuaC
gRw7qQMHrURBvnN4YJbASbkvyr85S4yYs2at+x4Y0qQ1Cefks9l24mHgdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLKfxEz9kWhMijjUzguvRFnu95nHMB8GA1UdIwQY
MBaAFF/lPAv8PI+1a4EZExcUREPg4p0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDct
NWNmNTZlZTQzNWIzLzEvc3BfRVRQMlJhRXlLT05UT0M2OUVXZTczbWNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDctNWNmNTZlZTQzNWIz
LzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgk64MA0G
CSqGSIb3DQEBCwUAA4IBAQAQP1YyyP9pnOQNBKqCcB6S+HvNcRaejUFIeAhXusfc
QcBCKj2lY0/W/e3Y+hMMcdBQGPdKfPyx87ooDMumyZ+7i3+iLhvZYTpidqufli63
1KQKBeNyCZn1iLIX9iU/Nmfd29G4KRY7Wes/+/2v6ouar5pwVjBk/rOnFRGF2jR+
v+UDKNc68Oh4lGLToG9zPsYAE0zbJpPu2X99Lo9a5Sr5rIQOjUgUR5/Lr3iYLWKn
q0/Aj/k6mrp0CX1hxTBd+Aa9c93wfedtc/Xed0qIxM/3GUTXfikgidfZseOfWLDB
1T6GGT//U/gqPmqzqpORgtS/wvwqBhAw4MgxFo96S0gg
-----END CERTIFICATE-----
Generated at Wed Aug 12 21:11:51 2026 by rpki-client