Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/EtfbqtbVgmE5k5EfNQal1jQqIao.roa
File: EtfbqtbVgmE5k5EfNQal1jQqIao.roa (raw, json)
Hash identifier: qGpfhIH2gNSP3ygzOk+ijrsunW7Qn03B2PkdlyJWXCg=
Subject key identifier: 12:D7:DB:AA:D6:D5:82:61:39:93:91:1F:35:06:A5:D6:34:2A:21:AA
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A1D400A13CFE924809A33185080F708121
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/EtfbqtbVgmE5k5EfNQal1jQqIao.roa
Signing time: Fri 13 Nov 2026 08:22:53 +0000
ROA not before: Fri 13 Nov 2026 08:22:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212336
IP address blocks: 88.135.152.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:00:a1:3c:fe:92:48:09:a3:31:85:08:0f:70:81:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Nov 13 08:22:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12d7dbaad6d582613993911f3506a5d6342a21aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:80:99:9c:11:3e:c6:ab:d5:36:89:82:8c:
25:f8:9d:d8:78:2b:7e:29:ce:bf:d2:05:0d:1a:71:
c8:59:37:b6:3a:fc:6a:9b:05:40:5e:b0:09:e0:67:
4f:1c:71:dc:53:b5:46:3d:06:2d:d5:81:05:a8:36:
a0:92:d7:50:0a:48:46:7a:a7:a1:f2:c2:1d:8d:3e:
f1:68:61:f1:a1:11:04:6b:5f:71:51:a7:d6:aa:63:
0a:93:50:ec:9f:68:25:81:c3:e6:5b:29:9e:0f:ed:
26:62:66:cb:48:1f:a8:da:6e:c8:37:54:8e:c7:ad:
cd:fd:eb:d1:9e:cf:d8:e8:a7:1c:77:1c:ca:b7:ce:
30:05:d7:f6:b0:11:4d:29:ee:fd:12:9b:c0:0f:a6:
38:3b:c1:93:2b:be:02:4e:71:a2:80:8d:ac:35:b2:
a0:5a:6a:4d:a0:2b:cd:c6:59:0e:33:85:8e:1d:5e:
ed:93:3f:64:45:4a:08:9a:d1:a8:d7:71:8d:ab:ff:
21:2e:d1:b4:94:56:95:d2:58:06:08:ee:eb:a0:57:
1a:a1:42:09:f5:ce:2e:e2:03:f3:87:de:cf:14:41:
e1:09:ca:6d:ca:51:c8:13:8a:8a:8e:ca:15:29:da:
74:40:e0:1e:63:e7:ab:55:1c:26:97:0a:24:67:2e:
34:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D7:DB:AA:D6:D5:82:61:39:93:91:1F:35:06:A5:D6:34:2A:21:AA
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/EtfbqtbVgmE5k5EfNQal1jQqIao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.152.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:51:fa:c7:c0:65:26:6c:af:bc:91:5b:fb:20:32:aa:91:00:
98:56:8a:41:21:7c:d6:0d:5e:11:3c:51:fc:d0:c2:fb:0e:02:
d9:20:cb:af:bf:a9:05:ad:c4:c9:e1:3e:49:31:10:a2:61:a0:
a6:50:39:2f:0c:c7:db:43:58:c0:b3:e5:23:ca:09:07:89:a1:
d5:98:e7:aa:bc:21:bc:5a:04:32:52:f0:98:30:f1:6f:0d:a3:
fb:23:a9:45:1e:f2:06:4a:02:cd:4f:25:f8:bc:23:fc:8d:a3:
f8:a7:4b:a8:12:66:ec:b7:17:4f:9e:90:ef:98:59:d8:6b:dc:
3a:0a:d2:af:b4:d0:89:68:cc:5b:e2:c0:32:04:ba:63:8b:22:
af:a1:16:71:d9:f9:cd:98:e4:1f:ea:53:f0:90:d3:58:2f:8b:
7f:01:47:bc:e9:f8:a5:b5:28:e5:47:f5:77:fe:1f:45:25:9e:
68:a6:a5:cb:74:31:fe:d1:7b:7d:79:56:f4:93:3d:e4:4e:10:
78:87:99:aa:b8:47:cd:ba:42:8e:87:35:6f:d3:09:ca:ce:16:
3b:70:83:2f:aa:b0:d7:ef:c1:80:e5:b2:b4:14:df:5d:ab:71:
e0:e5:44:b7:05:d3:cf:ef:6a:d8:ed:cb:8d:71:98:6a:57:b8:
3c:79:74:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:36:32 2026 by rpki-client