Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ETO1DQMQEwbLKsop70f_IRqpjvo.roa
File: ETO1DQMQEwbLKsop70f_IRqpjvo.roa (raw, json)
Hash identifier: W+oCWHNVENtoQwyY4yZkPcwzYYlyeqnKwiYZfApMNAQ=
Subject key identifier: 11:33:B5:0D:03:10:13:06:CB:2A:CA:29:EF:47:FF:21:1A:A9:8E:FA
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F6A7085DB8ABB0FA7FAB8302EF7AA7DBC
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ETO1DQMQEwbLKsop70f_IRqpjvo.roa
Signing time: Thu 16 Jul 2026 10:19:46 +0000
ROA not before: Thu 16 Jul 2026 10:19:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209557
IP address blocks: 109.66.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:70:85:db:8a:bb:0f:a7:fa:b8:30:2e:f7:aa:7d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 16 10:19:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1133b50d03101306cb2aca29ef47ff211aa98efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:b0:ad:6d:24:38:88:fb:4e:2b:99:7b:83:
7f:bb:79:ed:fb:4a:b0:32:d3:85:12:e7:e7:42:5e:
51:a6:80:ef:1d:66:e3:62:b4:4f:82:19:c5:5c:54:
9d:a3:39:d4:68:e6:7b:03:a9:0a:32:1e:91:3e:18:
86:a0:e2:52:cc:76:26:50:c5:a6:06:eb:cd:7e:0c:
05:0e:07:d6:4f:00:ab:61:c8:27:9a:4c:69:a1:98:
2e:b3:62:f0:83:95:82:03:d5:14:85:28:4d:35:3f:
e5:fc:15:4c:ab:68:c6:e9:7c:35:31:bb:31:38:4d:
61:48:74:24:ca:22:66:87:5c:00:44:99:0b:3d:42:
46:6a:4f:ab:7f:fa:b1:2e:46:fb:80:95:6d:c2:3a:
82:23:8d:f6:3f:47:0a:c6:4c:ae:a2:a0:08:a0:64:
20:80:a4:63:ad:ac:46:1d:c0:0e:24:1a:af:81:9c:
ea:91:52:2f:1e:5e:4b:f3:e7:be:74:e5:42:20:79:
4d:2e:b9:64:10:62:28:aa:0f:54:71:52:87:88:07:
01:57:6d:e8:9d:59:8c:33:85:25:27:e9:40:0d:f9:
1d:09:84:74:4c:f6:d6:f5:c1:cf:e5:d8:b3:09:f5:
cf:d4:5a:48:72:74:67:d3:f1:2f:a8:24:14:72:c2:
9a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:33:B5:0D:03:10:13:06:CB:2A:CA:29:EF:47:FF:21:1A:A9:8E:FA
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ETO1DQMQEwbLKsop70f_IRqpjvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.88.0/23
Signature Algorithm: sha256WithRSAEncryption
35:11:4c:16:8a:64:bd:1b:8c:f2:93:42:72:03:34:53:a8:74:
e6:47:ca:4a:ae:26:c8:5c:68:f8:60:e9:e1:ac:54:4c:53:c6:
6c:e0:59:f2:88:e5:2c:56:35:92:b8:c2:ee:e9:d3:f5:be:26:
7d:95:b1:12:f6:05:c2:30:e0:6a:db:a9:68:97:b1:e2:b3:9a:
99:0d:b4:59:b6:d8:b2:31:68:4a:42:3d:57:47:23:bc:46:f6:
d0:1d:b3:a2:bb:4e:26:6b:67:a4:b8:ca:26:72:22:81:b4:e4:
6f:16:74:ab:42:66:bf:3d:c2:16:90:a9:8d:f5:5c:8e:ba:15:
aa:94:36:ba:66:b2:cd:a0:71:f0:89:14:98:53:6f:25:8b:7b:
a1:fa:77:63:2c:bd:d8:4f:b4:dd:6d:8e:d9:25:be:59:09:b1:
6c:a6:61:83:aa:d5:05:71:61:9d:9c:eb:52:a8:4f:93:6d:4d:
ba:dd:2c:f9:dc:7e:bf:e6:a0:07:ff:aa:f1:71:f7:f2:ee:75:
21:6f:b0:17:e9:70:62:ae:58:fa:4e:38:89:e8:ca:7a:63:1f:
b3:cf:36:aa:7c:4f:b1:bb:8b:27:ba:fc:19:83:f5:c7:cd:72:
f8:d1:29:8b:e6:7e:84:1a:53:5d:34:23:40:0c:f4:15:52:bc:
9f:02:5e:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9qcIXbirsPp/q4MC73qn28MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwNzE2MTAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTMzYjUwZDAzMTAxMzA2Y2IyYWNhMjllZjQ3ZmYyMTFhYTk4ZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssmwrW0kOIj7TiuZe4N/u3nt+0qw
MtOFEufnQl5RpoDvHWbjYrRPghnFXFSdoznUaOZ7A6kKMh6RPhiGoOJSzHYmUMWm
BuvNfgwFDgfWTwCrYcgnmkxpoZgus2Lwg5WCA9UUhShNNT/l/BVMq2jG6Xw1Mbsx
OE1hSHQkyiJmh1wARJkLPUJGak+rf/qxLkb7gJVtwjqCI432P0cKxkyuoqAIoGQg
gKRjraxGHcAOJBqvgZzqkVIvHl5L8+e+dOVCIHlNLrlkEGIoqg9UcVKHiAcBV23o
nVmMM4UlJ+lADfkdCYR0TPbW9cHP5dizCfXP1FpIcnRn0/EvqCQUcsKa7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBEztQ0DEBMGyyrKKe9H/yEaqY76MB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvRVRPMURRTVFFd2JMS3NvcDcwZl9JUnFwanZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbUJYMA0G
CSqGSIb3DQEBCwUAA4IBAQA1EUwWimS9G4zyk0JyAzRTqHTmR8pKribIXGj4YOnh
rFRMU8Zs4FnyiOUsVjWSuMLu6dP1viZ9lbES9gXCMOBq26lol7His5qZDbRZttiy
MWhKQj1XRyO8RvbQHbOiu04ma2ekuMomciKBtORvFnSrQma/PcIWkKmN9VyOuhWq
lDa6ZrLNoHHwiRSYU28li3uh+ndjLL3YT7TdbY7ZJb5ZCbFspmGDqtUFcWGdnOtS
qE+TbU263Sz53H6/5qAH/6rxcffy7nUhb7AX6XBirlj6TjiJ6Mp6Yx+zzzaqfE+x
u4snuvwZg/XHzXL40SmL5n6EGlNdNCNADPQVUryfAl4n
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:22 2026 by rpki-client