Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ETp4ram_5wDX-QYsHkSwfey16LY.roa
File: ETp4ram_5wDX-QYsHkSwfey16LY.roa (raw, json)
Hash identifier: fc9E3PvcS1jfb9J0ZMzkrwdWGh4l1nHW4cyDiTGJbiU=
Subject key identifier: 11:3A:78:AD:A9:BF:E7:00:D7:F9:06:2C:1E:44:B0:7D:EC:B5:E8:B6
Certificate issuer: /CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Certificate serial: 019980D4A1B0335A68D887928EDE0C80D27D
Authority key identifier: 8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ETp4ram_5wDX-QYsHkSwfey16LY.roa
Signing time: Thu 25 Sep 2025 12:24:02 +0000
ROA not before: Thu 25 Sep 2025 12:24:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 194.169.100.0/24 maxlen: 24
194.169.116.0/24 maxlen: 24
194.169.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:80:d4:a1:b0:33:5a:68:d8:87:92:8e:de:0c:80:d2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Validity
Not Before: Sep 25 12:24:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=113a78ada9bfe700d7f9062c1e44b07decb5e8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6f:c9:3c:4b:97:c5:98:09:99:0c:6f:bc:3e:
df:09:5a:55:52:5c:17:a2:4c:c1:1d:e4:a5:b1:86:
20:54:50:e7:83:90:9a:ea:9f:02:3c:71:3e:7a:59:
81:24:48:56:c8:d5:4d:c1:76:09:48:ff:a7:e4:55:
9b:1a:28:fe:f5:30:19:28:de:8c:d1:18:72:79:6f:
df:a8:55:27:29:bd:ed:e8:19:e7:48:58:f2:d6:2e:
59:e0:4d:19:83:94:fc:2d:4b:27:3b:17:45:b0:ca:
7a:f2:9f:14:1d:1c:25:50:64:ff:4c:b8:29:f6:eb:
0d:a4:a5:46:96:a2:06:d7:68:97:a0:f5:96:aa:94:
ce:dd:f4:fc:58:a5:c4:bd:87:c7:2a:01:19:e0:00:
49:7a:0e:10:b8:63:02:0c:62:fb:aa:23:6c:34:de:
45:08:dc:79:8c:30:e9:f1:ad:af:29:87:f0:e3:6e:
3b:b1:fd:58:06:5e:c3:68:6c:ff:e6:25:35:3d:77:
65:5d:dc:b6:52:00:40:63:bc:4e:fa:42:bb:0e:44:
f1:b4:2e:d9:73:5c:68:3a:cb:a3:e4:89:f1:b2:3f:
64:96:2c:7f:ac:4e:4f:e3:c6:b0:03:1d:77:8e:4b:
cf:c7:7d:cf:cf:71:bc:69:4e:42:91:38:f3:14:4a:
d0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3A:78:AD:A9:BF:E7:00:D7:F9:06:2C:1E:44:B0:7D:EC:B5:E8:B6
X509v3 Authority Key Identifier:
keyid:8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ETp4ram_5wDX-QYsHkSwfey16LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.100.0/24
194.169.116.0/23
Signature Algorithm: sha256WithRSAEncryption
10:64:45:d7:cd:51:ac:20:f1:d7:d0:0a:16:63:f9:5b:26:9c:
4a:71:0d:28:dd:f1:b7:0b:99:81:e2:5e:e4:ba:aa:16:e0:78:
0d:c2:e2:3f:ff:23:60:c7:90:69:66:8c:b0:48:cf:5d:af:2e:
4d:2e:a9:bb:9d:20:fa:7c:87:7d:e4:86:a0:25:03:4f:94:e6:
8c:50:f6:71:79:f7:5a:93:0e:5a:7f:c5:0a:44:f0:f5:b8:d8:
56:9f:71:6f:f9:ce:7a:97:23:0c:73:fe:1d:43:80:f2:7e:4d:
7a:79:a0:0f:2f:3b:8d:d4:fc:32:50:c0:40:96:9f:fc:a0:43:
e5:19:37:cd:ae:2c:fe:89:0a:5a:fe:e3:3f:7d:f8:5c:e2:40:
9a:dd:ee:2a:a8:35:e8:f3:23:1b:ba:8d:50:28:df:08:87:49:
56:0e:b4:f3:81:b7:cf:f9:4e:6e:59:c8:a5:48:65:57:c1:d9:
4c:e4:d2:ed:78:74:87:c5:f7:89:fd:17:bd:96:5d:ee:d1:13:
de:df:c2:40:dd:3d:56:1f:2e:09:c1:9e:ab:83:34:bd:02:a4:
de:64:e9:57:8d:68:82:46:57:be:09:d2:5a:df:a5:47:2e:9f:
fd:90:3c:40:50:44:b9:21:6d:bd:ec:2f:3d:f0:e0:75:8e:44:
a3:ab:13:0a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZmA1KGwM1po2IeSjt4MgNJ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMmUyZWUzYmU3ZDc1MjVlZDc0YjdhYWUwN2U5MmFlY2Fm
ODQ5MzYwHhcNMjUwOTI1MTIyNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTNhNzhhZGE5YmZlNzAwZDdmOTA2MmMxZTQ0YjA3ZGVjYjVlOGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W/JPEuXxZgJmQxvvD7fCVpVUlwX
okzBHeSlsYYgVFDng5Ca6p8CPHE+elmBJEhWyNVNwXYJSP+n5FWbGij+9TAZKN6M
0RhyeW/fqFUnKb3t6BnnSFjy1i5Z4E0Zg5T8LUsnOxdFsMp68p8UHRwlUGT/TLgp
9usNpKVGlqIG12iXoPWWqpTO3fT8WKXEvYfHKgEZ4ABJeg4QuGMCDGL7qiNsNN5F
CNx5jDDp8a2vKYfw4247sf1YBl7DaGz/5iU1PXdlXdy2UgBAY7xO+kK7DkTxtC7Z
c1xoOsuj5Inxsj9klix/rE5P48awAx13jkvPx33Pz3G8aU5CkTjzFErQfwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBE6eK2pv+cA1/kGLB5EsH3stei2MB8GA1UdIwQY
MBaAFIouLuO+fXUl7XS3quB+kq7K+Ek2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8xMTk3ZjItN2Y4ZS00OGU0LWJkYTkt
ZjViYjJiMmQ2M2JlLzEvRVRwNHJhbV81d0RYLVFZc0hrU3dmZXkxNkxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8xMTk3ZjItN2Y4ZS00OGU0LWJkYTktZjViYjJiMmQ2M2Jl
LzEvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwqlkAwQB
wql0MA0GCSqGSIb3DQEBCwUAA4IBAQAQZEXXzVGsIPHX0AoWY/lbJpxKcQ0o3fG3
C5mB4l7kuqoW4HgNwuI//yNgx5BpZoywSM9dry5NLqm7nSD6fId95IagJQNPlOaM
UPZxefdakw5af8UKRPD1uNhWn3Fv+c56lyMMc/4dQ4Dyfk16eaAPLzuN1PwyUMBA
lp/8oEPlGTfNriz+iQpa/uM/ffhc4kCa3e4qqDXo8yMbuo1QKN8Ih0lWDrTzgbfP
+U5uWcilSGVXwdlM5NLteHSHxfeJ/Re9ll3u0RPe38JA3T1WHy4JwZ6rgzS9AqTe
ZOlXjWiCRle+CdJa36VHLp/9kDxAUES5IW297C898OB1jkSjqxMK
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:21 2025 by rpki-client