Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/ET7Ww-Pz-K3BSE0NQA5iLoY01kw.roa
File: ET7Ww-Pz-K3BSE0NQA5iLoY01kw.roa (raw, json)
Hash identifier: OD/HeBaoQdSLTiyfZzj0e108oz+4+axO1jk3ZlLPhaM=
Subject key identifier: 11:3E:D6:C3:E3:F3:F8:AD:C1:48:4D:0D:40:0E:62:2E:86:34:D6:4C
Certificate issuer: /CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Certificate serial: 0199727A06836E4AF8269EE4DDB64822F631
Authority key identifier: A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/ET7Ww-Pz-K3BSE0NQA5iLoY01kw.roa
Signing time: Mon 22 Sep 2025 17:30:23 +0000
ROA not before: Mon 22 Sep 2025 17:30:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50418
IP address blocks: 185.84.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:72:7a:06:83:6e:4a:f8:26:9e:e4:dd:b6:48:22:f6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Validity
Not Before: Sep 22 17:30:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=113ed6c3e3f3f8adc1484d0d400e622e8634d64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3e:2e:8d:7f:bf:89:5b:ce:9f:6b:c1:53:f2:
ac:70:36:26:e0:d2:92:10:1e:ec:72:1a:4f:26:bb:
ec:65:6b:a4:6d:c0:8e:ca:ec:ea:b0:59:44:ce:90:
9f:0e:0e:b6:ce:3d:fa:9a:c6:78:a3:bf:c8:0d:bb:
21:92:69:7b:0e:fe:50:33:8c:34:3f:9d:1a:b0:ff:
ec:35:ef:fd:2d:61:8f:0f:fa:57:8d:39:99:5c:cb:
50:4e:61:0e:b9:3f:68:83:74:01:ee:2e:d9:15:4b:
5f:ba:11:f8:24:b5:52:da:28:1f:bc:3e:57:2a:11:
7f:c5:e4:48:9d:dd:78:e8:ff:c6:79:86:a4:bc:aa:
fd:96:33:59:1e:13:e3:20:ee:ec:03:31:23:eb:95:
97:23:e2:b1:95:dd:92:c3:6b:a4:9b:9a:5d:13:0a:
b6:17:3f:3f:ab:66:87:8b:93:a1:2b:8a:e5:c6:15:
2b:d8:57:6f:d8:8b:da:b0:c4:9a:65:60:db:ce:71:
37:35:e6:b5:af:f0:76:6b:31:7d:1c:23:cd:31:ae:
d1:c1:6d:e0:e3:e2:46:5a:cd:3c:41:38:5b:36:5a:
97:c9:7e:22:aa:8c:f2:f0:ee:78:2a:a3:8d:ed:00:
36:58:f7:41:a8:2c:63:d6:16:6a:96:87:c3:13:63:
eb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3E:D6:C3:E3:F3:F8:AD:C1:48:4D:0D:40:0E:62:2E:86:34:D6:4C
X509v3 Authority Key Identifier:
keyid:A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/ET7Ww-Pz-K3BSE0NQA5iLoY01kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.32.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:c2:4e:d7:28:be:40:4e:66:60:28:4c:89:25:25:ce:f7:50:
fb:9b:c1:d7:97:e6:dd:72:97:03:d3:c9:28:f8:ad:73:d0:3d:
4f:f9:e3:7f:11:15:87:f4:bd:72:cf:65:88:6e:57:9b:50:52:
e5:1e:d2:7b:c4:cc:57:d1:1f:1d:9d:14:21:a3:17:8a:c9:f5:
27:0e:27:cd:f6:ee:c3:c3:a4:7b:16:d3:f4:74:5f:c3:fa:b8:
c6:eb:7e:c6:52:28:d9:bb:a6:51:a6:f7:e9:de:00:36:52:ea:
c7:13:b4:80:ba:4c:b8:32:16:26:a0:e3:e1:33:44:cf:c1:1f:
a0:70:7d:ef:dd:8e:54:3f:8a:9e:a2:a7:bd:35:88:36:fd:de:
0a:17:86:ef:03:d1:ce:e8:90:a0:7a:5e:4c:c8:8c:a8:2e:0b:
29:21:08:fb:f8:10:83:4b:27:e9:51:d4:30:36:c6:09:00:5c:
84:8e:ef:95:90:4d:02:f1:2d:de:2e:83:6c:0d:83:35:c5:7f:
9c:90:cb:30:31:76:fe:73:cf:58:f5:51:64:a7:85:09:6f:a5:
a7:06:ab:63:fd:fc:86:36:b1:78:ca:19:02:6f:cb:45:fa:48:
b2:49:b6:a5:10:da:40:ec:44:92:d1:d0:b7:d8:ff:d4:1a:96:
92:2f:91:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:54:56 2025 by rpki-client