Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/etfgBsu-roNKpTur1pxThz9Fty8.roa
File: etfgBsu-roNKpTur1pxThz9Fty8.roa (raw, json)
Hash identifier: t6BKDhi6DeRPBuJrkIbiHfHBaqibLItCOSZCg5shE08=
Subject key identifier: 7A:D7:E0:06:CB:BE:AE:83:4A:A5:3B:AB:D6:9C:53:87:3F:45:B7:2F
Certificate issuer: /CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Certificate serial: 01993863E7D5BCB830B9F21620025EB42E5E
Authority key identifier: D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/etfgBsu-roNKpTur1pxThz9Fty8.roa
Signing time: Thu 11 Sep 2025 10:48:15 +0000
ROA not before: Thu 11 Sep 2025 10:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216450
IP address blocks: 85.239.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:63:e7:d5:bc:b8:30:b9:f2:16:20:02:5e:b4:2e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Validity
Not Before: Sep 11 10:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ad7e006cbbeae834aa53babd69c53873f45b72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cf:5f:bf:9e:a4:29:0b:73:46:8a:89:c1:12:
2f:1d:73:17:4d:7c:43:33:a6:aa:e4:e7:4b:fc:94:
81:6e:a1:1a:05:02:bd:6c:1e:74:e1:3e:61:5d:88:
62:91:7a:a8:6b:bc:8a:29:a3:7c:87:d0:67:b9:df:
a5:06:b3:b6:69:17:2a:71:98:e0:75:3c:cf:af:94:
b9:9a:35:58:36:62:ef:1a:1a:45:12:83:d7:e1:56:
de:74:10:a9:24:e2:85:69:38:95:68:03:8a:88:fe:
a2:46:c8:a0:ff:39:f6:79:aa:07:d2:aa:5d:19:20:
03:59:ef:ea:03:3e:92:84:44:61:1d:90:5b:9a:60:
82:8d:89:c2:a0:9e:43:0e:11:67:67:73:37:d7:7b:
1d:64:2b:72:e6:6d:3b:3a:43:4b:36:a5:b2:97:8c:
ff:38:8e:2e:da:54:23:11:38:86:4e:69:d0:c0:65:
22:13:1d:e0:af:66:b2:95:ac:b9:e1:2d:44:0e:a2:
04:38:b6:f8:f5:f3:b5:d4:6b:b3:73:7d:e3:d7:c8:
2e:87:4e:7c:be:8d:6f:0f:c6:82:ff:16:70:ab:3b:
a5:09:e7:0f:e3:b3:27:48:a1:d1:8d:77:86:84:7f:
fc:8d:9e:48:a3:fe:3c:6d:b3:39:61:de:13:6a:67:
41:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D7:E0:06:CB:BE:AE:83:4A:A5:3B:AB:D6:9C:53:87:3F:45:B7:2F
X509v3 Authority Key Identifier:
keyid:D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/etfgBsu-roNKpTur1pxThz9Fty8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.92.0/22
Signature Algorithm: sha256WithRSAEncryption
91:b4:fc:48:d0:e6:38:73:8d:d0:fe:32:2c:d1:64:96:59:3c:
4f:0f:ff:26:72:3f:fe:37:44:41:ce:0d:c1:df:4a:4a:d1:ff:
69:ae:39:a3:c4:ed:04:c7:fd:3e:fc:c4:d3:16:72:01:6f:8d:
91:c8:27:88:46:0e:dd:de:2c:1c:6f:5d:a6:14:85:32:dc:a4:
66:a8:60:97:ff:2a:3e:20:6a:63:a0:bc:4a:6e:ba:33:9d:15:
b4:65:43:b4:e9:39:ce:8f:e5:d9:78:0b:f1:88:ed:e6:93:eb:
44:b8:50:bb:ad:e7:a8:62:b1:c0:17:f3:7b:72:44:67:9c:cb:
e8:b3:18:33:52:6a:50:10:f8:3e:18:5c:f5:ca:88:3e:a2:44:
88:18:b0:8e:d4:ea:84:9a:ce:51:63:61:05:78:90:94:8a:d5:
6a:3e:08:b9:83:cf:45:e6:46:2f:b7:b3:e4:91:00:ef:37:6c:
c3:20:7d:75:e0:48:48:8e:bb:1b:b6:60:8a:23:d6:f0:3c:c8:
a5:0d:33:25:b4:a3:03:0c:a1:79:77:e1:f1:d9:fe:c7:4d:5d:
d4:a3:2c:06:e4:d2:20:e8:4b:47:64:05:24:85:5e:73:18:a2:
56:77:60:a0:b9:4a:2b:dc:ce:a7:94:94:ba:79:38:c1:29:85:
65:ed:47:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:36 2025 by rpki-client