Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/ETcH2IvsrV9frQQAiGHCydePvXc.roa
File: ETcH2IvsrV9frQQAiGHCydePvXc.roa (raw, json)
Hash identifier: vnxbYaqSpCvvPsvgeAGAJuaPg4alEmcLbxdQJvK4GFI=
Subject key identifier: 11:37:07:D8:8B:EC:AD:5F:5F:AD:04:00:88:61:C2:C9:D7:8F:BD:77
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 019A319A3D70B5DC985FA91A3E0757A6FAA4
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/ETcH2IvsrV9frQQAiGHCydePvXc.roa
Signing time: Wed 29 Oct 2025 20:13:03 +0000
ROA not before: Wed 29 Oct 2025 20:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214271
IP address blocks: 81.31.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:31:9a:3d:70:b5:dc:98:5f:a9:1a:3e:07:57:a6:fa:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Oct 29 20:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=113707d88becad5f5fad04008861c2c9d78fbd77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:b1:99:cf:af:22:48:0c:b6:14:59:89:b5:
48:18:e1:5d:af:ac:2f:14:b0:d0:05:10:4e:2d:45:
d1:59:58:e4:81:bf:d2:5c:3a:c2:40:a1:48:2e:33:
73:bc:18:d3:e2:bd:f8:7e:75:5c:86:d7:30:18:9c:
1f:d4:e1:87:e9:aa:40:fa:c4:95:81:89:7f:37:ea:
fe:33:66:3c:68:65:c2:e8:9f:e8:0e:d1:8f:c1:10:
b9:21:c7:93:99:b4:85:df:d2:0d:01:11:18:b7:89:
63:c6:94:24:5a:e7:3f:1d:35:5a:30:13:9b:6b:0e:
b6:a9:74:f5:84:d0:cf:33:ae:04:c3:5e:b0:dc:97:
42:a8:bf:3a:f2:86:b8:b2:f4:f7:60:9d:64:94:13:
17:45:cc:92:14:45:ac:d2:a0:12:3a:2c:3a:53:e0:
17:f0:88:83:68:bc:7f:49:cc:63:f6:9a:da:19:ca:
9a:8b:6a:e6:03:7d:5e:67:57:48:75:29:ed:72:25:
5e:4e:f7:60:94:76:d5:15:b6:35:f7:84:91:f0:6a:
55:71:2e:67:5c:f6:3f:29:55:dc:29:9d:1e:91:07:
e2:ee:04:3c:6f:29:e5:29:f6:2c:2d:ce:26:4c:a4:
22:46:3a:d2:f2:07:d9:b4:04:b0:95:f0:93:fe:3b:
e0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:37:07:D8:8B:EC:AD:5F:5F:AD:04:00:88:61:C2:C9:D7:8F:BD:77
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/ETcH2IvsrV9frQQAiGHCydePvXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.231.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:f9:e9:0b:f2:c3:90:6a:8b:c7:27:e3:28:54:4d:3c:52:65:
ba:fb:df:ec:db:d0:49:30:06:9c:03:b0:0c:65:00:8c:39:f8:
e9:1b:6a:70:45:7c:f4:6f:df:4d:a8:b1:9e:93:07:94:e8:e6:
f0:6d:64:01:f0:2e:99:e4:bb:8a:a8:4e:25:23:1b:1e:cd:49:
f2:c6:28:a2:a6:45:95:72:1e:d2:60:05:31:62:fa:59:44:5d:
9f:9b:e6:2a:85:15:8f:65:00:6d:7c:40:ea:be:25:f1:d0:4d:
6b:fd:de:c0:22:81:e1:1e:c6:d7:cf:09:10:fd:cb:4d:4a:2f:
6d:70:94:44:82:81:04:b9:7d:f8:35:5f:15:30:47:b1:c0:ee:
8f:43:7f:78:c1:db:54:eb:75:da:17:2e:8e:57:f3:92:8d:fb:
3a:77:a7:db:b4:a2:13:21:9c:bf:e3:e1:8a:52:06:77:54:33:
2d:7d:ba:43:25:7a:b9:38:04:2f:ae:a7:2a:be:fe:c7:31:c8:
c1:5d:c6:f6:80:a5:68:5d:b2:0d:46:98:ae:94:c3:f3:75:1c:
b5:88:13:84:be:2a:16:9a:7e:3a:f9:27:9c:b5:0b:cb:7f:32:
02:5f:45:dc:44:79:55:28:97:6f:7d:01:2d:97:59:33:90:87:
d3:90:d8:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZoxmj1wtdyYX6kaPgdXpvqkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy
YjE4MWIwHhcNMjUxMDI5MjAxMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTM3MDdkODhiZWNhZDVmNWZhZDA0MDA4ODYxYzJjOWQ3OGZiZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreCxmc+vIkgMthRZibVIGOFdr6wv
FLDQBRBOLUXRWVjkgb/SXDrCQKFILjNzvBjT4r34fnVchtcwGJwf1OGH6apA+sSV
gYl/N+r+M2Y8aGXC6J/oDtGPwRC5IceTmbSF39INAREYt4ljxpQkWuc/HTVaMBOb
aw62qXT1hNDPM64Ew16w3JdCqL868oa4svT3YJ1klBMXRcySFEWs0qASOiw6U+AX
8IiDaLx/Scxj9praGcqai2rmA31eZ1dIdSntciVeTvdglHbVFbY194SR8GpVcS5n
XPY/KVXcKZ0ekQfi7gQ8bynlKfYsLc4mTKQiRjrS8gfZtASwlfCT/jvgFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBE3B9iL7K1fX60EAIhhwsnXj713MB8GA1UdIwQY
MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct
YWE4NTllMTkyYjE2LzEvRVRjSDJJdnNyVjlmclFRQWlHSEN5ZGVQdlhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2
LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR/nMA0G
CSqGSIb3DQEBCwUAA4IBAQBO+ekL8sOQaovHJ+MoVE08UmW6+9/s29BJMAacA7AM
ZQCMOfjpG2pwRXz0b99NqLGekweU6ObwbWQB8C6Z5LuKqE4lIxsezUnyxiiipkWV
ch7SYAUxYvpZRF2fm+YqhRWPZQBtfEDqviXx0E1r/d7AIoHhHsbXzwkQ/ctNSi9t
cJREgoEEuX34NV8VMEexwO6PQ394wdtU63XaFy6OV/OSjfs6d6fbtKITIZy/4+GK
UgZ3VDMtfbpDJXq5OAQvrqcqvv7HMcjBXcb2gKVoXbINRpiulMPzdRy1iBOEvioW
mn46+SectQvLfzICX0XcRHlVKJdvfQEtl1kzkIfTkNjT
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:34:41 2025 by rpki-client