Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/2SQkaDFiykw7S_htqTdZsioPTwk.roa
File: 2SQkaDFiykw7S_htqTdZsioPTwk.roa (raw, json)
Hash identifier: 0/kTMk+D78c5iSsKz/EIBR+DNPDmk0IqhFjX+lwI6LU=
Subject key identifier: D9:24:24:68:31:62:CA:4C:3B:4B:F8:6D:A9:37:59:B2:2A:0F:4F:09
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 019940D57739BB43060BFD7CD2EC99BD071E
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/2SQkaDFiykw7S_htqTdZsioPTwk.roa
Signing time: Sat 13 Sep 2025 02:09:15 +0000
ROA not before: Sat 13 Sep 2025 02:09:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11967
IP address blocks: 86.110.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:40:d5:77:39:bb:43:06:0b:fd:7c:d2:ec:99:bd:07:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Sep 13 02:09:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d92424683162ca4c3b4bf86da93759b22a0f4f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:79:36:38:1c:a4:be:f9:5c:c8:a9:83:c6:
f0:41:71:f5:5e:f3:82:af:53:4e:ec:d3:23:d2:82:
d7:97:73:8b:db:d9:86:7c:39:ca:28:8c:b5:d2:27:
23:a3:c0:4c:68:e2:54:2c:f0:b0:a7:e7:fc:b9:d5:
8c:e6:d3:1f:b6:60:aa:3a:06:4f:ab:9d:97:bf:5f:
1b:f7:f6:03:cd:ab:97:81:a6:d4:88:6a:e8:be:b2:
d3:a9:8b:02:9e:cf:2b:34:1c:4c:e1:fa:bd:e9:76:
b1:21:f5:8f:60:79:0a:d4:88:b9:a6:6a:c2:3d:31:
3f:b4:b6:c5:db:4d:f4:e8:91:11:8c:46:2a:15:dd:
39:13:d6:3a:85:8e:b1:82:bc:29:5c:c7:ff:59:51:
19:e5:7c:74:5a:c0:42:be:be:23:01:32:12:85:28:
8d:e6:7a:95:c8:f6:6f:e8:8a:ad:d0:de:ff:e5:27:
9b:1a:92:86:83:bc:20:35:ab:56:b8:54:d3:3c:f7:
bd:ea:1d:a4:9c:a0:ce:15:d4:e7:ed:0a:3e:0b:ff:
83:cd:19:cd:35:db:5a:d9:fb:4d:48:d0:2e:c8:27:
bc:0a:cb:47:0a:be:a2:46:4d:c3:d4:89:ed:3a:17:
46:b3:fb:94:48:0e:7d:72:32:e3:6c:4f:38:73:89:
48:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:24:24:68:31:62:CA:4C:3B:4B:F8:6D:A9:37:59:B2:2A:0F:4F:09
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/2SQkaDFiykw7S_htqTdZsioPTwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.63.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:4f:70:9a:81:5f:48:b9:53:2e:cb:07:46:bf:62:b3:8c:1c:
e2:19:31:47:63:f0:06:fb:59:63:01:40:e0:5a:92:0f:e3:3a:
ce:47:01:a6:bc:8f:cc:40:30:ed:cf:1d:5b:84:9b:e8:f9:2a:
17:34:66:76:16:f2:70:d5:b9:99:cb:18:cf:5f:bf:7d:2f:5e:
b6:de:49:61:91:86:f8:15:7e:6e:a9:b1:71:2b:7a:d5:5d:da:
d5:fa:c9:92:d4:45:31:91:c4:08:27:77:96:9e:23:a0:28:eb:
73:2a:65:0e:cf:1b:e7:2a:4e:18:25:cd:c0:88:c1:de:67:7c:
d3:3a:21:16:c8:9d:1e:e5:62:73:94:17:33:ea:f4:13:f6:52:
b6:57:b7:6a:0f:93:0b:98:4f:14:5a:5b:97:5e:be:8a:78:2c:
f5:e4:b4:1f:48:ad:91:fd:b8:0e:44:cd:ff:b0:19:5a:77:13:
6a:38:1f:25:a9:3c:6e:6a:31:da:86:97:ae:9f:9e:51:af:a1:
2b:5f:a3:6d:93:ed:84:1e:b2:b9:76:5d:79:6b:b8:99:7f:eb:
68:28:65:91:4c:c0:ef:af:08:43:c0:12:27:d2:80:86:0e:9e:
3d:88:23:18:16:c1:df:e4:9e:3d:a6:00:fd:99:c2:a2:3d:04:
fc:bc:d7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:24 2025 by rpki-client