Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/J899_ESpHEgZ9oMsKVtjOU0St1Y.roa
File: J899_ESpHEgZ9oMsKVtjOU0St1Y.roa (raw, json)
Hash identifier: NCRXSTGqeJuy3B726xguntAQJ1YJyflz+RYU37KVue8=
Subject key identifier: 27:CF:7D:FC:44:A9:1C:48:19:F6:83:2C:29:5B:63:39:4D:12:B7:56
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0198998CE651A74AECA466A93C5E40A81C2B
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/J899_ESpHEgZ9oMsKVtjOU0St1Y.roa
Signing time: Mon 11 Aug 2025 14:33:24 +0000
ROA not before: Mon 11 Aug 2025 14:33:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 86.110.48.0/24 maxlen: 24
86.110.50.0/24 maxlen: 24
86.110.51.0/24 maxlen: 24
86.110.54.0/24 maxlen: 24
86.110.55.0/24 maxlen: 24
86.110.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:99:8c:e6:51:a7:4a:ec:a4:66:a9:3c:5e:40:a8:1c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Aug 11 14:33:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27cf7dfc44a91c4819f6832c295b63394d12b756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:3f:c1:77:64:2a:c5:ba:42:5b:18:07:3f:
ee:3b:85:e3:ee:5e:11:25:36:52:af:4d:a7:09:3b:
10:ab:41:b3:f6:b9:a3:c2:af:78:7d:9e:22:f8:4c:
a3:1e:50:2e:55:d4:e3:76:fd:db:93:e5:b1:3e:f9:
31:e4:db:41:15:e1:c6:e1:39:60:7a:87:10:71:f2:
1d:17:a5:70:e2:cf:28:72:04:5c:26:eb:17:54:8c:
fd:55:16:da:8d:28:33:8e:e4:54:50:72:b4:2c:f2:
81:be:71:24:a4:5a:0a:76:c3:e0:8f:b5:c3:8d:64:
1e:58:3a:68:01:d5:c8:6b:f7:75:5c:36:13:67:d6:
ae:ce:52:45:bb:fd:ca:b1:aa:63:26:6f:7f:c2:1b:
6d:d9:ba:26:12:be:82:89:6f:3f:a9:a7:c7:55:27:
71:fa:da:c8:21:dd:91:df:11:6f:cb:5a:64:e4:1b:
4b:07:f4:85:16:f9:4e:7d:89:05:d0:b7:c6:da:61:
95:75:a6:63:ba:67:57:b5:9e:74:b7:13:e2:35:30:
cf:8a:ca:2c:86:2d:8c:79:6a:7f:e9:f2:72:c7:b6:
d3:d1:85:9b:54:f0:bc:76:16:d2:a5:45:cb:1f:83:
41:55:17:ef:dd:30:77:8c:26:d2:be:cc:e6:f4:bb:
a2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CF:7D:FC:44:A9:1C:48:19:F6:83:2C:29:5B:63:39:4D:12:B7:56
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/J899_ESpHEgZ9oMsKVtjOU0St1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.48.0/24
86.110.50.0/23
86.110.54.0/23
86.110.59.0/24
Signature Algorithm: sha256WithRSAEncryption
48:dc:2b:8c:9c:fd:dd:57:5b:27:6e:6c:a9:b0:1f:7a:83:c1:
3f:40:aa:ed:18:1f:8d:83:8b:d2:8c:e0:a6:7d:f2:b1:b7:90:
1c:38:5f:1e:6c:e7:83:6b:83:8a:44:d9:61:59:ea:b6:e9:fb:
fb:63:a1:07:0c:8a:9e:6b:d5:35:6d:b2:96:39:64:74:f0:38:
bb:13:03:ad:a3:2e:22:b9:45:23:3d:c0:a8:ad:c7:cf:a5:d1:
5b:8a:8b:6b:11:6e:66:78:59:60:94:da:fa:e4:14:b4:f7:e0:
ce:88:28:22:fd:f0:be:c4:85:5c:7f:88:01:67:b2:a9:96:38:
cc:c1:ba:95:86:4f:79:ad:d8:df:9c:36:00:a8:5a:e2:79:95:
f2:18:f0:f1:19:25:90:aa:9d:71:39:42:e5:5a:fe:b9:e2:d3:
09:05:0f:be:5b:a7:6f:f0:b5:71:3c:51:17:6e:53:ad:75:4a:
b7:0a:ac:fb:4f:8b:0d:8b:03:32:40:43:c5:75:d1:d2:f3:1c:
f6:61:3a:64:24:61:c4:5e:8c:cb:4f:09:08:76:ec:96:06:4b:
d8:33:2a:07:d0:f8:81:91:8d:7a:89:09:61:31:d3:13:3b:a1:
66:fa:1c:ea:3d:03:b4:fd:19:8b:79:eb:05:76:81:a1:d3:cb:
6c:38:2c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:26 2025 by rpki-client