Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/Pqgs8GxJxd3RB-9nQ3zYGfd-UqQ.roa
File: Pqgs8GxJxd3RB-9nQ3zYGfd-UqQ.roa (raw, json)
Hash identifier: M6uYkLbVdZzoxMrzslJAyf+dKNKxxdwwoY8rXjymTu4=
Subject key identifier: 3E:A8:2C:F0:6C:49:C5:DD:D1:07:EF:67:43:7C:D8:19:F7:7E:52:A4
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0197A179C15965A2C6B31A7BEA5346DFB93F
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/Pqgs8GxJxd3RB-9nQ3zYGfd-UqQ.roa
Signing time: Tue 24 Jun 2025 10:26:40 +0000
ROA not before: Tue 24 Jun 2025 10:26:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 86.110.42.0/24 maxlen: 24
86.110.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a1:79:c1:59:65:a2:c6:b3:1a:7b:ea:53:46:df:b9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Jun 24 10:26:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ea82cf06c49c5ddd107ef67437cd819f77e52a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:89:10:6e:a9:6d:6a:b7:3b:ae:ff:44:51:65:
ca:d1:4d:f4:a2:8a:59:29:3a:e5:f4:c3:da:89:4b:
79:f2:c1:66:02:95:45:d0:6a:b2:ed:bf:5d:05:ea:
e4:2b:f5:bb:d9:f1:2a:5d:32:d0:47:f4:8f:0b:b4:
04:fa:c6:4b:9a:de:af:d3:db:0b:5b:fc:b0:af:ab:
a2:ee:be:de:28:7b:9e:90:3f:83:0c:1b:fa:ae:89:
6d:db:b4:d4:55:98:34:e4:bd:15:13:c3:4a:2f:50:
1f:10:f3:4a:43:ed:36:0f:e6:48:18:10:d3:7d:37:
61:00:aa:f4:b0:f1:76:30:bc:09:cc:bb:7e:84:7f:
44:75:98:37:79:f8:00:c1:78:18:39:5d:a1:ce:0d:
81:ba:1a:e0:c5:7f:8f:36:42:58:f1:f5:16:58:e5:
eb:1e:ee:81:bc:f2:35:e0:76:e9:3f:ea:cd:04:f8:
b1:3c:67:2e:34:70:1f:49:ab:de:8c:b3:35:2f:44:
24:ee:af:48:71:5c:88:50:39:8b:c1:9f:37:93:4f:
41:5a:81:73:43:9a:05:94:0a:cd:b1:84:4c:de:90:
6b:50:63:1c:38:54:68:24:fd:67:93:8d:8d:43:4c:
05:f7:39:59:89:36:6f:51:e4:e8:36:35:6d:97:2d:
e4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A8:2C:F0:6C:49:C5:DD:D1:07:EF:67:43:7C:D8:19:F7:7E:52:A4
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/Pqgs8GxJxd3RB-9nQ3zYGfd-UqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.42.0/24
86.110.49.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:f6:bd:af:44:47:28:c1:21:d0:a9:20:d8:d6:b4:bb:13:40:
c2:f7:90:23:ba:1c:ad:fd:a4:40:94:4c:61:85:a5:fc:6a:fd:
0b:9f:d8:bb:53:4a:6e:c1:43:60:57:c4:90:00:64:f0:73:d6:
bc:76:3b:c3:5e:eb:d3:3d:ed:2c:db:c2:45:87:40:d7:c5:03:
f0:a3:f5:66:0e:7d:8d:a4:fa:4c:34:7a:6d:4b:a5:b3:8c:df:
fc:26:14:8d:c0:f1:d6:38:36:4a:88:ee:23:a4:d0:a7:ce:3b:
f1:0e:bb:9e:b5:1a:a3:a1:b3:59:48:30:19:5f:bb:d7:66:b6:
fd:94:1a:0e:d1:ac:f9:7f:03:e1:19:2b:a9:a8:c6:10:5a:ff:
e3:c6:0c:3c:8e:4d:82:52:d6:54:35:3a:36:65:7e:23:72:83:
be:dc:b2:8c:d1:11:2f:c4:a9:e7:94:a6:00:f8:e5:77:aa:fd:
bc:24:15:78:1f:30:ad:15:7e:38:fe:2a:7f:51:5e:fe:60:dd:
71:d7:d5:9c:a0:19:32:03:6e:ef:d1:2e:8f:61:5f:53:46:ef:
f2:16:38:20:e1:ea:79:0c:48:c2:df:fe:a8:f5:d4:f1:3d:d8:
d8:56:71:60:df:fe:a7:4c:48:16:58:a5:a1:89:64:aa:86:51:
76:28:b1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:27:35 2025 by rpki-client