Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/Q2qnyLydoV_350r3ktyvCayeB4A.roa
File: Q2qnyLydoV_350r3ktyvCayeB4A.roa (raw, json)
Hash identifier: VKvgtQJ7GEIFvBeuyv+3v21yRGy73uTpFRdHzIJJWeo=
Subject key identifier: 43:6A:A7:C8:BC:9D:A1:5F:F7:E7:4A:F7:92:DC:AF:09:AC:9E:07:80
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0199394B4BC1B044121ACFC16587DCEF7C34
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/Q2qnyLydoV_350r3ktyvCayeB4A.roa
Signing time: Thu 11 Sep 2025 15:00:59 +0000
ROA not before: Thu 11 Sep 2025 15:00:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211854
IP address blocks: 86.110.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:4b:4b:c1:b0:44:12:1a:cf:c1:65:87:dc:ef:7c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Sep 11 15:00:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=436aa7c8bc9da15ff7e74af792dcaf09ac9e0780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:02:34:b1:dc:5a:7a:aa:7e:ea:63:c1:c0:1b:
c3:7e:2c:8c:7f:a7:28:ef:6c:40:30:02:dd:de:9c:
59:64:1e:88:00:7a:f0:48:a3:b8:b1:0c:6a:82:e6:
29:eb:d9:1d:77:d3:23:51:f9:19:8f:3c:6c:b4:a6:
d8:6e:cd:6e:32:04:71:11:a9:ff:cd:f3:24:57:5f:
15:fd:54:1d:30:de:f2:f0:be:87:01:a1:8e:84:2e:
a3:90:99:8f:21:2e:53:71:6c:9b:08:fb:59:8f:38:
4a:b8:58:69:78:91:50:c2:19:ad:21:9c:bb:fd:8a:
0c:78:2e:01:52:92:99:72:fb:ca:d1:c1:c0:fd:94:
90:76:0f:62:56:ca:75:a2:75:66:10:29:26:7d:18:
be:db:6f:ac:99:53:bc:e5:83:35:18:0d:30:90:da:
b8:d4:3d:fd:25:29:2a:1b:00:3f:1c:99:c4:4d:3d:
a4:42:83:49:d5:76:8c:b7:d5:4b:e8:cd:2c:37:47:
12:db:bb:35:99:ba:82:a8:c6:35:0d:63:e7:25:82:
43:ec:6e:99:b0:59:05:6c:49:e2:e4:da:78:8b:be:
db:f5:47:43:44:e7:c9:e3:e6:d8:d6:7c:16:bf:4b:
d4:0d:42:c7:c2:bb:4f:63:f5:be:22:53:b5:de:79:
01:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6A:A7:C8:BC:9D:A1:5F:F7:E7:4A:F7:92:DC:AF:09:AC:9E:07:80
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/Q2qnyLydoV_350r3ktyvCayeB4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.61.0/24
Signature Algorithm: sha256WithRSAEncryption
41:8e:4d:c6:9d:cc:1a:49:c8:a3:02:57:fa:f0:10:95:fe:9b:
cc:d5:ce:3f:cd:b4:4d:d2:ed:92:a8:9b:6d:c4:f5:c7:57:74:
a0:99:88:92:c1:4e:56:95:4c:23:29:f3:bd:e4:73:bf:27:94:
b1:e6:55:11:b0:35:db:41:19:68:bc:7c:e1:e9:2a:60:0f:f2:
f2:00:69:40:53:e7:9e:3d:6c:aa:15:fe:7f:74:43:c1:c8:a0:
4e:a5:b9:ab:ef:3a:38:3e:c5:83:e8:7a:c4:26:4a:a3:2c:d3:
51:34:c6:eb:f2:1a:06:c3:dd:88:f1:89:93:c6:e6:cd:76:e7:
ce:30:00:1f:de:65:cd:80:54:c8:7d:38:53:33:75:69:9a:2e:
b3:7d:bf:81:4f:63:df:68:d6:fb:bf:ee:4f:43:c4:7c:4a:12:
3f:c1:27:b5:36:cd:7d:f2:14:df:74:d1:43:27:47:fd:1e:c7:
c1:a9:06:8b:5c:cc:d6:e2:b7:63:d5:40:c8:c0:70:d6:cc:81:
dd:11:85:62:9e:a2:dc:34:7f:b4:c4:e2:17:f5:e6:df:59:4f:
e2:7d:12:2d:6c:44:d0:6e:8a:63:cb:68:ea:5d:3d:e5:23:cc:
e9:6f:40:b9:e3:a3:0b:f5:61:36:73:86:c7:f9:9c:47:ca:48:
21:8e:7c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:31:13 2025 by rpki-client