Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/UzvoNIBCTayYuI6U30KDrmerNuU.roa
File: UzvoNIBCTayYuI6U30KDrmerNuU.roa (raw, json)
Hash identifier: ER4WPs+jwzqBTn7Puvn1t7r63jTe9VQjgZr+2QHU1CA=
Subject key identifier: 53:3B:E8:34:80:42:4D:AC:98:B8:8E:94:DF:42:83:AE:67:AB:36:E5
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 01989AC258525BD5972734D88ECD82B882D5
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/UzvoNIBCTayYuI6U30KDrmerNuU.roa
Signing time: Mon 11 Aug 2025 20:11:24 +0000
ROA not before: Mon 11 Aug 2025 20:11:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 86.110.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9a:c2:58:52:5b:d5:97:27:34:d8:8e:cd:82:b8:82:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Aug 11 20:11:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=533be83480424dac98b88e94df4283ae67ab36e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:27:2b:14:cd:cb:76:19:3f:eb:56:46:d8:41:
42:3e:ea:2f:85:00:5a:87:65:e4:a9:94:2d:12:5c:
74:b5:02:36:99:08:05:32:e8:ac:99:92:b6:55:5a:
3b:f6:36:2c:a0:7e:46:a1:9f:1b:a1:13:af:d4:79:
55:45:69:9c:f2:f2:95:f2:de:a4:54:5e:9a:83:80:
19:b8:a9:80:4b:d3:4c:dc:bd:f7:70:41:19:37:7e:
12:8e:f8:d2:45:63:bf:0a:bb:04:53:61:37:4f:95:
03:16:8d:c8:85:1d:f6:e1:ca:ff:e4:03:92:e5:ef:
cd:03:22:b8:c2:33:f8:b9:1d:63:d8:d5:a6:92:c8:
59:a3:c2:e8:52:04:37:35:e7:12:7b:23:d4:a6:9b:
91:54:87:04:3b:d6:1f:c0:0d:9f:7e:dd:d8:9b:2a:
ee:40:81:4f:ef:f0:09:11:01:ba:14:be:2f:c4:1a:
15:bd:3e:8f:e2:e8:40:f8:36:18:b8:43:01:cb:8b:
98:32:e6:b2:1b:8f:4d:1d:d9:bc:f3:6a:c1:8f:fe:
ac:c4:f8:eb:2a:01:81:58:aa:ef:a6:29:7a:ae:8b:
fe:37:64:98:98:a9:a2:31:7d:79:10:2b:36:b0:41:
33:80:7a:ad:ea:8b:60:8d:60:a2:4b:b3:91:3d:f5:
89:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3B:E8:34:80:42:4D:AC:98:B8:8E:94:DF:42:83:AE:67:AB:36:E5
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/UzvoNIBCTayYuI6U30KDrmerNuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.33.0/24
Signature Algorithm: sha256WithRSAEncryption
18:f7:a9:bc:a9:df:59:ee:34:44:fd:66:e0:12:ee:25:f7:e6:
e7:ef:dc:94:ec:28:ca:de:5b:37:b4:23:54:4c:1d:c0:fe:f3:
4c:81:7c:0f:df:54:0d:69:40:30:0c:1e:88:46:8e:89:20:ca:
84:85:6b:a8:6e:09:ec:2b:1e:6f:21:32:ed:d0:22:8a:31:c5:
6d:90:a6:50:ac:f1:45:01:50:b1:ab:ad:09:08:a0:f8:27:41:
af:91:2e:ec:a9:1c:11:a8:d2:db:9f:9b:3a:16:fa:3d:9d:e7:
58:e7:f4:ed:b2:0c:2c:a7:10:8c:78:38:4c:d3:49:6a:db:25:
ca:2e:fd:b3:a7:7a:72:71:b2:98:72:6f:18:c4:90:fe:24:77:
7e:06:74:43:65:13:87:20:b6:e3:78:41:f0:70:67:5c:71:3c:
8c:7f:bd:76:ba:a1:63:ce:ec:ca:68:ba:b9:3a:0f:a8:28:36:
f8:1d:07:29:d3:1d:99:44:9e:87:68:1e:c5:56:8c:f3:08:67:
28:d3:47:d7:a9:76:c4:d6:24:87:e1:d7:0c:21:3b:27:f6:36:
70:d1:93:fa:ca:4b:e6:e8:4b:59:41:5c:94:8d:90:a2:53:b8:
78:09:fc:31:95:20:c5:93:39:87:dd:c4:74:90:c7:59:99:f6:
5d:e9:4f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:35:48 2025 by rpki-client