Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/d2saFw16q2pF84_wTXbcc05opu8.roa
File: d2saFw16q2pF84_wTXbcc05opu8.roa (raw, json)
Hash identifier: 6T9K5GUb3CGy353ct1WBRUSg3/QBMCyAGbgccVGZCpE=
Subject key identifier: 77:6B:1A:17:0D:7A:AB:6A:45:F3:8F:F0:4D:76:DC:73:4E:68:A6:EF
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 019988F94A8AF6BDF94DF3DCF40F2BA91661
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/d2saFw16q2pF84_wTXbcc05opu8.roa
Signing time: Sat 27 Sep 2025 02:21:02 +0000
ROA not before: Sat 27 Sep 2025 02:21:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 86.110.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:88:f9:4a:8a:f6:bd:f9:4d:f3:dc:f4:0f:2b:a9:16:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Sep 27 02:21:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=776b1a170d7aab6a45f38ff04d76dc734e68a6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7f:90:ec:6d:a4:a3:ce:a1:dc:da:32:82:76:
57:33:21:f8:2e:96:0c:cf:f2:a3:6c:ab:aa:64:21:
e8:0d:26:4a:66:c5:27:40:92:48:50:43:c5:42:66:
11:ca:0c:fd:74:d7:c2:8a:d9:5c:2e:33:4c:9b:68:
1d:08:e2:bb:09:50:4a:32:98:a5:4c:7f:6f:13:2f:
21:73:56:e1:3f:5f:d7:aa:4f:39:41:a3:3d:28:b5:
43:2a:c2:79:72:14:3a:f6:20:20:f6:e7:61:75:57:
8e:71:df:e0:e5:67:8f:dd:a4:dd:c0:42:4e:70:80:
4f:d5:3f:e3:f2:5e:40:c4:e0:50:cf:cc:33:2d:af:
9e:7e:03:72:97:a6:6d:16:f4:7b:5e:69:f0:48:19:
e8:a1:0c:21:c3:e0:ea:d5:42:aa:de:16:57:c0:32:
89:56:49:02:64:58:bf:b8:97:7e:97:b3:5e:91:ae:
61:ab:af:94:fe:38:58:87:59:8d:83:96:cb:63:b6:
50:d0:fc:80:68:80:2a:b2:80:90:b5:df:f5:0c:77:
e4:49:ed:a5:8a:63:80:1e:fd:da:97:99:2a:62:11:
9f:64:b4:be:68:cd:d6:1f:52:7d:78:aa:f1:39:0f:
87:6d:28:ab:94:a5:35:a2:25:83:00:30:b2:e8:c0:
cf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6B:1A:17:0D:7A:AB:6A:45:F3:8F:F0:4D:76:DC:73:4E:68:A6:EF
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/d2saFw16q2pF84_wTXbcc05opu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.58.0/24
Signature Algorithm: sha256WithRSAEncryption
16:50:de:55:ca:8b:49:39:51:5d:31:84:05:52:bd:64:8e:eb:
87:e9:eb:93:d3:0b:32:22:09:e5:bf:39:4d:77:1a:6e:9b:7e:
a9:5b:50:7b:57:75:6f:85:e9:44:8c:9b:ad:d0:7c:ad:26:82:
77:0c:26:b0:9a:3f:42:9f:a5:7f:99:d9:34:f3:81:8d:a3:4b:
b3:06:0a:56:87:79:16:14:50:58:47:4a:07:8a:8e:69:50:0b:
a1:fb:fd:48:ae:22:02:6b:16:b2:ed:32:0d:93:4e:8d:fc:7c:
ab:02:1c:53:67:65:7c:f8:78:5b:f0:a2:13:7e:e6:ae:e3:f5:
06:76:2e:23:f3:76:e6:0f:af:30:8b:de:cc:34:e4:a2:82:3b:
c3:80:92:91:b9:16:12:34:74:bb:2f:de:60:c2:5d:f7:97:26:
af:72:b4:2d:31:24:e1:c0:c0:b0:0b:bf:03:96:f4:53:45:ec:
fc:ae:68:c9:7a:d3:5d:f0:73:35:94:3c:80:3a:fe:cc:21:04:
49:bc:cf:58:1d:d6:8c:1a:63:ee:de:dd:49:b7:f2:f9:77:b9:
55:e1:06:3c:0e:57:26:b7:82:71:c7:ec:5f:ae:e6:e7:30:14:
9e:e2:d3:64:2c:da:49:e4:c0:7f:dd:88:32:94:2c:40:9e:88:
a8:d9:38:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:25:00 2025 by rpki-client