Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/z9NACTGBMvnQ5x8u-nWBN5y4I0U.roa
File: z9NACTGBMvnQ5x8u-nWBN5y4I0U.roa (raw, json)
Hash identifier: A9IKmaXe6BPloXH02v2+6uLrN23z/PJvgf/TQcotyvY=
Subject key identifier: CF:D3:40:09:31:81:32:F9:D0:E7:1F:2E:FA:75:81:37:9C:B8:23:45
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0197B3340E149BAAB1662346653D7D8C7531
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/z9NACTGBMvnQ5x8u-nWBN5y4I0U.roa
Signing time: Fri 27 Jun 2025 21:03:42 +0000
ROA not before: Fri 27 Jun 2025 21:03:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 86.110.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b3:34:0e:14:9b:aa:b1:66:23:46:65:3d:7d:8c:75:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Jun 27 21:03:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfd34009318132f9d0e71f2efa7581379cb82345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:45:54:7c:9e:ad:d6:f7:fb:45:23:7f:fc:
b6:cb:8a:68:83:d8:7d:05:5c:93:4c:f9:41:21:30:
b7:df:46:bf:5c:04:d8:46:1d:3c:16:d7:f2:44:d7:
db:26:cb:b9:2b:1f:b9:6c:2a:89:02:48:c8:41:0c:
ef:b7:bd:c9:c2:3d:f8:fb:67:98:2c:5a:6e:6d:62:
8f:87:92:53:c2:f4:d5:91:8d:93:97:27:7e:72:7e:
65:93:d6:41:b1:9e:67:b7:4e:b7:b9:fa:93:0d:25:
77:5c:03:74:15:ab:97:ca:4a:ff:28:3d:56:2e:80:
80:bc:22:86:1c:c1:c6:9d:63:d3:f9:53:0a:54:8c:
cd:eb:30:d3:42:a3:d7:54:d0:ed:a9:88:72:ae:53:
7f:1d:ad:41:9c:21:d2:1e:57:2d:bc:fd:b6:63:36:
10:c8:b7:1e:75:72:0a:ba:35:f3:00:a5:e5:20:a5:
c1:91:52:e1:d1:66:24:a3:55:cd:83:c3:0d:d3:2d:
e5:12:f9:fb:79:4f:c2:d8:0a:93:dc:d9:9a:98:13:
eb:20:1b:00:20:1b:e4:ca:7c:16:ed:3e:3d:14:51:
51:d0:54:ba:3b:0c:c4:d1:b6:a4:1d:83:6d:bf:7d:
df:d6:7a:f4:76:52:47:f8:bb:c7:b4:d3:fe:ca:fb:
d1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D3:40:09:31:81:32:F9:D0:E7:1F:2E:FA:75:81:37:9C:B8:23:45
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/z9NACTGBMvnQ5x8u-nWBN5y4I0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.63.0/24
Signature Algorithm: sha256WithRSAEncryption
79:4b:fe:55:cd:e9:26:ba:17:12:2c:4f:0a:a8:db:9c:be:48:
49:e0:d6:66:c3:e4:00:24:b8:77:1e:dd:bd:3c:74:10:86:bd:
99:c3:84:66:42:5a:bd:bb:6c:d5:a9:9b:6e:02:bd:71:b7:d4:
8a:67:ab:e5:30:24:0b:24:c2:67:8d:65:17:f4:52:8d:7f:66:
57:27:86:bf:a0:c0:ea:a1:77:1a:ea:be:10:11:63:21:19:f6:
2c:8a:a7:c1:1e:7d:95:96:2f:96:b3:be:b5:a4:3b:c5:ba:59:
13:9a:5e:ff:45:3b:12:6e:f6:ea:cf:a9:1c:3d:94:65:df:3f:
98:3c:3e:d0:77:a4:b1:73:95:37:88:17:d6:5b:53:5f:85:ff:
a5:2b:23:fb:4c:04:4d:20:ed:31:9f:e4:08:61:88:ed:4e:72:
cd:f9:53:e3:cb:41:35:e5:0d:2a:5d:fc:d3:e6:73:01:a0:59:
44:b6:61:68:d5:be:0b:7f:dd:d8:2f:d9:d3:f5:18:5c:3a:79:
8c:cc:27:44:a1:96:b8:3e:23:2d:42:7f:77:c7:ab:5f:ec:cc:
9b:12:c8:f2:ee:89:74:3e:3c:74:01:a2:25:23:78:e9:a3:00:
28:55:25:91:d3:f6:b6:0b:f5:e5:11:40:cd:31:15:6b:44:21:
b1:34:28:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZezNA4Um6qxZiNGZT19jHUxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi
YjAxODQwHhcNMjUwNjI3MjEwMzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmQzNDAwOTMxODEzMmY5ZDBlNzFmMmVmYTc1ODEzNzljYjgyMzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAlFVHyerdb3+0Ujf/y2y4pog9h9
BVyTTPlBITC330a/XATYRh08FtfyRNfbJsu5Kx+5bCqJAkjIQQzvt73Jwj34+2eY
LFpubWKPh5JTwvTVkY2Tlyd+cn5lk9ZBsZ5nt063ufqTDSV3XAN0FauXykr/KD1W
LoCAvCKGHMHGnWPT+VMKVIzN6zDTQqPXVNDtqYhyrlN/Ha1BnCHSHlctvP22YzYQ
yLcedXIKujXzAKXlIKXBkVLh0WYko1XNg8MN0y3lEvn7eU/C2AqT3NmamBPrIBsA
IBvkynwW7T49FFFR0FS6OwzE0bakHYNtv33f1nr0dlJH+LvHtNP+yvvRZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM/TQAkxgTL50OcfLvp1gTecuCNFMB8GA1UdIwQY
MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt
ZDFhNzc3MmRiMDc2LzEvejlOQUNUR0JNdm5RNXg4dS1uV0JONXk0STBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2
LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm4/MA0G
CSqGSIb3DQEBCwUAA4IBAQB5S/5VzekmuhcSLE8KqNucvkhJ4NZmw+QAJLh3Ht29
PHQQhr2Zw4RmQlq9u2zVqZtuAr1xt9SKZ6vlMCQLJMJnjWUX9FKNf2ZXJ4a/oMDq
oXca6r4QEWMhGfYsiqfBHn2Vli+Ws761pDvFulkTml7/RTsSbvbqz6kcPZRl3z+Y
PD7Qd6Sxc5U3iBfWW1Nfhf+lKyP7TARNIO0xn+QIYYjtTnLN+VPjy0E15Q0qXfzT
5nMBoFlEtmFo1b4Lf93YL9nT9RhcOnmMzCdEoZa4PiMtQn93x6tf7MybEsjy7ol0
Pjx0AaIlI3jpowAoVSWR0/a2C/XlEUDNMRVrRCGxNCgM
-----END CERTIFICATE-----
Generated at Wed Jul 2 19:55:05 2025 by rpki-client