Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/zjSnJ16XlThMIiYCj6tPC8TJXio.roa
File: zjSnJ16XlThMIiYCj6tPC8TJXio.roa (raw, json)
Hash identifier: 9Ul7kI7iMdV1TfeZfTiKReJpCqvEcbTxXI+TPRkPGyA=
Subject key identifier: CE:34:A7:27:5E:97:95:38:4C:22:26:02:8F:AB:4F:0B:C4:C9:5E:2A
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0199EF1D9BCC8175572943FF5FBACCDF8BE0
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/zjSnJ16XlThMIiYCj6tPC8TJXio.roa
Signing time: Thu 16 Oct 2025 22:21:58 +0000
ROA not before: Thu 16 Oct 2025 22:21:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 86.110.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ef:1d:9b:cc:81:75:57:29:43:ff:5f:ba:cc:df:8b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Oct 16 22:21:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce34a7275e9795384c2226028fab4f0bc4c95e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:05:b2:77:da:82:3e:ca:ec:58:a9:30:11:
fd:9d:77:fb:b3:9e:ea:df:5a:e6:6e:a7:61:4b:44:
a5:47:5d:07:ed:41:7e:90:31:06:f8:b9:7a:9c:eb:
66:4d:3a:37:e3:9b:7d:7f:a6:f5:0f:f9:e3:f6:d2:
d2:e5:20:7d:69:b9:73:31:2e:c8:f9:c2:1f:96:59:
fa:38:f2:d2:e4:f3:2d:04:cd:5a:2a:cb:65:bf:d8:
86:a9:45:9d:12:99:ba:d1:ea:e2:ab:75:90:33:2d:
f3:13:1a:41:4c:94:88:f9:f5:4d:f3:ac:48:33:63:
b8:b9:bd:43:46:5e:ee:f9:03:9c:c2:57:6f:ba:7f:
bd:27:f2:db:23:0a:1c:bf:2f:6a:dc:38:da:c9:5b:
a6:88:8c:64:3e:83:8e:1f:09:0e:1f:cc:26:7f:3f:
b6:be:7c:fe:ae:2e:3f:7e:73:4c:00:a4:ad:99:e5:
db:7a:8c:2e:b2:15:a1:b1:8d:09:85:02:99:8b:f8:
14:f5:37:b2:e0:27:39:fb:f4:45:01:e5:2e:b5:d4:
90:ab:39:8a:95:3c:87:15:c8:4f:56:f4:b9:a5:06:
a7:92:97:5b:d1:ad:7c:d4:00:33:16:05:5f:71:f3:
49:f9:01:75:a8:d5:db:68:f9:1d:0b:2d:05:c4:5c:
d4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:34:A7:27:5E:97:95:38:4C:22:26:02:8F:AB:4F:0B:C4:C9:5E:2A
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/zjSnJ16XlThMIiYCj6tPC8TJXio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.34.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:30:1e:c5:1f:2b:76:b4:46:33:e4:6a:87:8e:9e:f4:56:7f:
ab:29:4d:dd:38:36:f8:eb:13:46:3b:01:3e:01:b9:f1:26:94:
b8:ac:94:5f:e0:53:ac:45:ea:cb:f0:24:44:2a:eb:28:9f:1c:
6d:68:a1:fa:e3:29:9b:b7:cb:47:f0:c1:c2:8a:21:d8:b8:28:
c1:c6:5e:97:b4:cc:d7:b9:6c:d6:6f:6c:d7:48:27:93:20:29:
77:e9:02:6e:4e:56:72:d7:65:ed:20:ad:0a:34:19:8c:ed:cc:
f5:25:bd:c8:14:3e:34:a0:b2:45:17:44:f6:80:d0:8b:cd:6b:
a8:cc:9c:bb:c1:a0:82:63:c3:a1:cf:7b:ee:9f:16:5b:b1:90:
49:38:4e:e8:b7:77:e3:c1:d3:b0:a2:5a:00:87:11:d9:8a:08:
32:91:af:61:87:5c:bb:ad:83:75:08:48:8d:5c:57:ec:ec:ee:
b1:7d:b8:4b:81:68:4e:e3:d7:a1:18:1c:4d:a3:c0:66:63:17:
81:6d:c3:5b:d0:23:0e:7f:96:18:48:4d:a2:fb:80:bb:52:48:
0c:85:3d:f3:ea:16:af:1c:18:e6:37:7e:bb:d0:f8:9e:10:9f:
ea:66:90:77:46:f9:a4:4b:47:a2:bf:26:b6:67:b6:11:59:73:
c3:fd:94:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:24 2025 by rpki-client