Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/SA5zFzgkW03ymllMQt_Of2KH7Ps.roa
File: SA5zFzgkW03ymllMQt_Of2KH7Ps.roa (raw, json)
Hash identifier: 5IF/CnZvYXVGAvUMceHl/2nQfxGE7nBMSCVJwt9pMPk=
Subject key identifier: 48:0E:73:17:38:24:5B:4D:F2:9A:59:4C:42:DF:CE:7F:62:87:EC:FB
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0198506BE5DC511D702D424957B992589E9A
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/SA5zFzgkW03ymllMQt_Of2KH7Ps.roa
Signing time: Mon 28 Jul 2025 09:45:05 +0000
ROA not before: Mon 28 Jul 2025 09:45:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400909
IP address blocks: 86.110.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:6b:e5:dc:51:1d:70:2d:42:49:57:b9:92:58:9e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Jul 28 09:45:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=480e731738245b4df29a594c42dfce7f6287ecfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ab:f7:2f:91:ad:a3:54:a9:bd:42:ae:25:01:
e5:fa:d6:f5:34:51:7c:c0:df:ba:4d:d9:c3:8c:a9:
ed:f0:4c:03:43:5b:b2:15:94:0d:27:21:e7:85:c3:
d4:0a:cd:1f:06:d2:b9:43:56:60:79:ee:4f:6e:4e:
bb:d5:1d:e4:0e:46:7e:f7:3c:d0:dc:01:95:a0:c3:
a6:ae:27:c2:46:f5:f8:e4:16:5c:96:ce:f6:ce:49:
0d:5c:a5:21:37:ab:fa:b9:96:24:bd:90:53:5e:9d:
5e:93:a9:d1:55:02:58:b9:cd:27:54:29:75:ca:32:
ef:79:c4:7f:ed:7d:dd:60:63:7b:f4:e7:0e:0c:5f:
10:09:63:9e:c9:3b:01:4a:9d:73:b7:33:79:20:bd:
a0:2d:fa:81:3e:c9:a0:ad:be:a3:b4:ad:06:17:96:
78:ac:d0:f8:3c:e9:24:a5:3c:ab:f8:8c:9a:2a:ff:
30:0a:1b:9c:e7:21:76:af:13:c3:98:43:04:14:d5:
29:ab:93:4d:0b:9c:9c:80:ba:40:85:b5:4b:c1:d6:
3e:14:9f:d3:bc:f4:3e:5a:a8:8a:13:41:cd:7d:4f:
18:c5:95:34:07:1b:90:46:8b:71:61:81:0c:ac:3d:
7c:30:77:6c:b4:52:56:38:87:57:dd:72:86:43:4f:
ce:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0E:73:17:38:24:5B:4D:F2:9A:59:4C:42:DF:CE:7F:62:87:EC:FB
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/SA5zFzgkW03ymllMQt_Of2KH7Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.63.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:fc:a8:b9:05:76:ba:69:f1:6b:e6:8e:3f:b7:38:e9:e8:e9:
8d:e3:78:24:58:63:51:d1:7f:04:d3:32:8d:a5:cd:a9:68:93:
6b:6d:43:e3:b0:53:6a:09:3f:35:d0:28:eb:84:33:45:5d:50:
20:39:01:6d:04:b0:75:40:d5:75:87:f8:a4:ac:49:db:42:e0:
02:f5:90:ad:f2:c3:87:f7:54:54:8b:ad:d7:4e:f5:b7:ed:f5:
5c:93:a7:10:09:a7:c0:87:49:d6:36:38:29:29:e8:c5:6f:25:
5b:6b:73:70:82:8f:c5:ec:09:cb:d3:b1:d6:58:e0:b4:43:fa:
f1:90:e4:3f:81:2a:19:24:a0:cc:36:f7:a9:cf:32:c9:5e:6d:
b4:35:ee:ce:fc:c5:bf:c9:ab:89:f1:86:d9:e8:6e:f0:57:ee:
23:60:a3:41:77:8e:aa:bd:9b:bc:3c:22:f7:41:38:b3:fd:a4:
6d:6e:c5:81:d9:b7:e8:64:43:07:5f:a9:02:75:be:0b:c6:5b:
69:d9:7a:c3:96:a3:b7:07:25:41:e7:52:e7:ff:90:96:98:19:
20:56:ae:ea:23:b1:f5:90:ec:25:76:bb:11:d0:3b:56:47:0d:
fb:1b:f0:2e:b8:4c:65:3f:70:78:93:9d:ae:5a:73:3f:92:e1:
fa:77:b8:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZhQa+XcUR1wLUJJV7mSWJ6aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi
YjAxODQwHhcNMjUwNzI4MDk0NTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODBlNzMxNzM4MjQ1YjRkZjI5YTU5NGM0MmRmY2U3ZjYyODdlY2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKv3L5Gto1SpvUKuJQHl+tb1NFF8
wN+6TdnDjKnt8EwDQ1uyFZQNJyHnhcPUCs0fBtK5Q1Zgee5Pbk671R3kDkZ+9zzQ
3AGVoMOmrifCRvX45BZcls72zkkNXKUhN6v6uZYkvZBTXp1ek6nRVQJYuc0nVCl1
yjLvecR/7X3dYGN79OcODF8QCWOeyTsBSp1ztzN5IL2gLfqBPsmgrb6jtK0GF5Z4
rND4POkkpTyr+IyaKv8wChuc5yF2rxPDmEMEFNUpq5NNC5ycgLpAhbVLwdY+FJ/T
vPQ+WqiKE0HNfU8YxZU0BxuQRotxYYEMrD18MHdstFJWOIdX3XKGQ0/OFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEgOcxc4JFtN8ppZTELfzn9ih+z7MB8GA1UdIwQY
MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt
ZDFhNzc3MmRiMDc2LzEvU0E1ekZ6Z2tXMDN5bWxsTVF0X09mMktIN1BzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2
LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm4/MA0G
CSqGSIb3DQEBCwUAA4IBAQAN/Ki5BXa6afFr5o4/tzjp6OmN43gkWGNR0X8E0zKN
pc2paJNrbUPjsFNqCT810CjrhDNFXVAgOQFtBLB1QNV1h/ikrEnbQuAC9ZCt8sOH
91RUi63XTvW37fVck6cQCafAh0nWNjgpKejFbyVba3Nwgo/F7AnL07HWWOC0Q/rx
kOQ/gSoZJKDMNvepzzLJXm20Ne7O/MW/yauJ8YbZ6G7wV+4jYKNBd46qvZu8PCL3
QTiz/aRtbsWB2bfoZEMHX6kCdb4Lxltp2XrDlqO3ByVB51Ln/5CWmBkgVq7qI7H1
kOwldrsR0DtWRw37G/AuuExlP3B4k52uWnM/kuH6d7gh
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:29:29 2025 by rpki-client