Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/qQfiy1tMgLrRVRqHGI0Bwe6mRFU.roa
File: qQfiy1tMgLrRVRqHGI0Bwe6mRFU.roa (raw, json)
Hash identifier: 71Fv9lVOduaH9X8/humZVK+aUQXxIOmc0N+EoHYiZ/o=
Subject key identifier: A9:07:E2:CB:5B:4C:80:BA:D1:55:1A:87:18:8D:01:C1:EE:A6:44:55
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 019A554789DBBBF8464FF2434683CCC5B820
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/qQfiy1tMgLrRVRqHGI0Bwe6mRFU.roa
Signing time: Wed 05 Nov 2025 18:29:02 +0000
ROA not before: Wed 05 Nov 2025 18:29:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 86.110.34.0/24 maxlen: 24
86.110.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 06:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:47:89:db:bb:f8:46:4f:f2:43:46:83:cc:c5:b8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Nov 5 18:29:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a907e2cb5b4c80bad1551a87188d01c1eea64455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:d5:29:a8:85:4c:8a:5c:20:53:65:62:39:
61:be:59:70:b7:47:4b:7c:d1:a3:93:73:97:ca:4f:
3a:97:86:83:2d:b6:69:75:d7:92:51:e5:94:df:ec:
73:88:ca:d6:af:d0:29:22:32:b7:9b:e7:d8:72:08:
f8:91:3d:58:66:7c:90:f7:94:ff:1a:32:b8:14:b4:
81:89:fa:be:6b:1e:d9:76:78:e7:a2:bf:b7:32:0e:
14:76:ab:08:5a:a8:34:69:1b:96:01:05:76:5f:0e:
74:c9:50:c0:49:0c:b0:f4:c0:ff:17:a8:20:a9:e6:
90:a8:f1:7e:5f:6d:7f:d9:e7:1d:da:be:1b:d6:2e:
45:8c:ba:b9:75:11:a7:5c:e2:09:30:39:6e:39:30:
7b:3e:2a:1e:ef:42:03:68:43:ff:61:1d:49:2c:b6:
20:df:d7:ad:2a:d6:3b:78:a3:b1:97:73:e4:c5:db:
04:68:dd:2a:da:53:46:d1:72:6b:49:a0:43:a8:26:
b2:22:dd:02:0d:0a:3c:a7:2a:fe:4d:ca:d5:da:df:
df:67:d2:15:95:f6:80:ab:db:7e:20:d9:ba:46:23:
7d:f9:ea:e0:4a:03:9e:51:1f:f9:81:cc:b9:7d:9c:
1b:07:9f:a8:a9:92:f6:43:31:70:3a:36:75:7f:74:
7f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:07:E2:CB:5B:4C:80:BA:D1:55:1A:87:18:8D:01:C1:EE:A6:44:55
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/qQfiy1tMgLrRVRqHGI0Bwe6mRFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.34.0/24
86.110.58.0/24
Signature Algorithm: sha256WithRSAEncryption
42:54:b7:26:e9:c0:dd:bf:4a:96:4e:c9:ac:90:ce:59:89:78:
96:f8:f6:cd:90:84:69:65:a8:15:86:44:9d:cf:17:80:dc:64:
dd:a2:72:92:8f:88:b3:32:1c:c2:1b:2d:48:52:35:f8:0a:0c:
3b:c6:fc:0c:0c:55:12:93:f0:46:67:d4:03:99:3a:82:95:af:
93:d5:bf:3c:4d:ff:85:86:ed:09:74:10:38:2c:cd:fb:8c:cc:
d8:d3:19:e4:5d:83:73:31:b6:bd:ec:71:52:dd:7a:5d:3e:9a:
3d:e2:56:c7:62:fc:6d:d9:36:9c:71:f2:1c:b7:14:1e:47:1a:
72:f9:f0:59:99:04:5c:16:ba:b6:03:73:53:c7:d8:28:3a:03:
69:ae:65:f6:d2:c4:2e:73:b1:5a:83:bd:4c:f3:d9:9d:51:23:
a4:92:7f:a9:0a:6a:e5:89:ed:e7:fc:f2:6a:e6:f5:5d:ea:75:
a8:fe:de:1c:96:86:d8:7b:28:3c:d8:6d:57:1b:4b:02:a3:1e:
04:6a:c7:26:c0:d6:9d:15:96:4b:ca:48:be:65:67:e5:28:94:
14:01:98:89:0e:65:fc:81:5f:51:76:02:ba:69:96:6d:1f:49:
40:1e:54:8b:33:14:bc:23:fe:ec:2d:94:6c:bb:f8:82:69:59:
d2:18:9b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 11:42:38 2025 by rpki-client