Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/CZ_Zb2Aq89SafghWM0E4713VX70.roa
File: CZ_Zb2Aq89SafghWM0E4713VX70.roa (raw, json)
Hash identifier: HeGm7Ab0oXBCA+8D5xtUkFSt/G3Ij7tbRDAtEbpDGr0=
Subject key identifier: 09:9F:D9:6F:60:2A:F3:D4:9A:7E:08:56:33:41:38:EF:5D:D5:5F:BD
Certificate issuer: /CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Certificate serial: 019F236840F591F47D718405A89EDEF1E055
Authority key identifier: 6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/CZ_Zb2Aq89SafghWM0E4713VX70.roa
Signing time: Thu 02 Jul 2026 15:17:42 +0000
ROA not before: Thu 02 Jul 2026 15:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 86.110.34.0/24 maxlen: 24
86.110.46.0/24 maxlen: 24
86.110.58.0/24 maxlen: 24
86.110.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Jul 2026 03:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:40:f5:91:f4:7d:71:84:05:a8:9e:de:f1:e0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Validity
Not Before: Jul 2 15:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=099fd96f602af3d49a7e0856334138ef5dd55fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:28:c5:63:63:00:2a:8d:05:ca:ef:ec:35:42:
06:c8:46:22:39:78:06:c3:64:ee:78:be:fe:79:ff:
3a:b1:7b:45:3c:b0:87:23:58:4a:68:3f:ed:ff:1a:
27:9c:a0:90:d5:bb:b2:c0:94:c3:83:34:56:27:3d:
46:b6:8f:e9:2f:7e:54:22:c1:f4:c0:d6:fd:48:f0:
ba:4f:26:5a:d6:ce:81:97:3e:11:e1:54:3f:52:b7:
d9:fa:ba:b0:fe:60:88:6d:63:19:75:36:d0:10:7e:
50:ea:e4:32:d5:02:03:6c:e3:fe:bd:58:b7:44:24:
b3:bf:61:57:d6:7b:a4:ec:76:b4:3c:85:52:ed:79:
6b:d6:01:d5:3d:e2:81:c5:89:ef:4b:47:f5:0e:89:
16:45:5b:2b:3e:58:3e:2d:b6:a6:6b:ea:ab:9f:02:
a5:61:0a:bd:76:e8:ee:b6:9c:a2:24:73:fd:26:0f:
12:27:2e:33:b0:21:45:b9:4c:18:0c:5b:ad:48:e1:
f0:50:c0:20:7b:2e:c3:26:8c:e8:ff:31:2d:87:12:
77:dc:e4:60:76:4d:03:fe:c9:3b:fa:86:d6:87:7b:
d7:21:16:9d:8b:80:4b:3a:7a:ea:99:7f:ec:d6:52:
79:d5:19:7b:ff:51:12:59:6a:f8:cb:36:77:7e:15:
fd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9F:D9:6F:60:2A:F3:D4:9A:7E:08:56:33:41:38:EF:5D:D5:5F:BD
X509v3 Authority Key Identifier:
keyid:6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/CZ_Zb2Aq89SafghWM0E4713VX70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.34.0/24
86.110.46.0/24
86.110.58.0/24
86.110.63.0/24
Signature Algorithm: sha256WithRSAEncryption
57:0b:d1:be:a7:87:56:a3:2a:0d:b2:91:34:1a:40:a3:3b:38:
d2:3a:32:33:5d:05:a3:42:99:2a:44:e9:64:a6:7b:8f:4e:7b:
57:d3:2c:ae:a4:bc:8f:4f:3a:79:b3:c8:4f:49:f9:57:40:be:
a6:87:1a:37:d7:76:78:62:c6:3f:21:ab:a0:c4:d9:d3:49:56:
c1:f0:74:86:be:20:f9:b0:ef:a4:d6:69:29:78:a1:0f:b5:c5:
05:d1:96:0c:a7:39:8a:2f:97:ef:26:6b:52:65:f5:2c:39:53:
3b:fc:2e:cd:43:a7:8f:89:ac:32:1a:fa:6c:66:1a:63:f3:79:
b2:1d:78:1e:01:c4:c0:3c:74:c0:a3:43:0f:7b:8a:79:28:a6:
52:72:c4:e6:c6:fd:71:08:0c:0d:52:fd:d6:f5:b8:f8:2b:79:
d2:c9:e7:05:98:9b:d8:65:28:95:00:b2:85:e3:fb:a6:6c:50:
20:2f:6a:84:f1:d4:a1:be:e2:c7:e2:1e:4a:33:cc:99:ee:c9:
11:80:c4:63:e2:ca:b6:9f:b4:de:b1:d4:14:7e:41:e4:f6:bf:
8d:7f:be:21:c4:cd:1d:a0:1d:d0:10:da:b9:58:36:f4:1b:3c:
51:1c:1b:2d:12:7d:e2:09:1b:fd:a9:a6:57:f3:91:8e:eb:eb:
5d:a7:80:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 09:19:36 2026 by rpki-client