Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/45MvjfGKCC1KtPdc7nQX95sIMOQ.roa
File: 45MvjfGKCC1KtPdc7nQX95sIMOQ.roa (raw, json)
Hash identifier: OJaP8IeT3Uy1A2hRxBoDBgRDgpbDvNEt1ZVBIoH1VAY=
Subject key identifier: E3:93:2F:8D:F1:8A:08:2D:4A:B4:F7:5C:EE:74:17:F7:9B:08:30:E4
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0199C931F3AA8E640C78419E1A8F93A65977
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/45MvjfGKCC1KtPdc7nQX95sIMOQ.roa
Signing time: Thu 09 Oct 2025 13:38:38 +0000
ROA not before: Thu 09 Oct 2025 13:38:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 86.110.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c9:31:f3:aa:8e:64:0c:78:41:9e:1a:8f:93:a6:59:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Oct 9 13:38:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3932f8df18a082d4ab4f75cee7417f79b0830e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:39:2c:41:61:28:dc:4a:76:ca:dc:75:ce:81:
7f:9c:ca:27:6b:b9:53:4f:30:09:b4:46:99:ea:19:
27:50:b2:23:60:37:b8:4c:4e:34:2d:61:f1:8b:7b:
9e:2a:8e:91:01:cc:55:52:74:3e:9d:60:2b:54:d0:
d3:4d:03:b4:8b:46:2d:a7:03:b0:ef:44:58:a7:43:
38:3c:2a:c8:d8:91:6b:e5:29:d1:6e:0b:b3:5d:a6:
a6:5b:8f:c0:03:0f:ae:6d:28:67:82:a5:ff:69:c0:
f8:2f:19:94:b6:6e:81:2e:fe:34:8d:c9:cd:7b:00:
0c:96:f7:cc:83:5a:ad:c6:98:80:5b:f1:5b:0e:03:
83:cf:f7:20:23:be:0b:f7:39:42:cb:33:e8:34:c2:
e5:37:0d:08:1d:ae:94:87:7b:b4:f1:bd:14:70:25:
67:0c:b1:2c:8d:82:2a:bd:ee:59:bd:15:fa:f7:9b:
fa:fc:91:a4:c3:1f:c1:ec:2d:64:b7:e6:8a:6e:c6:
43:f6:6d:d8:88:40:74:34:0a:bb:0a:88:e9:50:e0:
fb:a6:7c:85:13:e1:f4:01:f6:28:2a:39:02:77:51:
ff:19:8e:88:30:0a:4e:91:ea:c5:15:a0:09:48:04:
ff:77:9a:91:65:36:2b:e5:74:f7:20:1e:b7:eb:76:
d2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:93:2F:8D:F1:8A:08:2D:4A:B4:F7:5C:EE:74:17:F7:9B:08:30:E4
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/45MvjfGKCC1KtPdc7nQX95sIMOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.52.0/24
Signature Algorithm: sha256WithRSAEncryption
82:c8:85:30:fa:34:5a:4f:fc:2b:b8:20:12:cf:4d:02:9e:a4:
26:10:0d:2e:8d:78:53:f4:3d:d5:df:e8:91:8d:ee:73:bd:58:
0f:91:da:19:5b:2d:c3:47:21:72:00:c6:77:9d:2a:b6:d1:ef:
70:62:89:43:ca:6f:bf:85:70:97:65:7c:2b:d8:4b:b5:b5:a1:
49:c4:45:8c:59:a0:c6:59:10:0b:a9:4a:7e:9b:38:3b:bb:2a:
b3:a8:b4:c0:62:97:e0:57:01:ef:4b:b4:32:b9:e8:6f:7d:17:
e1:15:57:50:e2:73:bb:74:d1:d0:6a:13:96:f0:6d:7b:2e:a8:
be:1c:71:1a:36:14:ee:af:7e:f9:ca:b7:28:08:cb:ff:da:4b:
0a:e7:5b:57:da:00:c0:48:b3:43:61:04:78:71:55:6b:3a:68:
52:b5:72:56:ce:a8:2e:ea:1b:e4:79:6b:22:ca:54:7b:84:91:
ab:26:dc:eb:77:f7:a5:1b:c0:52:6f:77:ac:3c:3b:27:62:6f:
e8:9c:22:f2:a5:1c:d6:3e:0b:8b:43:76:ef:8b:5a:ca:5d:d3:
e1:31:e9:06:a1:18:f6:c8:72:2f:d4:71:00:91:32:a7:93:1f:
7c:64:5b:57:f3:43:57:d7:b4:8c:87:46:94:16:86:40:dd:f8:
9a:60:41:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:29 2025 by rpki-client