Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/GdGQJlcViYWnbchDaO0lHg2ksrM.roa
File: GdGQJlcViYWnbchDaO0lHg2ksrM.roa (raw, json)
Hash identifier: Im3JlPn5hM+/gIGKgd3X6+K5SCpxUeL0GAn1BTDR/iY=
Subject key identifier: 19:D1:90:26:57:15:89:85:A7:6D:C8:43:68:ED:25:1E:0D:A4:B2:B3
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 019A3537D73D37EBC06A11D98B154A447526
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/GdGQJlcViYWnbchDaO0lHg2ksrM.roa
Signing time: Thu 30 Oct 2025 13:04:03 +0000
ROA not before: Thu 30 Oct 2025 13:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 86.110.34.0/24 maxlen: 24
86.110.58.0/24 maxlen: 24
86.110.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:37:d7:3d:37:eb:c0:6a:11:d9:8b:15:4a:44:75:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Oct 30 13:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19d1902657158985a76dc84368ed251e0da4b2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:9e:39:c7:0b:8c:c3:97:3a:ef:11:59:d5:
1d:0c:fe:2f:66:60:3a:09:8a:17:fa:02:78:dc:98:
0e:82:5d:9f:69:dc:0d:14:9b:9b:ec:e6:c6:ff:7c:
f8:1c:00:99:99:9c:6e:9d:47:e0:da:d6:a2:a4:da:
3d:b5:fe:7a:4c:cd:41:04:ac:0f:61:54:2f:f7:3e:
67:d2:84:a6:28:d2:54:db:dc:8c:1d:6f:38:1b:83:
0e:35:b5:39:64:ff:ef:88:f8:5f:d3:ee:f5:e4:e3:
81:08:4d:30:26:02:0f:1e:2e:6d:f1:61:f6:06:aa:
00:53:f2:cf:8f:6e:64:91:f7:8a:3e:dc:2f:1c:e5:
cb:9c:39:6b:2e:02:1d:75:65:b3:24:6c:de:ac:73:
a3:8c:21:ba:5c:8d:dc:ce:10:d5:25:47:be:56:27:
34:c2:55:11:cc:f4:68:d9:ea:ac:f4:e5:5c:c5:25:
47:2b:60:0f:22:0d:2c:0a:36:f1:42:d8:11:0a:77:
fc:15:09:ae:ac:1e:fd:17:fa:fa:74:0b:3a:d8:3c:
bc:d9:3b:c3:30:9c:92:33:47:a1:85:08:5d:29:8b:
c7:2d:04:af:12:d8:09:44:75:a4:0d:09:74:32:6e:
5b:e8:84:d6:cc:42:10:c6:cf:07:43:fe:27:5c:6c:
42:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D1:90:26:57:15:89:85:A7:6D:C8:43:68:ED:25:1E:0D:A4:B2:B3
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/GdGQJlcViYWnbchDaO0lHg2ksrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.34.0/24
86.110.58.0/24
86.110.63.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b8:e3:41:cc:75:23:b7:9d:95:78:74:a7:1d:06:34:9b:84:
97:c5:8f:e1:80:25:33:b3:96:37:cb:2e:46:9e:81:e1:a2:42:
43:f1:25:9d:a2:8f:8a:d8:36:fc:bb:d4:db:93:27:d5:87:3b:
c8:27:34:70:24:a3:d0:2c:e9:2f:10:16:44:8d:45:cb:ef:da:
99:54:d2:0c:b5:76:e2:23:94:05:1f:cd:9d:32:98:56:4d:fc:
55:09:4e:fc:49:6c:c0:41:37:94:b8:55:88:2f:37:36:78:8d:
e4:a0:3f:f8:9c:c0:5c:42:d5:36:c9:0b:f2:1c:d0:29:30:47:
b0:cd:9a:9d:2a:ec:6a:04:d2:0d:b9:00:2d:31:1b:47:d6:3f:
b7:b7:bb:8e:c4:ec:3f:14:e1:e7:55:27:5c:c2:5f:6d:89:39:
d3:ca:fd:8e:ae:e6:87:e2:f7:78:2e:85:f9:ea:9c:be:25:1e:
df:28:85:2f:ab:c0:93:60:01:1e:87:27:9e:7c:13:0d:78:d0:
58:90:12:19:7d:94:59:d0:3d:c0:88:0d:c9:79:c4:b2:eb:33:
30:10:ec:f9:d6:92:19:f7:cc:66:34:af:8f:cc:1d:29:80:cb:
44:17:78:91:27:73:dd:75:93:95:b4:0d:f6:f7:41:88:03:01:
01:d9:b8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 05:28:40 2025 by rpki-client