Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/bZlGijfeNEl-x-IiS0Ky-q77tm0.roa
File: bZlGijfeNEl-x-IiS0Ky-q77tm0.roa (raw, json)
Hash identifier: f/M9aua04QSWccc2gLhyG05EM5mGGUqhQ3DOc0PuNJA=
Subject key identifier: 6D:99:46:8A:37:DE:34:49:7E:C7:E2:22:4B:42:B2:FA:AE:FB:B6:6D
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 01990AAA7E5B9697EA25B4FA8B7086510CC5
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/bZlGijfeNEl-x-IiS0Ky-q77tm0.roa
Signing time: Tue 02 Sep 2025 13:42:49 +0000
ROA not before: Tue 02 Sep 2025 13:42:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 86.110.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 13:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0a:aa:7e:5b:96:97:ea:25:b4:fa:8b:70:86:51:0c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Sep 2 13:42:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d99468a37de34497ec7e2224b42b2faaefbb66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ac:49:d7:9b:d6:03:09:93:15:a3:4a:bf:da:
89:7f:8b:2e:49:fe:82:53:1a:a5:f8:06:c2:68:05:
9d:fc:2c:db:94:68:69:f6:c0:7f:7f:6a:8f:2d:a4:
79:1e:f9:6b:c0:e3:a6:ee:96:7a:17:85:d7:c3:eb:
98:a4:eb:ae:c0:a4:44:5e:c7:33:e3:75:df:07:5d:
e5:1a:05:18:6a:9e:cd:7e:d9:1a:67:83:1f:ea:bc:
08:c5:6d:c9:91:ef:7a:ed:ae:6c:b8:81:a0:b9:6e:
91:e7:f3:3b:7b:63:09:db:bf:da:56:d9:2e:e0:bf:
c7:3b:78:7e:a1:ab:77:d2:33:fb:11:5e:17:53:f0:
27:00:1d:0b:a8:5d:d1:25:61:5c:5e:ba:36:e8:65:
b6:4c:83:12:0f:26:eb:30:1c:8c:b1:ba:89:8a:ad:
7d:a7:27:b3:94:7f:ad:7f:45:9e:49:0b:20:60:69:
71:24:48:28:13:eb:9c:46:7f:d5:11:94:55:f8:1f:
ef:54:ef:55:24:49:b3:9d:8b:b2:54:97:a4:36:1c:
fd:15:53:61:36:c0:7b:8d:f5:a9:c5:63:98:68:02:
58:af:f2:80:b4:49:0a:7d:0f:e5:97:f2:18:64:cb:
b6:e5:b5:8c:4f:d3:38:bb:3b:84:41:26:6e:9c:8c:
a9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:99:46:8A:37:DE:34:49:7E:C7:E2:22:4B:42:B2:FA:AE:FB:B6:6D
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/bZlGijfeNEl-x-IiS0Ky-q77tm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.63.0/24
Signature Algorithm: sha256WithRSAEncryption
07:18:5b:28:ba:f9:b0:0d:b4:ed:07:e3:be:de:34:ca:f4:8a:
98:92:e8:bc:3a:0c:32:2c:c7:1b:aa:d8:35:82:a1:49:03:dc:
a3:a6:cf:05:12:99:86:0e:7f:1e:0a:8b:f1:7c:b8:72:27:f0:
a2:f2:8e:04:de:cd:c5:9e:9a:5c:8b:77:c8:3f:b4:25:2e:6e:
23:73:c0:4e:2a:43:f2:1e:d1:86:3c:b7:12:e8:34:89:42:16:
71:56:71:12:1d:25:38:ed:9f:3f:ab:0a:41:4a:34:8a:2a:2f:
7d:67:be:3f:4a:25:bc:fd:22:10:76:c2:33:2a:d8:50:20:53:
6e:6f:b9:18:c2:27:43:d8:4a:43:f6:5a:8d:fb:25:8e:97:f0:
b5:30:f0:5b:71:c9:14:f7:5f:16:d9:e8:b6:24:24:98:e8:c3:
f7:cf:20:a2:ea:c9:23:92:32:9b:8c:ce:53:c1:32:93:a6:32:
d6:dc:d3:eb:9b:2c:93:51:99:ee:f0:ca:64:2c:54:84:8d:96:
16:3e:18:4b:46:3f:07:a4:83:51:8b:26:1b:4a:db:ab:49:3d:
fa:d6:1a:8c:26:23:69:20:60:51:87:a4:57:07:fc:06:b8:67:
9f:6e:c1:8d:ad:3f:61:95:fe:4b:10:4e:e6:1c:32:9d:23:c3:
0d:ee:6b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 21:44:44 2025 by rpki-client