Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/qkNV4li91v0DO2SAYP6kZn_yUCo.roa
File: qkNV4li91v0DO2SAYP6kZn_yUCo.roa (raw, json)
Hash identifier: LDMvVs+iroeWuSqAgTXSyF41sdBhPkkO2x6k1tzoUGQ=
Subject key identifier: AA:43:55:E2:58:BD:D6:FD:03:3B:64:80:60:FE:A4:66:7F:F2:50:2A
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0197083E6121D222E9B87F3C27911A7E853D
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/qkNV4li91v0DO2SAYP6kZn_yUCo.roa
Signing time: Sun 25 May 2025 16:19:55 +0000
ROA not before: Sun 25 May 2025 16:19:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 86.110.34.0/24 maxlen: 24
86.110.42.0/24 maxlen: 24
86.110.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:08:3e:61:21:d2:22:e9:b8:7f:3c:27:91:1a:7e:85:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: May 25 16:19:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa4355e258bdd6fd033b648060fea4667ff2502a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:58:57:9a:e6:3d:f8:ab:f9:1b:63:29:ae:74:
d6:28:f8:fe:a5:2c:34:32:29:f8:6f:ca:a6:56:87:
60:a4:0d:3d:e6:95:d4:64:14:e5:c6:68:9e:91:25:
e3:17:4f:aa:75:a4:94:aa:4a:79:ad:95:25:26:6c:
b6:5b:f9:68:f4:20:8a:69:d0:35:25:96:73:44:95:
b6:f2:79:d3:ae:24:ea:c9:e8:d6:0b:c9:f6:98:19:
70:f6:51:19:cb:5b:7f:2f:65:3d:22:1a:6f:f2:80:
89:d9:64:05:e1:72:07:90:f0:db:12:c5:63:71:eb:
0b:fb:39:d9:a5:43:77:9e:93:ab:1e:00:fa:66:b8:
e2:7a:0e:04:c6:22:37:ab:74:cc:0e:58:61:b8:58:
77:06:81:09:2a:11:ea:41:eb:46:0e:86:45:0c:b4:
69:cc:2c:d1:43:a5:4a:b2:90:25:63:b0:c4:14:71:
2e:12:57:05:9a:9f:f5:0f:fd:aa:53:73:78:68:d0:
56:76:86:f1:05:5b:ff:db:b4:ee:b6:9c:4b:b7:3b:
63:5c:46:31:5f:db:b1:d4:cf:90:53:20:50:51:11:
d4:1a:a6:ac:1e:0d:2b:31:ba:a8:0d:45:7c:92:c6:
e6:e7:01:85:13:b2:3e:d3:7d:09:d4:10:e4:8f:1b:
68:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:43:55:E2:58:BD:D6:FD:03:3B:64:80:60:FE:A4:66:7F:F2:50:2A
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/qkNV4li91v0DO2SAYP6kZn_yUCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.34.0/24
86.110.42.0/24
86.110.49.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:ba:6a:04:38:34:06:4f:b3:4a:c0:d1:da:4a:97:85:cc:e1:
04:67:e2:c9:cf:f5:10:1e:f6:d3:ff:0c:f5:cd:5d:7f:74:48:
30:61:a7:fa:14:57:d0:73:d4:66:ae:fd:e3:de:98:ca:d3:47:
6f:fc:c3:2d:6d:79:d3:e8:45:91:56:a0:03:87:0b:21:92:7a:
30:b6:3a:b1:86:dc:54:9f:43:91:92:7b:0d:6a:60:7e:f3:71:
4c:f7:bf:f2:5e:40:ee:74:78:ed:f9:51:48:7b:96:2a:1c:56:
69:ad:73:5b:ab:1a:43:5c:31:d9:d4:bf:19:c0:bb:c2:bc:b5:
f2:d3:75:0c:d8:ce:d6:90:23:b0:e5:77:2c:ee:22:ab:d3:d2:
aa:00:34:cc:d8:f3:96:2c:b9:63:56:cd:22:e2:32:b4:34:5b:
dc:91:7d:53:86:11:87:1e:17:9b:bb:e3:c1:1e:0b:97:b1:9b:
ff:e0:0c:ed:41:2e:1c:bb:04:85:4a:51:81:68:59:95:b1:38:
35:e3:4b:3d:b7:7f:90:b8:45:7e:55:05:49:e8:3b:20:4b:8a:
72:18:49:58:3e:7f:b7:a7:bd:3d:70:13:09:ea:37:49:80:b9:
5e:9c:f6:c2:7d:55:42:26:4c:e1:2e:d5:79:3a:ad:15:b3:42:
9c:e7:b2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 03:07:05 2025 by rpki-client