Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/5CtTVuQK4Mz0CfCCtM3PbDI1J_A.roa
File: 5CtTVuQK4Mz0CfCCtM3PbDI1J_A.roa (raw, json)
Hash identifier: R54vCclWQ5py1ZVSUREg6/3SsE2Ni7OmnOX0ovimS28=
Subject key identifier: E4:2B:53:56:E4:0A:E0:CC:F4:09:F0:82:B4:CD:CF:6C:32:35:27:F0
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0199B0F306432821718479BAB77D0686EC6D
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/5CtTVuQK4Mz0CfCCtM3PbDI1J_A.roa
Signing time: Sat 04 Oct 2025 20:39:00 +0000
ROA not before: Sat 04 Oct 2025 20:39:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 92.62.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b0:f3:06:43:28:21:71:84:79:ba:b7:7d:06:86:ec:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Oct 4 20:39:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e42b5356e40ae0ccf409f082b4cdcf6c323527f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:12:41:57:18:d9:b1:c4:29:4e:e6:46:bf:
11:d9:34:8f:09:43:00:ca:d1:20:24:b1:71:c7:8e:
8e:13:61:ca:b4:f3:9c:76:51:50:f8:be:2d:d3:8f:
9c:77:bf:63:16:cb:7c:f9:b2:ab:02:4d:b9:84:91:
19:e9:2d:40:e2:1c:d6:1d:9f:78:12:69:b7:d6:ee:
1e:d3:fc:4f:dd:53:0d:65:f9:52:2d:f3:61:78:9b:
59:f5:c9:f2:63:17:5a:54:e0:28:e5:82:81:e5:c2:
32:22:30:e6:99:e4:ee:1d:ab:73:a8:fe:83:38:29:
4e:aa:b4:c1:19:2e:d2:42:e1:bd:fe:33:07:79:a5:
f8:cb:58:f0:7b:5f:29:98:d3:54:5c:88:3d:40:ca:
72:47:73:9f:5b:a0:d3:6a:9d:12:5f:74:f5:11:b1:
ed:a6:f9:c1:76:16:55:85:6c:6f:a8:df:f6:b3:f7:
18:d3:a9:61:f0:81:e1:2e:6e:83:40:5b:51:3d:ba:
7b:5d:44:3d:e2:d0:6a:ef:f8:25:39:b9:db:77:6f:
c4:cc:9e:42:32:02:8b:ce:a6:5f:eb:38:58:0c:1c:
b6:99:5c:df:39:6a:69:bc:e2:8a:dd:16:5b:ee:af:
7e:dc:ce:11:bd:11:1a:ec:2f:c6:69:43:e5:6c:26:
98:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2B:53:56:E4:0A:E0:CC:F4:09:F0:82:B4:CD:CF:6C:32:35:27:F0
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/5CtTVuQK4Mz0CfCCtM3PbDI1J_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.247.0/24
Signature Algorithm: sha256WithRSAEncryption
26:34:1d:74:72:fc:8a:16:77:5f:35:23:ea:9b:53:24:43:83:
f3:74:ed:ea:cf:21:f7:25:40:53:11:cf:d4:07:10:f3:34:69:
3e:91:52:6e:8e:bb:e3:9d:2c:b7:06:74:55:c0:7f:f8:57:2c:
e2:b0:c6:e2:f7:00:5f:c9:aa:d8:36:54:87:67:21:71:af:7c:
f5:6e:d8:fe:ae:85:bb:01:60:db:2e:fc:d9:ad:20:0f:61:b5:
a0:13:30:86:2c:7c:a1:16:3c:fb:e9:4f:81:67:0d:76:9e:4a:
eb:6a:53:b5:7f:26:b0:02:0e:4f:d9:de:33:c5:f9:2f:83:28:
3f:d0:88:1e:22:3b:73:7f:66:2e:b8:41:ec:01:4f:e5:2c:f9:
63:1d:07:c3:69:49:04:60:a1:7b:92:9e:3d:74:81:f6:7d:e5:
38:b5:42:79:61:80:e8:99:15:b5:60:fd:a3:97:ea:a7:d2:6e:
9f:0f:35:ef:63:2d:12:6a:ea:7e:72:4e:83:7b:aa:89:58:91:
02:00:8f:47:cd:d6:de:a0:5c:b0:a0:0d:f4:db:73:7e:02:ce:
5d:1f:85:21:0a:7b:0a:fa:df:86:de:4c:74:27:5a:04:27:76:
19:8e:51:14:98:98:12:5a:a3:1f:a0:e5:1a:3b:77:0e:77:8e:
fb:7c:8f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:03:00 2025 by rpki-client