Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/PXGJwhmV97rf528es6mfTTs64BI.roa
File: PXGJwhmV97rf528es6mfTTs64BI.roa (raw, json)
Hash identifier: 9rkf6uDJi8dNvwcnotfNSXNiAKJwNJ/awEy2RjfEEB4=
Subject key identifier: 3D:71:89:C2:19:95:F7:BA:DF:E7:6F:1E:B3:A9:9F:4D:3B:3A:E0:12
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01995A6C10943A808E04AD06DAB5643BF252
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/PXGJwhmV97rf528es6mfTTs64BI.roa
Signing time: Thu 18 Sep 2025 01:24:15 +0000
ROA not before: Thu 18 Sep 2025 01:24:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 92.62.246.0/24 maxlen: 24
178.239.112.0/24 maxlen: 24
178.239.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5a:6c:10:94:3a:80:8e:04:ad:06:da:b5:64:3b:f2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Sep 18 01:24:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d7189c21995f7badfe76f1eb3a99f4d3b3ae012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:44:91:da:ff:b0:8b:8b:9f:92:c1:b7:5e:9e:
65:2e:3d:cc:56:a0:b4:2a:ad:9f:5e:83:70:9f:4f:
7c:8e:4e:11:61:9a:82:5e:8a:1a:ed:e0:56:e9:67:
68:14:bc:a6:af:53:ac:47:5d:14:c2:99:fa:75:98:
80:0e:fe:84:22:e6:82:2c:fc:e2:28:2c:e5:c7:4e:
29:68:99:5e:81:05:b4:aa:d4:ff:09:00:61:d4:92:
9d:bd:89:2a:a7:57:02:ec:3a:58:a6:57:21:80:29:
27:1c:66:92:34:37:a8:60:c5:d0:ca:f8:e9:05:f3:
70:b2:dd:7e:b7:4f:f6:0f:fa:85:be:a7:e7:67:33:
87:3e:10:92:06:67:a2:6f:9f:52:ad:d7:28:1b:bb:
e1:2a:2c:f6:36:84:91:aa:d6:1d:3d:bc:34:2f:9f:
b3:f2:da:2a:b7:f2:b6:3c:37:fb:7c:c3:68:05:74:
c7:32:1a:0d:c2:56:71:1f:a3:75:21:bc:e3:60:55:
36:a7:21:cd:27:18:26:87:ea:93:b2:23:92:77:97:
cf:3b:ce:db:3f:a0:21:2d:cd:0d:f7:fd:4e:71:d2:
5a:1b:ac:d4:0f:8e:61:df:92:73:3c:e9:b8:78:7c:
28:65:59:a8:e3:32:1d:7f:04:01:21:b6:54:ea:35:
13:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:71:89:C2:19:95:F7:BA:DF:E7:6F:1E:B3:A9:9F:4D:3B:3A:E0:12
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/PXGJwhmV97rf528es6mfTTs64BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.246.0/24
178.239.112.0/24
178.239.114.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:8d:5c:25:fc:e0:54:a2:85:b8:15:e7:d6:1f:7c:e7:eb:d0:
d3:74:2f:a1:fe:48:cc:67:45:bc:14:cd:9f:f7:f3:06:52:8a:
f8:f2:c9:62:8d:90:5e:75:7e:b1:f4:af:d9:c4:21:55:26:ef:
4f:ac:ce:ed:4a:e5:0c:22:83:be:f6:82:7c:a5:a7:ac:29:87:
5d:95:ac:7a:8a:3c:b9:ec:69:02:f0:27:1f:92:27:81:1c:d8:
56:a6:20:a8:48:d4:93:a7:ce:7e:f3:0d:36:1b:26:c1:7f:e2:
a9:7c:1c:91:86:12:5c:b4:df:1f:62:b8:a2:7a:80:dd:cb:36:
37:88:b2:9d:40:6a:3c:f2:b3:ac:68:59:33:06:4c:69:9d:2d:
b6:4f:94:83:04:0f:d3:b6:c9:a7:67:11:92:00:56:45:95:44:
2a:50:4c:47:ec:55:a6:ff:85:66:c9:cc:ae:c8:d2:f9:55:29:
56:57:93:5e:d9:5f:25:99:57:7b:e8:9e:1e:00:70:82:cd:23:
d4:58:17:81:88:87:d8:eb:5f:15:2c:03:14:9f:bf:62:cb:48:
33:a5:28:c8:8d:35:42:3f:f5:fc:f1:5b:47:ba:53:d1:3b:49:
c8:bd:f3:87:6a:94:49:11:64:0a:20:a4:10:b5:32:31:1b:36:
3a:63:91:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 22:39:52 2025 by rpki-client