Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/9tqxD372UOGf-zL9Og3dZI-GB_E.roa
File: 9tqxD372UOGf-zL9Og3dZI-GB_E.roa (raw, json)
Hash identifier: 1BflUu83I4Fz3YB6j1fHXKTleEcGx3LVxi458xNGCuo=
Subject key identifier: F6:DA:B1:0F:7E:F6:50:E1:9F:FB:32:FD:3A:0D:DD:64:8F:86:07:F1
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019939C0B998C521607CAA1440E961B15095
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/9tqxD372UOGf-zL9Og3dZI-GB_E.roa
Signing time: Thu 11 Sep 2025 17:09:15 +0000
ROA not before: Thu 11 Sep 2025 17:09:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206766
IP address blocks: 92.62.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:c0:b9:98:c5:21:60:7c:aa:14:40:e9:61:b1:50:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Sep 11 17:09:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6dab10f7ef650e19ffb32fd3a0ddd648f8607f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:75:81:34:46:66:49:2c:4a:de:63:31:53:2b:
e8:ea:14:8e:f6:ab:e9:64:a8:ab:2e:59:83:8b:c2:
9f:68:d4:e9:b6:10:b3:12:d1:0e:68:78:e5:a0:2c:
47:6b:9d:ba:70:2f:dd:bd:ad:31:8c:2b:01:87:a7:
61:fb:f9:0b:32:8e:dc:c5:5e:57:3b:d6:03:b7:27:
63:99:11:40:64:f8:02:5a:2b:38:d8:f7:fe:00:eb:
8f:2a:ef:0b:13:5d:d6:40:dd:e7:27:e8:59:dc:62:
2b:3f:c3:c8:17:e0:52:2e:12:30:6f:0c:bf:9f:86:
53:f1:a1:16:97:34:94:52:cb:21:3a:ee:ab:d6:48:
5e:8a:da:21:c8:57:3a:da:6c:04:96:8c:ba:22:a8:
1e:75:82:82:18:14:83:a9:9e:c5:3e:8f:fc:24:47:
e7:f5:47:a3:8a:34:df:fa:9c:3d:df:12:a4:8b:36:
fa:07:0f:eb:0c:6f:71:b2:03:ed:1a:cd:fc:31:d8:
19:ad:1d:05:96:8e:03:af:e1:91:a5:43:59:44:03:
6a:25:a3:32:95:aa:b4:95:33:08:ee:bc:1b:fa:bf:
82:31:0c:2c:b8:b3:32:32:65:b6:4f:24:bc:f2:7e:
51:3c:c6:4e:17:cb:32:8c:6d:01:2b:99:95:82:b3:
33:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DA:B1:0F:7E:F6:50:E1:9F:FB:32:FD:3A:0D:DD:64:8F:86:07:F1
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/9tqxD372UOGf-zL9Og3dZI-GB_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.240.0/24
Signature Algorithm: sha256WithRSAEncryption
66:81:94:fa:ee:f4:d5:fc:2a:9a:3b:4b:b5:1f:87:50:ae:3f:
23:5a:e5:9d:47:25:6a:08:b3:a2:38:74:21:83:8f:7a:15:35:
7a:96:7b:c3:dd:e2:4c:bb:ca:d2:e0:a7:e4:1e:ca:6a:b9:14:
c3:7c:18:76:4a:47:19:6f:11:28:c9:34:15:32:71:c9:71:5c:
be:74:f5:c6:3a:cb:fe:a5:ae:97:89:5c:17:31:b6:da:8f:92:
6d:ae:cc:e9:22:46:35:86:44:46:88:5d:a3:b3:9f:aa:c9:c6:
16:44:5e:5b:6c:52:ff:1d:fd:30:83:0d:a6:1f:99:de:d0:12:
73:cd:2a:4f:c5:ba:01:89:7d:57:32:d3:f0:69:4e:49:5d:cc:
2d:c6:d0:97:c3:49:ad:55:70:e3:f7:0b:5a:29:08:16:cb:5c:
09:cc:63:98:db:7c:bc:4b:1b:54:c5:e1:b1:bb:18:5e:a5:74:
fe:cd:a0:fe:59:bf:10:c7:07:7c:95:a0:51:97:3b:10:20:c7:
94:b3:46:1e:26:3a:5d:56:46:64:9c:46:6a:34:9b:db:5c:ea:
5d:d4:be:8b:4f:16:4f:fd:bb:df:92:74:8e:74:85:86:36:5b:
fe:1f:9d:d1:6c:ba:65:02:45:3f:42:89:21:6d:0c:6b:02:79:
e2:0e:cd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:03 2025 by rpki-client