Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Xl4qy1Ar5fj8HWfzQeqmdQCXJTo.roa
File: Xl4qy1Ar5fj8HWfzQeqmdQCXJTo.roa (raw, json)
Hash identifier: kyWMPa6QWFz1hTwjuHwt3MREoZfxCYT9GNVy2jSQZZM=
Subject key identifier: 5E:5E:2A:CB:50:2B:E5:F8:FC:1D:67:F3:41:EA:A6:75:00:97:25:3A
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0199E23AA4955CD4DFB132FE906868A5F751
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Xl4qy1Ar5fj8HWfzQeqmdQCXJTo.roa
Signing time: Tue 14 Oct 2025 10:18:38 +0000
ROA not before: Tue 14 Oct 2025 10:18:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 92.62.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e2:3a:a4:95:5c:d4:df:b1:32:fe:90:68:68:a5:f7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Oct 14 10:18:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e5e2acb502be5f8fc1d67f341eaa6750097253a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:d6:81:20:99:c1:d2:b5:b1:03:98:6e:f1:
e9:91:6c:07:fb:10:0a:71:a5:c4:84:a0:d7:64:3c:
17:30:e1:fd:41:fb:d0:74:0d:ce:fe:d9:36:e7:91:
d5:bc:43:69:79:80:87:79:06:3e:89:f1:a7:81:62:
77:5c:31:f3:cf:51:d2:1d:1a:3f:d5:87:ad:b7:4f:
30:21:f2:94:bf:a2:05:2d:ff:17:ed:fc:21:de:cb:
e1:9e:7e:4c:a2:77:f9:6a:71:da:d3:0a:66:28:e7:
cc:f1:b1:03:0a:0b:52:77:4a:fe:05:8b:42:85:c9:
83:07:89:81:a3:a3:7c:da:1b:6b:b0:c3:60:78:9e:
bb:cc:6d:16:f8:38:7a:c5:01:e7:d6:6c:37:d0:f0:
51:e8:5f:72:99:e6:f1:44:02:1d:95:40:1b:4f:65:
9f:9a:51:68:bd:a4:ea:a4:f7:08:f4:84:ef:2b:db:
17:da:42:bd:e5:b1:7b:a0:9b:58:73:02:0d:46:f1:
a9:9a:84:80:0c:87:84:00:25:07:b6:4c:15:1d:6a:
5b:1b:56:1a:af:4c:6e:70:86:b9:b7:98:27:c7:9e:
8e:0a:22:fa:d3:22:b6:9a:fc:3c:f6:03:11:36:af:
ad:47:e2:f6:ba:ef:84:d9:07:de:45:f8:02:a2:62:
4a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5E:2A:CB:50:2B:E5:F8:FC:1D:67:F3:41:EA:A6:75:00:97:25:3A
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Xl4qy1Ar5fj8HWfzQeqmdQCXJTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.241.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e7:42:b7:0c:80:c8:ec:ac:51:59:c9:1a:b1:5a:77:dc:72:
20:3e:50:dd:65:17:8c:43:6d:76:65:31:79:d1:a1:7c:64:0c:
b3:9e:6b:31:96:a2:b5:9f:53:b7:8f:41:c5:91:7f:57:33:58:
ff:e9:3b:80:ed:87:05:c9:df:88:df:b8:d7:6e:cb:74:a6:93:
c5:07:76:27:ef:e5:8b:90:97:60:99:99:f9:94:01:c8:54:93:
cb:39:81:6e:d7:38:ff:26:06:6c:69:5c:1f:b7:21:88:4d:60:
a6:6f:ce:6e:2b:58:3a:3f:ae:33:e4:bb:53:ab:ae:4f:9f:43:
07:d3:cc:cd:17:57:8e:d9:3e:33:30:e0:06:e3:1d:ea:e7:a6:
e8:d9:ed:27:98:d7:bc:13:fa:ab:59:9e:c2:ad:d4:c6:06:25:
91:d9:d6:67:50:52:e1:03:34:c5:34:f9:34:03:74:a3:d6:5b:
ff:46:e8:4d:6f:65:5f:ef:87:85:c7:fd:7a:65:73:10:48:d3:
4e:c8:6c:ee:36:be:1b:39:14:a2:ae:4b:2b:bd:a7:b6:a5:d2:
70:35:20:05:f0:cf:fb:b9:97:71:85:9f:69:81:db:b0:72:44:
ce:da:77:f3:cf:b3:c8:71:18:1c:6b:4d:64:27:8b:d3:93:08:
10:56:41:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:13 2025 by rpki-client