Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/_Ua05IcZ-Kd74uu-acz3zYQ2UXg.roa
File: _Ua05IcZ-Kd74uu-acz3zYQ2UXg.roa (raw, json)
Hash identifier: VTikAPXKyS/i+ZZ35PgUSzUblUTlMqZmtelGl4Mi2wc=
Subject key identifier: FD:46:B4:E4:87:19:F8:A7:7B:E2:EB:BE:69:CC:F7:CD:84:36:51:78
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01987EF606BC41203A28B480BBE5BB41F54E
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/_Ua05IcZ-Kd74uu-acz3zYQ2UXg.roa
Signing time: Wed 06 Aug 2025 10:38:29 +0000
ROA not before: Wed 06 Aug 2025 10:38:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197537
IP address blocks: 92.62.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:f6:06:bc:41:20:3a:28:b4:80:bb:e5:bb:41:f5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Aug 6 10:38:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd46b4e48719f8a77be2ebbe69ccf7cd84365178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b8:86:ed:78:6e:cb:11:71:36:ab:c5:36:2c:
5a:7d:f4:15:e9:e3:9f:18:8f:ca:62:f2:48:f6:c5:
44:dd:c9:7d:8d:66:6a:d0:8e:6e:63:8c:8f:cb:6d:
2d:70:88:93:3f:47:c4:0e:7c:46:77:10:a7:1f:8f:
ad:82:c5:23:e2:c6:b6:47:d7:22:7e:cb:6a:66:c7:
df:5b:29:d8:d3:ec:a9:0f:fc:a6:31:79:67:08:6c:
53:10:ba:cb:13:ad:67:69:3e:6b:2f:45:b0:9d:c1:
0f:41:db:26:7b:e2:20:88:fa:a1:45:a8:87:98:6a:
db:a5:91:d6:1e:5c:85:32:db:65:df:0f:fe:a3:01:
e6:e3:09:ae:22:c7:c4:30:59:f6:89:dd:33:70:72:
31:06:6a:2c:a0:57:b8:28:5b:fb:32:e9:81:17:3d:
2e:66:2f:f7:e6:45:9a:fe:92:c5:eb:9c:db:25:a9:
38:98:e3:fe:69:c1:f5:33:c1:d1:1d:a7:cf:6b:c4:
79:3f:56:53:59:74:c1:1f:63:d0:f3:b1:6c:5d:a1:
8b:15:4e:33:cb:6d:df:08:22:d5:03:a2:1d:0b:e7:
82:82:e4:4b:eb:8f:c3:d8:a7:8f:d2:3b:ab:50:47:
6c:55:04:0f:5b:a5:68:c7:8b:a9:cf:08:48:f0:52:
6a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:46:B4:E4:87:19:F8:A7:7B:E2:EB:BE:69:CC:F7:CD:84:36:51:78
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/_Ua05IcZ-Kd74uu-acz3zYQ2UXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.245.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:64:cd:97:ff:6f:17:1a:d0:9e:6e:9d:b3:d2:3c:78:b8:0a:
bf:eb:17:16:71:bb:80:0e:8b:58:98:3d:ee:c9:c5:34:96:99:
2a:9c:2e:3e:e2:f2:7c:3d:c0:2b:1e:59:86:30:df:76:b9:35:
08:ef:8c:76:52:0b:5b:0b:5f:ba:56:60:a6:48:03:c5:54:15:
6c:1e:56:30:91:8c:ba:26:8c:df:40:69:a6:96:09:9a:f0:10:
2b:ad:40:0d:6c:27:0b:82:47:99:7d:a3:a9:06:2b:76:e8:a0:
8c:fa:41:c6:fe:e7:09:c8:9e:b9:9e:d5:9b:9d:2d:ec:b3:c3:
16:cd:18:24:44:c6:d5:39:dc:59:30:fb:52:58:b5:9a:b6:57:
f5:0a:72:c2:7d:d5:74:fd:c4:04:0a:0e:bb:1a:6c:7c:7e:88:
88:09:d2:a6:73:bd:b4:0c:f4:b4:37:51:f1:a5:67:8c:80:63:
fb:19:ab:0c:37:d2:ba:06:b7:c2:08:c3:9a:4b:ed:7b:bc:48:
a7:64:e2:98:96:d2:ea:62:93:b7:df:72:f4:da:3b:e3:59:26:
53:d1:4f:cd:e5:62:a4:c6:63:32:ba:8c:e2:35:e5:59:9f:28:
62:b7:39:7c:ae:67:0f:02:74:61:45:8c:40:dc:5e:92:d2:d5:
b3:0c:a4:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZh+9ga8QSA6KLSAu+W7QfVOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy
ODRkMGYwHhcNMjUwODA2MTAzODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDQ2YjRlNDg3MTlmOGE3N2JlMmViYmU2OWNjZjdjZDg0MzY1MTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbiG7XhuyxFxNqvFNixaffQV6eOf
GI/KYvJI9sVE3cl9jWZq0I5uY4yPy20tcIiTP0fEDnxGdxCnH4+tgsUj4sa2R9ci
fstqZsffWynY0+ypD/ymMXlnCGxTELrLE61naT5rL0WwncEPQdsme+IgiPqhRaiH
mGrbpZHWHlyFMttl3w/+owHm4wmuIsfEMFn2id0zcHIxBmosoFe4KFv7MumBFz0u
Zi/35kWa/pLF65zbJak4mOP+acH1M8HRHafPa8R5P1ZTWXTBH2PQ87FsXaGLFU4z
y23fCCLVA6IdC+eCguRL64/D2KeP0jurUEdsVQQPW6Vox4upzwhI8FJqgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP1GtOSHGfine+LrvmnM982ENlF4MB8GA1UdIwQY
MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt
NGY1N2Q5Y2Y1Y2FhLzEvX1VhMDVJY1otS2Q3NHV1LWFjejN6WVEyVVhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh
LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD71MA0G
CSqGSIb3DQEBCwUAA4IBAQC8ZM2X/28XGtCebp2z0jx4uAq/6xcWcbuADotYmD3u
ycU0lpkqnC4+4vJ8PcArHlmGMN92uTUI74x2UgtbC1+6VmCmSAPFVBVsHlYwkYy6
JozfQGmmlgma8BArrUANbCcLgkeZfaOpBit26KCM+kHG/ucJyJ65ntWbnS3ss8MW
zRgkRMbVOdxZMPtSWLWatlf1CnLCfdV0/cQECg67Gmx8foiICdKmc720DPS0N1Hx
pWeMgGP7GasMN9K6BrfCCMOaS+17vEinZOKYltLqYpO333L02jvjWSZT0U/N5WKk
xmMyuoziNeVZnyhitzl8rmcPAnRhRYxA3F6S0tWzDKQ0
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:03:20 2025 by rpki-client