Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/3JFGNuMYTVRE_tgsRB9Dv7TkoAI.roa
File: 3JFGNuMYTVRE_tgsRB9Dv7TkoAI.roa (raw, json)
Hash identifier: cgDSOAUcOV7B/P90698S4nI5hWvg5jhDlyl5V3knjkc=
Subject key identifier: DC:91:46:36:E3:18:4D:54:44:FE:D8:2C:44:1F:43:BF:B4:E4:A0:02
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019A3BCB7DC535A5282BD02EC7FD361D9424
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/3JFGNuMYTVRE_tgsRB9Dv7TkoAI.roa
Signing time: Fri 31 Oct 2025 19:43:03 +0000
ROA not before: Fri 31 Oct 2025 19:43:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132335
IP address blocks: 92.62.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3b:cb:7d:c5:35:a5:28:2b:d0:2e:c7:fd:36:1d:94:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Oct 31 19:43:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc914636e3184d5444fed82c441f43bfb4e4a002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:f8:df:9a:ed:ae:29:53:a0:4a:21:36:5f:
cb:70:83:ca:54:1e:03:c9:4e:78:fa:e7:05:9e:4f:
49:5d:d0:d1:5b:23:eb:ee:6b:5e:11:99:05:c2:29:
44:4a:ff:d3:09:49:85:42:ab:d0:c6:01:b4:df:b0:
b3:85:92:b9:ca:6c:95:e0:be:e1:45:67:53:32:95:
1f:13:89:2f:ce:56:6e:e7:12:d5:c5:f1:9e:5e:53:
6b:f8:d6:f3:c2:84:4b:0a:fe:fc:2f:4c:fb:4a:eb:
21:0d:89:e2:06:04:ed:97:0c:5b:85:f6:1b:90:93:
6d:6e:72:c5:4e:ff:8f:e9:7d:7a:4f:52:7e:ec:98:
0d:62:71:ff:0a:c6:6e:f8:4f:a3:e2:31:20:5c:ac:
f1:9c:03:0b:f5:d7:a8:3c:14:49:ab:6a:13:7a:cc:
64:d2:ff:c3:2e:2e:37:38:8f:17:02:36:ae:6c:dd:
00:aa:27:02:ff:1e:18:a4:73:ef:47:1b:25:6e:8d:
51:62:fd:e2:f0:77:74:ae:fe:95:12:f1:d2:75:10:
e0:0c:bc:58:2f:8e:65:55:e1:53:09:38:16:f4:77:
a6:1b:5f:58:b2:60:ce:6f:c7:64:50:41:90:eb:0d:
c1:96:8a:3f:0c:08:eb:6e:3f:30:00:6c:3e:18:13:
c4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:91:46:36:E3:18:4D:54:44:FE:D8:2C:44:1F:43:BF:B4:E4:A0:02
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/3JFGNuMYTVRE_tgsRB9Dv7TkoAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.240.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:23:37:e0:5c:e1:d9:3e:11:13:ce:39:e6:a7:0b:ca:dc:cf:
7a:a5:ee:8c:14:e8:99:96:fe:56:93:1d:bd:b0:ca:b2:20:e9:
6d:cb:b8:1f:93:59:82:3c:bb:be:b5:53:17:0c:c4:90:00:f7:
18:9d:5c:22:b9:a2:3f:d1:ce:fc:93:8c:43:a4:2c:48:52:2e:
36:c5:89:fb:71:ee:51:34:c0:78:d8:fc:61:44:1b:6c:d9:2e:
9a:ec:e7:05:9c:e1:af:a8:9f:2f:13:a8:74:2e:f9:5b:35:ce:
29:52:ed:57:21:43:b0:6c:b7:17:4b:79:f4:cc:70:8f:38:65:
aa:35:19:9d:94:74:7d:24:8d:fd:a5:ac:e2:29:02:83:76:f9:
c6:6e:61:b5:ac:1f:e7:45:42:73:99:7f:a4:05:2f:e1:ef:8f:
3f:46:23:4c:84:9b:a4:cc:c6:8d:f1:3a:be:a6:e0:05:17:49:
21:c7:db:a1:86:b1:39:0d:cd:9e:bb:11:6c:ab:2f:0c:60:bf:
a6:38:30:b1:7f:72:ea:4e:02:de:09:5e:48:f8:aa:61:4a:1f:
9b:01:ba:3d:aa:40:ed:c3:2a:8c:ff:48:7b:56:a3:2c:08:fd:
84:9d:76:94:c2:f4:3d:75:59:c5:c8:75:62:df:e6:77:13:26:
ed:8a:2f:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZo7y33FNaUoK9Aux/02HZQkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy
ODRkMGYwHhcNMjUxMDMxMTk0MzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzkxNDYzNmUzMTg0ZDU0NDRmZWQ4MmM0NDFmNDNiZmI0ZTRhMDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro/435rtrilToEohNl/LcIPKVB4D
yU54+ucFnk9JXdDRWyPr7mteEZkFwilESv/TCUmFQqvQxgG037CzhZK5ymyV4L7h
RWdTMpUfE4kvzlZu5xLVxfGeXlNr+NbzwoRLCv78L0z7SushDYniBgTtlwxbhfYb
kJNtbnLFTv+P6X16T1J+7JgNYnH/CsZu+E+j4jEgXKzxnAML9deoPBRJq2oTesxk
0v/DLi43OI8XAjaubN0AqicC/x4YpHPvRxslbo1RYv3i8Hd0rv6VEvHSdRDgDLxY
L45lVeFTCTgW9HemG19YsmDOb8dkUEGQ6w3Bloo/DAjrbj8wAGw+GBPE+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNyRRjbjGE1URP7YLEQfQ7+05KACMB8GA1UdIwQY
MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt
NGY1N2Q5Y2Y1Y2FhLzEvM0pGR051TVlUVlJFX3Rnc1JCOUR2N1Rrb0FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh
LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD7wMA0G
CSqGSIb3DQEBCwUAA4IBAQCzIzfgXOHZPhETzjnmpwvK3M96pe6MFOiZlv5Wkx29
sMqyIOlty7gfk1mCPLu+tVMXDMSQAPcYnVwiuaI/0c78k4xDpCxIUi42xYn7ce5R
NMB42PxhRBts2S6a7OcFnOGvqJ8vE6h0LvlbNc4pUu1XIUOwbLcXS3n0zHCPOGWq
NRmdlHR9JI39paziKQKDdvnGbmG1rB/nRUJzmX+kBS/h748/RiNMhJukzMaN8Tq+
puAFF0khx9uhhrE5Dc2euxFsqy8MYL+mODCxf3LqTgLeCV5I+KphSh+bAbo9qkDt
wyqM/0h7VqMsCP2EnXaUwvQ9dVnFyHVi3+Z3Eybtii/4
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:12:20 2025 by rpki-client