Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/iZaZeEkRfA-qPxq2ngG3cfkXZcs.roa
File: iZaZeEkRfA-qPxq2ngG3cfkXZcs.roa (raw, json)
Hash identifier: T0PfM8f9MKiqot92ZRLwnMqkMZ5rdvRshuTN3e9yWu4=
Subject key identifier: 89:96:99:78:49:11:7C:0F:AA:3F:1A:B6:9E:01:B7:71:F9:17:65:CB
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019A2AA9330DE2208F05AD6A1BDFBCC90887
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/iZaZeEkRfA-qPxq2ngG3cfkXZcs.roa
Signing time: Tue 28 Oct 2025 11:52:03 +0000
ROA not before: Tue 28 Oct 2025 11:52:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393942
IP address blocks: 92.62.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:a9:33:0d:e2:20:8f:05:ad:6a:1b:df:bc:c9:08:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Oct 28 11:52:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8996997849117c0faa3f1ab69e01b771f91765cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:23:78:a8:9b:56:0b:e5:2d:16:ff:99:ab:17:
b5:cc:7e:81:b3:00:77:a3:d9:f5:6e:44:a7:0d:58:
39:8f:dc:8c:cc:30:7e:24:ab:05:6d:c4:83:fa:9d:
1a:cb:fc:a4:fe:f2:80:a2:24:dc:d8:c6:52:c5:03:
1b:0d:bd:1b:5e:f6:c4:f1:84:6a:b1:59:3f:c5:a5:
9a:21:fa:14:0e:9d:5b:23:06:4d:15:09:dd:a7:83:
a2:de:8f:7e:c8:6a:b8:4b:48:56:a2:4b:63:1c:3c:
b0:85:0d:f2:95:66:7c:cd:ca:e9:87:4b:d8:9e:f7:
1a:37:dc:fb:a3:e7:9c:f3:21:5b:5e:a4:a2:15:2d:
be:81:64:b7:26:fc:cd:41:04:64:e3:1d:ae:74:8d:
e2:5f:cb:b1:25:93:27:d2:85:55:12:7f:81:02:07:
d0:16:e9:65:d6:c2:ad:27:9e:be:36:3e:c3:cd:2e:
05:96:62:d7:4f:19:ce:1a:36:5a:5f:23:32:74:40:
ab:14:93:9b:4b:dc:86:a1:02:60:ed:f4:45:88:05:
fc:0d:b2:9e:b4:33:bc:d9:00:27:a0:dc:54:de:c6:
97:6f:14:56:ab:e8:c0:f0:63:51:4e:2d:7e:2a:38:
a3:14:3d:06:59:ad:59:83:22:63:8c:c8:51:26:e9:
ca:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:96:99:78:49:11:7C:0F:AA:3F:1A:B6:9E:01:B7:71:F9:17:65:CB
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/iZaZeEkRfA-qPxq2ngG3cfkXZcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.246.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:dc:41:d7:2a:b2:d2:e4:ad:fb:48:69:fd:80:f7:1b:fe:bd:
d7:67:c3:60:15:f7:97:79:47:29:3c:7d:08:b0:bd:79:e6:ba:
1d:44:8d:06:ee:8b:c2:37:8d:72:26:5f:5f:2d:04:ba:2a:3f:
e3:96:8a:ed:c1:42:df:72:a3:ce:89:81:21:a3:dd:e9:ef:39:
7d:e7:68:63:f9:c5:cf:f8:a9:94:ad:f4:e8:de:a3:1f:f0:8c:
c0:07:29:02:61:f7:cd:2b:38:6b:7a:80:e1:9e:3a:54:f1:e2:
8a:ba:38:a5:99:9b:d7:06:f0:ef:83:9b:23:25:dc:cb:e8:18:
b4:48:30:7c:a9:ce:42:c5:30:65:c2:50:c8:2b:74:be:20:0d:
90:aa:3d:9d:c6:8e:fc:25:1a:80:6a:ff:5b:ed:8d:12:ed:84:
11:f6:0b:20:fc:e3:04:b1:96:6c:12:fc:05:31:f3:14:7c:68:
33:04:df:02:43:59:66:02:a4:88:5b:24:c8:50:d2:c0:f5:4c:
31:df:9d:00:61:5b:75:ee:6f:0d:66:ed:ba:94:08:f3:5d:8f:
5e:ea:1d:43:c9:af:e0:fe:40:86:6d:88:00:80:18:e1:00:dd:
80:ac:48:e3:cd:31:03:f1:7d:78:74:8e:4a:b1:3f:b2:b3:a2:
9c:29:c4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:29:22 2025 by rpki-client