Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/wgXSVyqMPOaVRZoRz2DoQs27lno.roa
File: wgXSVyqMPOaVRZoRz2DoQs27lno.roa (raw, json)
Hash identifier: 5JI0l9I/46gau6VOxIi0gUhDeXleGfmQ+fS0p1j3UPM=
Subject key identifier: C2:05:D2:57:2A:8C:3C:E6:95:45:9A:11:CF:60:E8:42:CD:BB:96:7A
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01987EF607199EBA8DB9041752E5E8BDCB0B
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/wgXSVyqMPOaVRZoRz2DoQs27lno.roa
Signing time: Wed 06 Aug 2025 10:38:29 +0000
ROA not before: Wed 06 Aug 2025 10:38:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202736
IP address blocks: 92.62.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:f6:07:19:9e:ba:8d:b9:04:17:52:e5:e8:bd:cb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Aug 6 10:38:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c205d2572a8c3ce695459a11cf60e842cdbb967a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e0:10:41:ea:2d:4a:af:fd:2a:0e:63:aa:e0:
51:97:98:f4:44:9c:41:24:51:4c:42:f9:bf:68:58:
50:c4:9b:ff:ad:dd:c5:6f:80:86:11:5c:74:88:cc:
f7:49:e8:4b:1e:9c:c6:7f:69:4f:f9:23:80:28:d0:
93:a8:41:65:ad:14:05:db:83:39:01:20:46:17:a5:
3d:8c:96:d4:d8:a1:75:fe:7a:82:76:a0:b6:8d:a6:
8b:3b:32:f5:84:4a:26:92:9d:f5:e6:ce:09:f1:a2:
6e:f5:ea:b6:94:82:b8:ec:45:6b:56:56:fa:76:7a:
42:dd:1c:61:f4:ae:d7:31:e1:70:6b:df:7d:35:da:
da:36:24:9b:b1:c7:aa:b5:0d:07:d6:fd:c3:b1:60:
cd:8e:a4:0e:94:ae:5c:6c:28:13:44:c1:69:c1:14:
97:f1:4b:07:ad:eb:0d:18:1a:12:72:75:73:15:59:
3d:3d:6a:a7:c4:b8:58:8e:23:86:d3:4c:e0:8d:9d:
c1:ab:26:e8:18:1e:c8:b7:d6:ab:56:14:9f:37:2f:
88:77:da:7c:b1:85:8b:21:a4:20:0f:71:07:f0:2a:
c3:14:5a:51:5a:b9:68:bf:ee:72:12:e8:d4:15:40:
57:49:45:54:d4:65:4c:a5:fa:e8:28:b9:6c:0f:25:
27:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:05:D2:57:2A:8C:3C:E6:95:45:9A:11:CF:60:E8:42:CD:BB:96:7A
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/wgXSVyqMPOaVRZoRz2DoQs27lno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.245.0/24
Signature Algorithm: sha256WithRSAEncryption
29:bd:ed:06:91:b8:9b:b3:9c:c8:46:a4:37:ff:fb:d5:ba:28:
1b:16:87:b7:73:f0:81:37:6e:dc:bc:53:b6:e5:6f:5d:8a:e8:
cd:83:c4:a8:c5:11:1c:64:cb:7c:33:08:20:10:cf:ec:f6:82:
a0:3c:68:a4:d9:40:1e:95:6f:e2:a5:3f:da:f8:44:d6:3c:8b:
6e:03:85:68:91:e8:27:cb:49:8e:14:26:b7:ae:c0:06:b0:1b:
65:d8:33:41:64:fe:00:92:38:a1:cc:2a:3e:0d:6c:53:06:85:
49:ad:7a:c8:cb:5c:a1:8f:5f:55:62:a2:1d:85:8d:5a:48:d4:
c5:bc:34:9b:d4:db:12:fc:e6:67:09:2e:10:09:86:fd:98:3c:
31:42:a4:fe:5f:c9:76:b3:21:2a:95:9c:b1:6b:bc:61:de:62:
f8:29:f0:b1:49:92:24:aa:13:e9:91:00:0e:27:64:04:3f:ae:
7c:38:8e:7f:d0:24:cd:b8:b3:e2:34:56:be:55:a9:f9:90:00:
10:fe:8a:70:86:2b:8a:4c:d5:6e:de:2d:f5:f4:8e:a7:b3:38:
ee:ad:f8:eb:b8:0e:e1:f8:28:30:81:32:15:eb:0b:7e:32:06:
f5:15:5d:cd:d9:99:3c:d0:b9:3f:4d:c3:f6:b2:db:a7:fc:c0:
77:94:a1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:06:38 2025 by rpki-client