Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa
File: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier: XdAkV6zbkuI1AZDLksTC73fyYmD1RaBTy+I3AGFuaxA=
Subject key identifier: 14:58:DC:F1:45:2C:8B:73:BA:FD:3C:AF:E5:F3:0D:23:AB:96:B7:0F
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 7CB3CBE09B6E270F2238A00B4DA705ABAA8B98B9
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa
Signing time: Fri 11 Jul 2025 22:31:31 +0000
ROA not before: Fri 11 Jul 2025 22:26:31 +0000
ROA not after: Fri 10 Jul 2026 22:31:31 +0000
asID: 42831
IP address blocks: 109.234.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 05:05:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:b3:cb:e0:9b:6e:27:0f:22:38:a0:0b:4d:a7:05:ab:aa:8b:98:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Jul 11 22:26:31 2025 GMT
Not After : Jul 10 22:31:31 2026 GMT
Subject: CN=1458DCF1452C8B73BAFD3CAFE5F30D23AB96B70F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:18:d4:6c:80:75:c7:eb:7f:73:32:04:02:2e:
29:3c:5b:b9:12:4e:d3:52:b8:c3:5c:61:ab:2a:fa:
b8:83:df:f2:e7:a1:b3:50:22:c9:b7:95:04:62:8d:
6d:f2:c3:57:a5:e8:e1:76:84:92:d1:8a:0a:57:ca:
87:69:85:3f:3c:4e:2a:98:ba:30:ca:fa:1a:79:a4:
7c:2e:f1:0f:41:c2:f1:50:24:81:62:99:2e:49:88:
f3:9e:53:d7:d6:d0:80:0c:ec:a4:26:2f:11:ce:dc:
8a:12:d8:19:4d:d4:44:93:a8:12:ea:dc:ab:ec:e3:
6f:79:7d:82:eb:fa:29:64:fb:b7:93:59:d0:5a:be:
8c:58:3f:0a:ed:a2:f1:44:6e:a0:49:4c:73:2f:14:
75:01:92:29:b5:2c:22:f1:9d:cf:e8:2f:00:90:6a:
79:ca:65:e3:32:52:e9:52:6e:6c:67:30:54:0d:86:
33:72:03:5c:7e:d6:3f:25:e4:5b:b4:eb:c2:77:0d:
05:0e:3e:56:b2:ad:72:ce:33:4c:fa:44:72:97:ea:
41:1d:c5:47:6c:99:0a:17:ed:85:4a:a4:6d:ee:ed:
52:65:ba:cc:b4:9a:61:d6:b7:4f:bf:21:bf:31:16:
ed:91:43:06:d4:4d:dc:a0:0f:f1:c3:3e:85:e1:bf:
cc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:58:DC:F1:45:2C:8B:73:BA:FD:3C:AF:E5:F3:0D:23:AB:96:B7:0F
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.210.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:28:b0:7a:ba:a1:e6:4c:02:a9:d1:25:c8:ea:f7:d6:68:89:
c5:31:4d:fa:06:98:f4:15:c2:79:81:a9:db:85:98:68:c5:17:
59:44:b9:eb:54:ab:a5:e5:26:48:c9:88:0d:18:49:9d:b2:3c:
0d:d0:e2:c9:d0:1f:aa:a0:41:80:83:e6:6e:a0:20:49:e5:1f:
41:14:f3:45:6a:08:73:da:a2:58:81:03:0f:09:7b:e2:fc:5e:
0c:51:3b:7c:97:d0:e5:b2:f8:b3:71:e2:d7:24:94:6a:5d:99:
9b:4c:8d:7f:77:95:ac:e3:a6:53:7d:92:0b:06:d2:e5:6b:3c:
40:f7:db:09:e3:c4:4d:d0:66:50:1d:35:f6:6a:bf:0a:fa:28:
a4:14:7a:5b:e5:9d:e1:3e:0d:dc:e3:5e:62:c7:e4:c2:be:16:
10:f9:98:a6:e9:e2:4a:49:e2:fc:07:f7:95:87:87:07:fa:2f:
4b:75:f6:83:d1:fc:c0:d8:62:4e:f4:38:c8:8d:21:98:27:09:
a0:57:ae:11:e9:2d:be:fb:7a:8c:7e:c8:c3:d1:4a:5f:8b:03:
8b:6b:86:b0:ab:37:f5:36:6f:be:20:07:35:dc:14:5e:75:44:
97:d8:9b:e9:5a:91:65:63:dc:49:be:75:dc:1f:3e:1f:8c:b7:
36:d2:46:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:38:14 2025 by rpki-client