Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131352e302f32342d3234203d3e20383334.roa
File: 3138352e39312e3131352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: zzyNY9Z380nf52h8GF7GR/wABw1X/Wthebqe+5mqapg=
Subject key identifier: D5:E2:5C:6A:46:93:86:4E:CC:5F:25:36:99:3D:54:96:41:76:D4:94
Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9
Certificate serial: 51DBDE291623363C49C5A9692DED3D95D71BCA0C
Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131352e302f32342d3234203d3e20383334.roa
Signing time: Mon 21 Jul 2025 00:04:04 +0000
ROA not before: Sun 20 Jul 2025 23:59:04 +0000
ROA not after: Mon 20 Jul 2026 00:04:04 +0000
asID: 834
IP address blocks: 185.91.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl
rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:db:de:29:16:23:36:3c:49:c5:a9:69:2d:ed:3d:95:d7:1b:ca:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9
Validity
Not Before: Jul 20 23:59:04 2025 GMT
Not After : Jul 20 00:04:04 2026 GMT
Subject: CN=D5E25C6A4693864ECC5F2536993D54964176D494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:97:9a:55:af:f7:1d:e3:d5:9d:86:ee:54:5b:
ef:b0:ad:d8:65:8a:89:55:08:76:56:84:7f:37:38:
e5:24:a0:e7:18:cf:67:2f:d1:ab:35:88:4a:7d:db:
86:3b:37:12:62:91:8d:68:be:b9:b5:82:59:7f:7f:
bf:96:f7:f4:30:1e:ed:65:77:b4:c8:24:a3:98:7e:
fa:a7:08:3d:db:ba:f3:b6:7e:39:7b:ef:2f:a9:06:
7c:2f:d9:d8:83:01:a5:f3:07:24:b3:5b:c3:01:53:
07:ee:c3:e0:e5:6a:ea:f4:16:2f:4d:a3:76:f9:02:
56:b8:7e:fc:9c:b8:a8:bb:8e:64:d4:53:60:c7:ea:
c7:b7:7f:49:52:f6:f8:45:66:94:7c:d5:55:6e:eb:
66:1e:24:aa:2e:d2:11:44:27:87:16:a5:31:5e:e9:
8a:09:63:dd:ee:69:59:61:6a:4c:43:35:7a:02:b0:
1e:14:5d:cd:42:5c:63:5f:f6:25:94:fd:55:34:c9:
17:fe:86:0d:e6:b8:9e:fc:f7:99:a3:dc:4f:0c:8f:
bb:5d:63:29:61:4e:da:2b:08:1c:ee:bd:8f:d5:fb:
19:58:27:24:24:ee:63:a6:66:73:3e:61:e7:90:2e:
27:d1:89:d7:0c:96:cd:c4:80:6e:b0:7e:59:61:31:
59:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E2:5C:6A:46:93:86:4E:CC:5F:25:36:99:3D:54:96:41:76:D4:94
X509v3 Authority Key Identifier:
keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.115.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f9:7c:c3:c5:43:94:1c:0f:f1:83:ab:ec:c9:02:48:fe:ed:
8e:de:f7:bc:c8:d9:9a:4c:a1:96:0e:fe:03:2e:cf:8f:e6:04:
0d:ef:7d:b4:d5:1f:13:59:5c:6f:19:fa:05:22:ae:4f:e6:2b:
74:6a:93:29:6c:29:99:eb:f6:28:d4:2f:25:dc:61:85:f7:9d:
24:a8:6e:54:47:ec:df:2e:d3:ab:92:21:35:0d:b6:02:b5:26:
b5:e3:a2:92:2e:31:9a:af:9a:97:5e:75:2b:e3:08:55:c8:9c:
2f:6b:87:21:81:ea:72:c3:ec:22:6b:eb:cc:d8:68:ec:3c:13:
23:0b:3a:ec:20:48:03:5f:1d:dc:14:88:78:3e:4a:78:4a:5e:
9f:f9:40:c1:58:8e:dc:62:6e:e6:bd:54:09:bb:80:eb:08:8f:
c8:d6:3d:b3:cb:ce:ba:bf:67:28:17:5a:63:ab:84:a6:fd:2c:
84:0a:32:28:fb:be:85:f2:77:29:7e:93:0c:51:bf:09:61:27:
7a:fc:6a:df:96:4c:64:8d:03:a1:18:05:cc:1c:a9:25:e1:fd:
3a:2c:93:c3:fb:9b:db:ff:b1:ec:4f:ab:07:ff:81:be:0a:f8:
ea:b7:d7:c9:9c:12:94:1b:f2:5a:4b:a2:f3:54:43:d7:2a:fe:
5a:1c:83:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:17:14 2025 by rpki-client