Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/3138352e33312e3230322e302f32342d3234203d3e203231383430.roa
File: 3138352e33312e3230322e302f32342d3234203d3e203231383430.roa (raw, json)
Hash identifier: Kajayyoa2dzx1Wy8xnY0CxCsWP+YAOcNiSJVzn+7fM4=
Subject key identifier: 14:1A:75:14:C0:E1:D8:D7:37:0E:68:B3:3B:B8:4B:71:8D:85:D9:FC
Certificate issuer: /CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
Certificate serial: 31F5DE1BF300F3CB4FE6C9617A353A88216ACBE8
Authority key identifier: 64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/3138352e33312e3230322e302f32342d3234203d3e203231383430.roa
Signing time: Mon 21 Jul 2025 12:40:00 +0000
ROA not before: Mon 21 Jul 2025 12:35:00 +0000
ROA not after: Mon 20 Jul 2026 12:40:00 +0000
asID: 21840
IP address blocks: 185.31.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:f5:de:1b:f3:00:f3:cb:4f:e6:c9:61:7a:35:3a:88:21:6a:cb:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
Validity
Not Before: Jul 21 12:35:00 2025 GMT
Not After : Jul 20 12:40:00 2026 GMT
Subject: CN=141A7514C0E1D8D7370E68B33BB84B718D85D9FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a5:bb:ba:e5:bf:fc:8e:da:e5:99:98:c5:88:
90:14:41:3c:bd:7b:63:44:ca:eb:e5:da:14:44:19:
b3:ab:38:9b:98:48:cc:6e:09:b5:b2:ed:cd:de:0c:
13:c4:4d:53:6e:1f:4f:2c:51:72:a6:37:ac:ec:54:
de:2b:99:9d:10:90:36:1d:ea:e4:dc:e2:f4:3e:2c:
37:58:d7:9f:d0:fb:cf:a6:42:a3:8f:14:88:c1:26:
a5:4a:36:f3:c8:ba:8a:49:f6:dd:a5:41:00:bb:fb:
9d:52:1d:0d:be:b1:39:26:95:2c:2f:2a:36:9d:16:
07:e0:07:82:1a:96:59:6a:07:f3:d5:6a:00:3b:fb:
1b:70:94:5f:9f:3f:c7:c9:1b:ad:f1:8a:55:7c:8e:
91:0f:07:15:9c:ee:5b:98:15:eb:78:a0:b2:8c:e9:
d7:44:a8:db:8d:d9:d0:5a:93:87:e4:62:b7:ea:3f:
c2:29:68:d1:83:e8:36:3f:a8:e7:ec:25:f6:af:44:
d7:b4:84:07:04:6b:6f:18:d0:82:61:da:3f:db:48:
80:3d:e3:2c:41:30:e3:81:a6:e3:41:f2:e8:b3:ee:
54:55:57:74:e5:4c:75:8a:7b:e9:97:32:6a:d1:cb:
b3:de:a6:7f:4a:0d:44:da:e5:78:24:77:fa:1a:5c:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1A:75:14:C0:E1:D8:D7:37:0E:68:B3:3B:B8:4B:71:8D:85:D9:FC
X509v3 Authority Key Identifier:
keyid:64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/3138352e33312e3230322e302f32342d3234203d3e203231383430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.202.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:cf:65:b3:52:9b:cc:25:a4:53:2b:52:dc:5c:17:3b:8f:92:
ea:9a:81:2b:c6:c7:66:6b:b9:00:6f:31:9e:2b:d4:eb:17:d9:
62:e8:ff:3b:b6:f8:b9:d4:37:9c:48:6b:4a:8e:7b:10:fc:dd:
e0:92:91:d9:2e:4b:19:65:f9:c7:66:11:f9:a5:4b:98:18:2a:
1d:16:7f:ce:f2:49:9f:54:66:25:50:f6:eb:a7:20:8d:6e:92:
13:24:36:cd:2e:cf:bf:12:fa:84:1f:14:0e:3d:17:a7:51:71:
ae:f5:6c:ec:5b:60:44:0d:cd:d7:c4:04:10:9b:ec:5c:3a:d4:
b9:4c:42:c3:91:bc:cb:d8:20:bc:15:ab:d0:56:05:e2:50:e5:
ab:16:3c:ba:e3:aa:59:24:15:63:84:e6:9d:65:af:da:2c:01:
3f:84:56:e6:ca:1f:2b:fc:91:7c:e8:f8:25:d7:0f:71:ab:72:
7d:65:4a:a5:ed:76:66:d3:c8:2b:8f:9c:14:32:86:44:2b:7a:
89:7e:d0:11:a4:96:c3:ae:b3:6c:5c:05:ee:2a:db:a6:58:21:
4e:2b:d7:74:5a:48:9f:78:32:60:47:1e:0b:a3:69:0e:7c:8a:
ee:90:01:7d:3b:28:d8:3c:85:c5:78:05:e3:a6:70:c3:99:cf:
c5:1f:1a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:53:26 2025 by rpki-client