Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3234382e302f32342d3234203d3e203136323736.roa
File: 3138352e3231332e3234382e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: YVFopn7jbA0T8pFEsoI9hYTL9xS+8ZrOGuFkjL/rBgk=
Subject key identifier: 6E:59:30:FA:55:E8:87:3E:1A:21:22:E5:F7:6A:92:44:B1:77:5E:72
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 64F2AECA2C6932C55263C5114441314B3CE366F8
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3234382e302f32342d3234203d3e203136323736.roa
Signing time: Fri 11 Jul 2025 05:46:03 +0000
ROA not before: Fri 11 Jul 2025 05:41:03 +0000
ROA not after: Fri 10 Jul 2026 05:46:03 +0000
asID: 16276
IP address blocks: 185.213.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:f2:ae:ca:2c:69:32:c5:52:63:c5:11:44:41:31:4b:3c:e3:66:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jul 11 05:41:03 2025 GMT
Not After : Jul 10 05:46:03 2026 GMT
Subject: CN=6E5930FA55E8873E1A2122E5F76A9244B1775E72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2e:d0:85:3d:40:d7:8f:1a:cf:ab:29:e8:40:
15:6d:d9:c0:ad:5d:3c:fa:a6:47:89:67:5b:73:1f:
e3:22:aa:33:d3:33:e8:b9:53:d4:7b:7b:6a:ee:15:
75:f8:09:69:a1:0d:3a:0d:66:4f:e6:ad:09:ac:70:
9d:56:5e:2a:2d:9e:bd:d7:60:0f:48:9a:e9:a0:52:
f4:38:fe:31:7b:41:f4:22:69:2b:14:f1:8f:a0:dc:
16:61:a0:a5:f1:20:88:38:3f:7f:50:69:77:b3:42:
38:28:b1:03:76:7e:1b:08:20:39:57:8f:e9:9e:af:
63:7c:e5:a0:e3:9b:30:8b:02:cc:27:2e:9c:5b:15:
ae:1d:d1:43:88:31:c8:77:f7:f4:a3:1b:1b:3b:6d:
51:5e:5f:32:da:5f:97:8d:d6:62:6b:a6:2d:16:a2:
f7:0a:3c:23:1d:31:75:e3:d6:6e:29:da:37:c4:08:
79:81:f6:34:d1:2e:df:16:d7:3b:59:77:ff:78:a6:
ba:58:bb:ae:b6:f2:d4:19:4d:3a:66:6e:b9:33:c8:
d2:99:0f:cf:3a:9a:d2:c4:aa:85:7b:ba:d2:f9:28:
60:39:fb:62:30:bb:08:0b:3a:33:0a:8a:36:85:47:
0d:44:fc:00:0b:8a:2a:4f:11:b1:46:3a:4a:56:3e:
eb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:59:30:FA:55:E8:87:3E:1A:21:22:E5:F7:6A:92:44:B1:77:5E:72
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3234382e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.248.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:9b:23:06:7d:b5:f8:6f:7e:51:ca:53:52:75:80:23:46:ce:
50:24:a2:99:7a:02:b0:78:32:55:3f:44:12:d9:d6:d4:2a:05:
de:86:fe:20:5a:93:94:53:70:af:03:9a:0e:91:f3:4a:d2:9d:
3d:c5:d4:c4:44:35:f3:a4:8a:8b:fb:9c:a2:e6:de:9f:67:f3:
4f:83:b4:71:45:45:5b:0f:4d:e6:a2:db:d2:30:2e:14:9f:c0:
f4:29:93:8d:37:c7:41:06:7d:9a:3f:f1:af:99:3f:ac:19:1b:
f2:6f:4b:44:1a:b1:50:e9:87:a9:2f:d3:48:83:6c:70:e5:7f:
53:0f:c9:a7:82:08:92:ac:7d:92:3c:ce:75:36:b2:ff:be:be:
2e:2c:f2:ef:d2:71:b3:53:cb:1a:74:84:d9:f3:6a:2d:eb:61:
d8:2a:9c:c5:99:8a:db:7d:2a:9d:e9:29:85:30:42:c7:0f:75:
ee:f1:27:88:35:0c:f9:87:34:7d:84:3c:75:9c:b7:33:c2:77:
b1:0f:e3:5b:c9:1c:84:71:31:86:e9:1e:f0:6b:70:03:dc:9d:
26:15:4c:39:75:a3:13:71:5d:98:d3:53:ee:5c:3f:c6:b8:07:
69:f9:cb:f5:bc:c8:ae:b0:9a:4f:a2:27:2e:e7:88:44:b2:d0:
f0:73:da:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:30:25 2025 by rpki-client