Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235322e302f32342d3234203d3e20313335343032.roa
File: 3139342e33342e3235322e302f32342d3234203d3e20313335343032.roa (raw, json)
Hash identifier: PzY2ZjUPUkaqIDtZu9fHD0rPK6Exx+TMbdxcEJS1upA=
Subject key identifier: 30:54:7D:DC:33:56:A5:DE:29:9C:2C:5D:C7:C7:2D:5F:2C:EC:BE:CD
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 35539E26EBAA2E1C520086CAF89EB2A89F2310BC
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235322e302f32342d3234203d3e20313335343032.roa
Signing time: Tue 15 Jul 2025 08:26:46 +0000
ROA not before: Tue 15 Jul 2025 08:21:46 +0000
ROA not after: Tue 14 Jul 2026 08:26:46 +0000
asID: 135402
IP address blocks: 194.34.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:53:9e:26:eb:aa:2e:1c:52:00:86:ca:f8:9e:b2:a8:9f:23:10:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jul 15 08:21:46 2025 GMT
Not After : Jul 14 08:26:46 2026 GMT
Subject: CN=30547DDC3356A5DE299C2C5DC7C72D5F2CECBECD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:1d:a6:e8:ac:94:d1:a4:2b:70:d1:cd:01:
be:21:45:d3:8f:67:d2:b6:d5:be:09:9d:80:0a:c6:
4d:b3:2b:29:04:fe:13:91:2f:fc:c2:a1:ae:3e:fc:
9b:96:95:7a:92:21:94:8a:8e:76:25:f2:b2:eb:ba:
ab:57:a7:7e:6a:3f:39:a2:79:52:c2:e4:94:18:7d:
d1:6f:8c:8e:7f:13:bc:ab:76:39:b0:d6:f4:87:f7:
4b:d5:41:06:7f:06:71:4a:84:e1:86:a9:c7:5d:48:
a2:6e:83:2f:5a:65:a4:b8:c2:b4:98:c0:b7:40:ff:
0b:86:48:9d:52:0e:d4:a0:70:11:4a:81:3f:04:93:
c8:e4:74:31:95:6d:b1:db:90:ce:8b:7b:9b:0b:48:
2b:ed:79:b1:d9:f1:45:0c:33:5a:eb:0a:ec:bb:29:
c8:9e:b3:7c:2c:0c:18:79:35:ed:23:65:98:9e:29:
92:59:b8:9f:06:35:03:d1:fb:91:97:cb:5a:2d:e3:
c1:ee:0e:84:d3:65:66:1f:f9:ac:d8:41:48:6a:03:
62:85:bb:32:67:23:df:8f:35:ea:3a:4a:02:0d:f3:
7a:0a:b9:d9:91:53:a5:ff:9b:77:4d:8d:96:94:a7:
7f:e3:51:3d:66:23:bd:bc:e7:96:d1:49:f9:96:bb:
04:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:54:7D:DC:33:56:A5:DE:29:9C:2C:5D:C7:C7:2D:5F:2C:EC:BE:CD
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235322e302f32342d3234203d3e20313335343032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.252.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:7e:c8:eb:33:fa:3a:6b:64:07:c7:a0:7c:ac:b9:4a:84:7f:
c5:3d:13:a3:45:2c:ec:d5:57:73:d7:41:8e:e4:3c:76:85:3c:
32:6b:30:bc:2b:c0:77:b8:a4:a3:5e:7a:ab:26:d1:bc:a2:2f:
c1:5b:ca:6b:df:d6:dd:ab:21:45:e0:8d:59:ad:6b:56:87:c9:
c3:08:14:b7:82:73:68:4d:5b:e7:70:c1:54:7a:bc:10:70:fa:
e4:49:90:22:b6:cc:19:81:57:31:59:02:4f:79:9c:38:a1:e4:
75:6b:97:ce:d0:19:b7:1d:b3:58:60:46:23:a7:69:6a:32:2f:
72:f6:a7:2b:84:8b:9b:32:ef:1e:a2:4d:a2:7a:96:af:88:9c:
77:14:d5:d6:05:4f:f6:7d:ea:7e:57:9b:52:74:e2:8b:a4:0a:
e8:7b:64:68:4e:04:68:87:9b:a9:69:9e:4b:7e:d7:8c:f5:a7:
e0:03:4b:be:ff:89:85:bc:48:de:48:65:e0:8a:f3:59:da:81:
cd:a1:8e:9d:12:15:fe:7e:58:99:9a:e9:ab:80:b2:f1:f9:cf:
2d:03:57:a2:ea:b2:69:ca:56:fd:32:31:e1:01:2a:09:b4:e7:
89:33:46:d8:18:c3:31:e3:fe:63:be:50:58:8a:0f:71:02:73:
f7:e4:6e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:27:22 2025 by rpki-client