Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/323030313a3637383a313064303a3a2f34382d3438203d3e20323133363035.roa
File: 323030313a3637383a313064303a3a2f34382d3438203d3e20323133363035.roa (raw, json)
Hash identifier: Rc6xidsdGh15ql3Ow7KrnpPwhjt8cOH5K4OZkWTDad0=
Subject key identifier: 57:3D:4A:B1:54:65:7A:77:CB:C4:A8:0C:66:14:24:FE:D1:45:C5:BA
Certificate issuer: /CN=c0d6d353c935e0fe15c81690dca11d31ed250300
Certificate serial: 14BD1F5246A8E5B71480C922D0712AEDAA2A2C79
Authority key identifier: C0:D6:D3:53:C9:35:E0:FE:15:C8:16:90:DC:A1:1D:31:ED:25:03:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNbTU8k14P4VyBaQ3KEdMe0lAwA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/323030313a3637383a313064303a3a2f34382d3438203d3e20323133363035.roa
Signing time: Wed 16 Jul 2025 12:03:30 +0000
ROA not before: Wed 16 Jul 2025 11:58:30 +0000
ROA not after: Wed 15 Jul 2026 12:03:30 +0000
asID: 213605
IP address blocks: 2001:678:10d0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/C0D6D353C935E0FE15C81690DCA11D31ED250300.crl
rsync://rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/C0D6D353C935E0FE15C81690DCA11D31ED250300.mft
rsync://rpki.ripe.net/repository/DEFAULT/wNbTU8k14P4VyBaQ3KEdMe0lAwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 16:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:bd:1f:52:46:a8:e5:b7:14:80:c9:22:d0:71:2a:ed:aa:2a:2c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d6d353c935e0fe15c81690dca11d31ed250300
Validity
Not Before: Jul 16 11:58:30 2025 GMT
Not After : Jul 15 12:03:30 2026 GMT
Subject: CN=573D4AB154657A77CBC4A80C661424FED145C5BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a0:3f:3b:20:1b:ae:5d:b9:87:98:d3:6f:38:
d8:ae:f5:4c:46:64:fa:12:c8:b8:51:40:85:aa:b4:
b9:80:da:83:d9:8a:9e:ea:0f:3b:e0:1f:96:bf:49:
e9:3d:d8:cd:10:94:f1:75:0c:19:3d:b6:ee:0c:fe:
08:5d:6e:57:e0:f6:d1:83:14:10:8c:48:37:72:1e:
28:ee:c6:f7:2a:42:ab:e0:94:fb:99:21:b0:99:cb:
c0:b3:81:46:e7:6d:8a:ec:f5:e3:51:bd:64:4a:9e:
af:0d:e0:82:c6:4f:9e:06:10:b6:c1:f5:2f:f6:e6:
8e:22:53:f6:5d:07:01:6b:13:1c:95:11:64:53:31:
31:4e:65:22:3b:69:b0:26:80:de:3f:a7:a8:b9:1f:
5e:ef:e1:a4:33:82:fa:98:0f:bc:8b:b4:0b:44:b7:
cd:51:da:0e:5c:24:b3:49:1c:4b:58:a2:b4:f7:ef:
77:02:fc:32:3e:e2:12:3d:f7:42:11:43:f7:18:32:
80:46:e6:bd:f8:ff:a4:6f:c0:80:9f:d8:cb:2f:4c:
2f:c8:03:76:fe:42:fc:48:da:cc:7f:9f:6b:84:e2:
b4:5c:c6:c7:5b:af:b1:ae:b8:aa:f1:92:db:5b:66:
91:49:93:a0:22:f5:b1:34:44:ff:0c:25:08:25:a5:
b1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3D:4A:B1:54:65:7A:77:CB:C4:A8:0C:66:14:24:FE:D1:45:C5:BA
X509v3 Authority Key Identifier:
keyid:C0:D6:D3:53:C9:35:E0:FE:15:C8:16:90:DC:A1:1D:31:ED:25:03:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/C0D6D353C935E0FE15C81690DCA11D31ED250300.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNbTU8k14P4VyBaQ3KEdMe0lAwA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/323030313a3637383a313064303a3a2f34382d3438203d3e20323133363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:10d0::/48
Signature Algorithm: sha256WithRSAEncryption
8d:c0:94:2c:35:bb:e8:b2:58:80:a8:5a:29:98:27:fc:f3:7c:
9c:8a:01:a8:cb:18:72:ba:25:b3:2b:a0:e9:0d:c1:9d:dd:6c:
b3:43:6b:b5:d2:c1:45:4a:23:6a:a2:b4:c0:2e:d3:cb:0f:df:
90:72:af:05:cc:1b:5f:69:ca:56:e9:a8:39:28:bb:c2:6e:1d:
f8:07:be:55:da:0a:83:0c:e1:3b:88:b0:65:7b:78:3b:e7:b0:
3c:d4:d9:3d:0b:4d:d7:dc:2a:3a:b9:27:77:6c:61:c2:33:df:
51:08:5a:f4:7a:45:a6:6c:0e:18:1b:a2:31:4f:29:38:b0:d3:
19:fa:91:12:59:22:1a:d4:b4:d7:e5:52:45:99:33:24:d2:bd:
9c:39:0d:eb:2c:70:91:20:ba:48:98:a2:4a:a6:fd:a7:17:d1:
a6:51:67:5c:06:c2:6b:50:31:ae:78:b2:19:12:03:12:26:16:
af:74:06:fd:ce:a2:29:d8:dd:e9:2c:82:e6:0b:46:26:cf:b9:
1a:bb:ac:42:a7:18:be:6a:74:03:29:e0:f9:9c:f9:c5:af:42:
11:cf:2b:3b:d3:d3:23:83:58:64:2f:c2:2d:5b:86:cc:d0:45:
45:4b:22:e0:44:fe:07:1b:82:35:e4:d4:9f:fc:00:f3:ad:d4:
d2:40:93:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 01:55:12 2025 by rpki-client