Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130372e302f32342d3234203d3e20383334.roa
File: 3138352e3234302e3130372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: leKcza5Qs/RyDeK2ErrnhwnHbLnSq2LOSorSLAW6m5c=
Subject key identifier: B7:6D:4C:05:61:80:06:46:9A:76:3A:2B:1E:82:44:E9:5E:43:11:37
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 68C895883D5E8E2BBA66CC139CBBBD9EB836144D
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130372e302f32342d3234203d3e20383334.roa
Signing time: Fri 11 Jul 2025 00:04:07 +0000
ROA not before: Thu 10 Jul 2025 23:59:07 +0000
ROA not after: Fri 10 Jul 2026 00:04:07 +0000
asID: 834
IP address blocks: 185.240.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:c8:95:88:3d:5e:8e:2b:ba:66:cc:13:9c:bb:bd:9e:b8:36:14:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Jul 10 23:59:07 2025 GMT
Not After : Jul 10 00:04:07 2026 GMT
Subject: CN=B76D4C05618006469A763A2B1E8244E95E431137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:85:aa:c1:01:c1:32:d3:3b:6a:19:82:c6:
ba:62:5a:af:21:75:c4:c6:de:55:c2:c8:5d:e6:b1:
d3:43:04:f0:84:de:85:6f:10:b7:17:0d:b2:52:e8:
6c:59:35:60:3b:28:8e:27:be:05:cb:3f:1b:3b:44:
d2:ca:d4:ef:47:25:0b:68:07:83:81:e7:0b:fb:65:
8a:4e:5c:2d:51:33:30:35:f0:22:55:aa:8d:af:fc:
90:38:2d:48:e3:7e:15:c3:55:3c:79:ba:79:8c:c7:
e9:f2:05:21:e2:bb:26:ef:53:81:db:9b:28:47:b8:
ba:47:38:81:fc:9b:cb:a9:9d:59:40:b2:e6:7c:24:
5b:dc:67:21:9e:21:30:be:d9:b4:fa:10:ac:bb:e6:
28:5c:03:04:c3:e6:65:27:c8:8d:a8:2b:69:98:2a:
fa:e4:60:b1:e6:45:92:33:b5:ff:01:84:8a:44:4e:
5c:20:93:ac:85:02:04:ca:74:30:92:43:31:4f:2b:
15:66:fd:f2:c6:5f:47:c1:33:b4:fa:ab:cf:e1:28:
42:f1:b7:43:7a:1d:4b:68:e3:13:01:15:dd:eb:33:
7a:0e:f1:8b:1a:b5:31:44:a2:12:ae:06:d5:68:2b:
34:e8:61:4d:60:84:1c:5c:68:f5:c3:11:61:a3:48:
ad:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6D:4C:05:61:80:06:46:9A:76:3A:2B:1E:82:44:E9:5E:43:11:37
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:04:6d:56:fd:cc:69:23:c8:54:fb:69:ed:b8:2a:32:a5:c2:
3a:56:75:ed:d3:fb:21:71:6d:dd:d4:12:b3:cf:eb:9c:70:5f:
6b:ff:b7:93:68:7b:5f:fb:86:a9:6f:c7:90:c8:29:94:0c:4d:
64:7b:f6:c1:89:c9:21:30:20:f4:0b:e0:31:62:e6:66:4c:4c:
fa:95:36:1a:ed:45:04:8e:c6:00:72:9e:4f:88:95:09:2e:2c:
c8:7d:fd:ac:33:db:75:8f:cb:e1:5f:78:28:46:c3:33:46:69:
e5:e1:49:0a:7c:d3:3c:48:e3:13:82:6c:4d:cf:17:df:28:3e:
46:a4:ff:67:02:ac:7e:0d:11:88:8e:15:bf:68:e5:ba:19:17:
1c:0a:2e:0e:9c:51:81:79:61:49:e9:9a:90:27:a0:ac:59:fb:
08:fe:5e:32:42:e3:0c:58:7a:50:11:00:d0:ed:3c:4c:22:12:
24:65:2a:16:4d:d5:51:cc:1e:91:f9:21:49:71:fa:2e:bf:ee:
7c:e7:a9:e1:3a:b3:4b:74:e1:90:39:47:9a:01:c1:f4:92:a6:
d6:55:ba:98:54:5c:a3:c8:ce:f4:98:f7:76:3c:3a:e6:47:88:
8a:55:13:0a:84:98:a2:46:c4:35:8e:78:02:17:2a:6c:35:b7:
b2:6a:f3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:33:41 2025 by rpki-client