Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37372e302f32342d3234203d3e20333938323536.roa
File: 3231332e3133392e37372e302f32342d3234203d3e20333938323536.roa (raw, json)
Hash identifier: AAU8mMA/8qMP5OVFvU4ND40XGDRIHcFw5zTvG37HSds=
Subject key identifier: 23:F8:9E:FD:70:33:D0:66:0D:4E:40:DA:31:F7:34:18:7E:38:3B:C6
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 1785340431576C1C5196193F763AD28F6891FA8E
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37372e302f32342d3234203d3e20333938323536.roa
Signing time: Sat 12 Jul 2025 17:19:07 +0000
ROA not before: Sat 12 Jul 2025 17:14:07 +0000
ROA not after: Sat 11 Jul 2026 17:19:07 +0000
asID: 398256
IP address blocks: 213.139.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 22:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:85:34:04:31:57:6c:1c:51:96:19:3f:76:3a:d2:8f:68:91:fa:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jul 12 17:14:07 2025 GMT
Not After : Jul 11 17:19:07 2026 GMT
Subject: CN=23F89EFD7033D0660D4E40DA31F734187E383BC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f1:3f:13:a9:d7:8e:0e:f8:01:92:92:51:78:
7a:1f:8f:ba:bf:78:8f:0f:05:cb:ea:11:eb:a5:56:
ad:9e:16:4f:5b:20:fe:e6:47:27:5a:ed:89:02:4a:
eb:94:a8:47:5d:9d:05:b6:87:39:67:55:2e:30:dc:
54:5b:b4:f5:33:28:91:b8:0f:0b:4f:55:65:5d:3a:
5a:23:86:73:d7:6b:a3:93:60:ec:74:f4:d7:3f:28:
1d:49:1e:a1:82:51:db:db:f2:70:b0:80:2f:eb:2b:
ed:1b:bd:49:42:30:0a:b1:17:df:11:cb:73:3c:83:
13:b1:05:95:f1:4a:4d:5d:3d:e8:3f:3e:d3:60:0f:
3b:27:36:5d:87:96:33:33:51:a6:df:5f:b6:a1:e2:
9a:f0:74:9e:07:f7:ff:5a:22:42:0c:6f:17:0e:d1:
ed:1c:40:43:a9:7d:43:99:17:6d:1a:92:a0:9f:fe:
86:fa:f9:fd:eb:96:ab:b8:45:6e:2e:c4:f9:b7:0f:
d6:e7:f7:f0:82:09:83:dc:2b:4d:18:f0:7a:d5:7b:
79:ba:9c:cd:85:13:2b:79:ee:71:00:c4:7e:06:93:
06:ac:0f:28:76:48:41:a1:83:c2:29:e2:d3:2f:9a:
80:af:2a:82:fd:7a:54:5f:57:02:44:88:df:23:91:
35:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F8:9E:FD:70:33:D0:66:0D:4E:40:DA:31:F7:34:18:7E:38:3B:C6
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37372e302f32342d3234203d3e20333938323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.77.0/24
Signature Algorithm: sha256WithRSAEncryption
08:dd:ae:c9:3e:4d:50:1d:b5:6c:7c:4c:d5:63:a7:4e:72:9c:
a0:1a:57:13:83:b7:8b:db:9f:06:7e:8f:4e:41:37:4a:c3:41:
fc:3a:b3:f1:2a:69:85:4a:e6:35:88:86:f6:4a:74:f0:3f:a5:
43:95:09:87:4d:54:4f:8f:2d:41:f9:a3:7c:85:4e:27:22:7b:
8d:fb:b0:9c:56:3c:b7:ed:a1:35:7b:f6:6d:72:a4:09:81:f2:
16:8f:ae:65:c8:69:92:0c:e3:76:10:e4:23:22:3a:8c:90:6d:
79:ea:1c:d6:75:1d:48:8c:c1:e8:fd:05:7f:d4:07:3a:eb:57:
cd:b1:37:61:e8:f0:fb:03:b0:30:03:80:b1:9b:37:ae:5f:8c:
21:df:a9:d4:c8:a1:7b:58:e9:27:d6:2c:ae:38:94:30:bb:1c:
00:11:a6:a1:5b:03:8a:9f:4a:82:bb:59:39:d9:75:bd:31:34:
c0:dc:ae:fb:46:27:02:1d:39:15:3f:3c:23:8b:1d:2b:14:b2:
47:9a:a0:1f:54:9c:2e:83:02:70:8e:7f:a8:a4:27:cc:e5:fc:
16:bc:01:58:6c:1e:ae:84:ef:13:b9:77:4a:f6:fb:c4:c7:de:
f8:01:0b:55:e0:64:17:7d:22:7a:f2:cf:89:ae:a7:7a:be:d1:
43:88:98:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:06:21 2025 by rpki-client