Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132332e302f32342d3234203d3e2037303138.roa
File: 37382e32342e3132332e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: yLm71OTqDFRdyl2jt+hmsZQmui0MjgACYd0QbV3wZ9U=
Subject key identifier: B5:3E:E6:1D:E7:41:D1:9D:6A:50:D1:25:1C:F2:25:EA:C7:69:95:AB
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 0757D87D46DDC871B8045822866217433ED87212
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132332e302f32342d3234203d3e2037303138.roa
Signing time: Mon 14 Jul 2025 11:54:13 +0000
ROA not before: Mon 14 Jul 2025 11:49:13 +0000
ROA not after: Mon 13 Jul 2026 11:54:13 +0000
asID: 7018
IP address blocks: 78.24.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:57:d8:7d:46:dd:c8:71:b8:04:58:22:86:62:17:43:3e:d8:72:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Jul 14 11:49:13 2025 GMT
Not After : Jul 13 11:54:13 2026 GMT
Subject: CN=B53EE61DE741D19D6A50D1251CF225EAC76995AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1a:34:07:36:92:e9:fc:e2:64:e1:0b:c3:1d:
a7:7c:f0:2f:9c:eb:e4:4b:a9:68:40:88:dd:55:9b:
d8:3d:cf:c7:d1:10:1d:47:bf:2b:b1:1d:69:2b:e5:
3b:8f:9b:14:f6:ee:31:ec:bc:be:a6:71:08:e6:64:
76:52:25:b0:c8:64:b8:04:62:69:12:ea:bc:9a:98:
82:54:91:30:01:c3:b8:3c:2a:72:1c:77:76:97:87:
f4:07:36:9b:e8:02:1f:db:60:bf:77:fe:ea:19:b4:
49:29:3d:ed:2a:1f:20:7b:71:ee:c3:ab:f0:1c:f1:
5d:5a:98:75:5f:93:09:b0:c6:29:56:39:c6:e2:d6:
01:b2:4f:ed:20:92:11:87:1f:85:b4:d0:e9:51:69:
7f:cc:a5:da:9b:3a:79:37:82:65:ec:72:c1:f1:2a:
29:52:fe:50:ef:09:1d:5e:7c:7d:c1:00:9a:ef:7c:
a3:a8:72:ac:fc:96:07:cf:57:01:16:ca:ea:7c:e2:
0b:16:ee:e8:c5:df:e6:49:b5:1c:f4:98:34:b6:1f:
45:ed:ca:96:af:ba:d1:6e:0c:e5:c4:4c:d5:ca:84:
67:b3:04:f4:fe:7c:2a:8f:ec:02:d1:31:ca:2a:f6:
58:3c:06:0d:95:18:fa:41:9b:09:2f:28:c5:25:42:
00:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3E:E6:1D:E7:41:D1:9D:6A:50:D1:25:1C:F2:25:EA:C7:69:95:AB
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132332e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.123.0/24
Signature Algorithm: sha256WithRSAEncryption
04:54:9c:13:f3:b2:1e:1f:7d:e5:5f:de:45:6d:f0:3a:53:c8:
c6:1b:2c:85:93:99:c6:45:dd:c1:7f:c7:96:b0:ed:ec:50:48:
32:f6:ee:94:1a:30:a3:7e:da:bf:6b:5d:25:28:41:3e:0e:cb:
f2:5e:8b:55:f9:17:99:31:e5:bb:ef:8a:e9:43:87:ca:e2:fe:
bc:71:f7:3d:41:7a:a1:1c:3b:31:d5:0e:14:24:f7:0c:31:bf:
26:ca:ff:26:15:0d:4c:cb:3c:19:27:12:ce:13:26:27:e9:2a:
0e:71:1f:a4:66:0d:9d:b6:6c:c7:23:cf:d7:73:57:ab:37:bc:
9e:49:13:a6:41:b4:24:f5:79:4b:98:0c:0e:b4:30:dc:3d:c2:
61:f0:79:c6:c8:9f:ae:80:68:fd:42:b0:fa:05:9a:4b:f7:88:
5d:5d:de:51:36:48:f7:cd:b2:ae:11:71:a5:c6:cc:05:ea:73:
b4:e5:9f:da:5f:28:88:bb:e9:59:0b:ec:ca:1f:eb:f6:23:8d:
a9:07:f0:70:f8:b7:81:7c:54:3b:b0:b2:58:c9:3f:65:4f:f8:
cd:0d:31:04:66:54:68:d3:fd:31:d1:c5:1f:88:d3:21:fe:ee:
f3:d3:35:40:83:cd:6a:b2:72:2f:4b:5a:12:7a:d1:7c:a1:34:
14:fc:54:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:35 2025 by rpki-client