Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132362e302f32332d3234203d3e203131343236.roa
File: 37382e32342e3132362e302f32332d3234203d3e203131343236.roa (raw, json)
Hash identifier: daBRkHJPjnP4DyHn4IivnK1qaHgtIwZJtESS0iOn6Xk=
Subject key identifier: 31:5A:10:67:B0:80:40:34:87:5A:C9:75:E7:E3:2B:4E:6D:83:1A:B9
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 7F3BE3E485D954B9E8C37D417291CBDCC66BDE85
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132362e302f32332d3234203d3e203131343236.roa
Signing time: Wed 16 Jul 2025 09:54:13 +0000
ROA not before: Wed 16 Jul 2025 09:49:13 +0000
ROA not after: Wed 15 Jul 2026 09:54:13 +0000
asID: 11426
IP address blocks: 78.24.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:3b:e3:e4:85:d9:54:b9:e8:c3:7d:41:72:91:cb:dc:c6:6b:de:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Jul 16 09:49:13 2025 GMT
Not After : Jul 15 09:54:13 2026 GMT
Subject: CN=315A1067B0804034875AC975E7E32B4E6D831AB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5f:72:9d:7b:85:ac:4a:6a:97:5a:82:ab:c1:
7d:24:b7:ab:19:81:ef:e1:cd:8e:34:0a:f4:f8:e5:
5d:6d:7d:db:8b:f2:63:13:f4:ec:88:a1:92:78:bc:
d4:3d:54:86:44:75:e5:b5:32:7f:37:d9:66:48:09:
83:43:8d:22:63:58:b5:36:91:1b:50:7c:b4:bf:91:
dc:8c:4e:f2:4f:b3:d2:66:58:7c:7f:c3:bb:83:2d:
d6:aa:4e:dc:eb:95:7b:28:0e:95:57:08:5d:34:04:
be:64:ce:b8:dd:ba:54:4d:6d:bf:3b:0f:77:6f:11:
c3:2d:96:e7:3b:3d:3c:ee:c5:f4:a9:db:a1:ff:8f:
eb:c8:20:78:72:07:1c:f6:c1:d9:32:91:32:8d:d4:
74:fd:c3:b1:80:4d:a7:57:93:49:22:3e:ee:c0:ef:
13:fb:16:08:5b:6a:3d:3c:1d:b9:da:04:b4:97:70:
19:34:92:92:cd:e2:b1:76:87:cd:8d:7a:e1:e7:42:
b3:a3:e8:aa:17:f5:b2:f1:a0:51:91:7c:ba:49:5d:
c2:7f:ce:50:90:62:f2:2a:6f:47:17:1c:2e:e4:31:
5c:21:54:c9:7a:4f:fd:bc:46:a7:80:5f:8a:0f:80:
9e:b9:51:eb:7f:c3:2d:47:a4:38:f5:ec:e2:a2:3a:
70:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5A:10:67:B0:80:40:34:87:5A:C9:75:E7:E3:2B:4E:6D:83:1A:B9
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132362e302f32332d3234203d3e203131343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.126.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:e9:ab:52:9b:e0:38:39:40:56:1c:f7:57:d3:a4:b5:a0:a5:
37:0e:f7:7a:66:fc:66:c8:ad:4d:ce:e5:aa:d4:99:30:b2:1f:
b9:57:54:77:e6:0c:6f:6a:14:0d:89:76:ba:5b:82:ed:49:87:
e7:f3:0a:95:b8:d5:08:5e:fd:5b:7e:53:76:ef:09:0e:39:f1:
2e:b8:37:2a:a5:db:9a:13:1a:ba:ac:2a:30:40:73:1d:cc:c4:
b7:d8:e1:81:7f:08:fa:18:d7:34:47:be:5c:73:83:cc:df:ca:
9b:07:13:91:bb:3d:cf:84:83:93:3e:85:d1:eb:83:30:75:63:
d5:5f:c6:e7:dc:26:94:18:bb:9b:5c:20:66:a6:ef:9c:28:70:
d9:0f:1c:82:fc:0b:e4:ce:c9:bc:c1:d2:01:82:45:13:18:d4:
01:62:6b:b7:7f:a4:dd:c4:97:48:ee:93:0c:44:5a:91:2d:d7:
28:23:4e:c6:23:03:da:88:fd:ed:6b:66:08:f3:d7:f8:b6:2d:
07:9b:2b:d0:28:dd:a9:55:85:a1:1b:58:0b:93:8a:af:ae:06:
ad:b7:4e:9a:5a:4c:3a:31:b1:0d:e0:d4:71:a5:07:f8:87:17:
39:75:aa:e6:79:4f:88:29:a1:4d:f9:a9:9f:7d:94:98:98:bf:
90:e6:3d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 05:00:25 2025 by rpki-client