Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa
File: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (raw, json)
Hash identifier: p1kuPenqcy6Et0XPjwxcCLB+vpEy3ekHhe4EodnqolI=
Subject key identifier: E2:27:1F:44:4F:27:57:4E:CD:EB:32:81:C3:2C:29:5D:80:F9:BA:CF
Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Certificate serial: 2D67458B37DA53BA37C129424507E00B4E05FA1A
Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa
Signing time: Mon 07 Jul 2025 13:12:55 +0000
ROA not before: Mon 07 Jul 2025 13:07:55 +0000
ROA not after: Mon 06 Jul 2026 13:12:55 +0000
asID: 214208
IP address blocks: 141.193.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 04:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:67:45:8b:37:da:53:ba:37:c1:29:42:45:07:e0:0b:4e:05:fa:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Validity
Not Before: Jul 7 13:07:55 2025 GMT
Not After : Jul 6 13:12:55 2026 GMT
Subject: CN=E2271F444F27574ECDEB3281C32C295D80F9BACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ff:d7:df:ec:3a:fd:32:4b:9d:d1:ea:07:a6:
56:fe:22:9b:77:42:3a:a2:6b:db:07:97:55:82:b2:
3f:5c:58:16:6f:cb:35:32:da:57:c4:2b:66:44:b9:
e9:3b:42:da:1b:bd:03:f7:e4:e0:cf:f6:16:bb:6e:
8a:4e:89:96:2a:77:8d:1d:81:81:ab:27:c4:c1:82:
3f:e4:b9:64:cf:aa:88:10:b5:0b:aa:1c:22:09:96:
32:f4:1d:37:34:43:1f:31:0d:48:96:00:76:dc:ef:
a0:cd:19:01:fa:e5:e6:5b:27:5a:16:80:f2:ca:b5:
ca:eb:d0:c9:10:c4:f9:1d:a8:41:38:36:91:02:13:
90:c7:2d:7b:64:0d:2a:00:d8:c5:fd:e8:84:18:2a:
86:63:cb:40:7e:3b:36:4c:6a:03:a9:48:21:84:ce:
2a:98:b8:8f:05:3b:0e:e4:73:4a:8b:4b:ac:de:b4:
37:83:54:61:52:00:93:04:6c:98:e3:79:82:0e:67:
17:bd:a4:75:95:f6:9f:96:97:aa:1a:23:eb:a0:82:
f9:e2:c5:10:2d:a2:04:6e:9d:6a:3d:26:c0:a3:b7:
c4:74:ec:21:3a:68:cb:7e:ff:02:26:e2:b5:11:db:
ef:14:66:b7:dd:b0:cd:5a:74:1c:5c:7e:9f:ad:75:
75:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:27:1F:44:4F:27:57:4E:CD:EB:32:81:C3:2C:29:5D:80:F9:BA:CF
X509v3 Authority Key Identifier:
keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.193.228.0/24
Signature Algorithm: sha256WithRSAEncryption
15:48:73:58:f6:e7:7e:ac:48:a8:29:3b:7e:97:ba:9f:6e:46:
d3:79:e9:19:ce:d0:6a:38:3d:5f:45:e5:fb:e1:d5:05:9a:1a:
bf:9e:b4:ec:2f:81:fb:c4:e7:26:6c:e5:6b:f9:26:ca:1e:8f:
44:7f:81:61:af:ab:da:5c:54:e6:3c:d5:b4:9f:9e:29:17:1a:
b9:2c:45:4b:0c:f3:fa:36:bb:79:ee:04:f7:d1:7b:80:85:e2:
ac:dd:3b:72:b6:4f:68:68:f5:28:35:52:27:9e:88:11:cd:53:
34:07:16:eb:aa:90:33:16:12:0b:38:52:2b:f5:3e:85:25:d8:
a5:1b:97:50:54:3e:a9:86:5e:0b:5a:ac:ee:3e:27:f4:7d:c6:
f7:24:49:97:e2:06:34:f1:53:34:2a:ac:40:32:bb:f2:b4:de:
be:13:29:a2:64:eb:62:d4:bf:7b:44:04:ba:c4:0c:f2:fb:0b:
dc:bb:4b:90:0a:23:c3:f2:46:90:6f:98:6e:56:ac:be:14:db:
c9:e9:34:34:0f:63:4d:28:8d:05:34:48:0a:79:2a:ba:7a:da:
f3:92:dd:7b:4b:f6:28:b2:1a:12:a0:08:15:2b:06:54:11:df:
b3:b2:26:64:02:54:bd:0f:fd:5d:39:f3:40:ab:bb:64:fa:b8:
33:49:51:73
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIULWdFizfaU7o3wSlCRQfgC04F+howDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx
ZTAxNzYwODAeFw0yNTA3MDcxMzA3NTVaFw0yNjA3MDYxMzEyNTVaMDMxMTAvBgNV
BAMTKEUyMjcxRjQ0NEYyNzU3NEVDREVCMzI4MUMzMkMyOTVEODBGOUJBQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd/9ff7Dr9Mkud0eoHplb+Ipt3
Qjqia9sHl1WCsj9cWBZvyzUy2lfEK2ZEuek7QtobvQP35ODP9ha7bopOiZYqd40d
gYGrJ8TBgj/kuWTPqogQtQuqHCIJljL0HTc0Qx8xDUiWAHbc76DNGQH65eZbJ1oW
gPLKtcrr0MkQxPkdqEE4NpECE5DHLXtkDSoA2MX96IQYKoZjy0B+OzZMagOpSCGE
ziqYuI8FOw7kc0qLS6zetDeDVGFSAJMEbJjjeYIOZxe9pHWV9p+Wl6oaI+uggvni
xRAtogRunWo9JsCjt8R07CE6aMt+/wIm4rUR2+8UZrfdsM1adBxcfp+tdXULAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU4icfRE8nV07N6zKBwywpXYD5us8wHwYDVR0j
BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj
ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0
QmRnZy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgt
YmZlMC00MjM1LWFmYjQtZDUzZWRmYmFjZGQyLzAvMzEzNDMxMmUzMTM5MzMyZTMy
MzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDMyMzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAI3B5DANBgkqhkiG9w0BAQsFAAOCAQEAFUhzWPbnfqxIqCk7fpe6n25G03np
Gc7Qajg9X0Xl++HVBZoav5607C+B+8TnJmzla/kmyh6PRH+BYa+r2lxU5jzVtJ+e
KRcauSxFSwzz+ja7ee4E99F7gIXirN07crZPaGj1KDVSJ56IEc1TNAcW66qQMxYS
CzhSK/U+hSXYpRuXUFQ+qYZeC1qs7j4n9H3G9yRJl+IGNPFTNCqsQDK78rTevhMp
omTrYtS/e0QEusQM8vsL3LtLkAojw/JGkG+YblasvhTbyek0NA9jTSiNBTRICnkq
unra85Lde0v2KLIaEqAIFSsGVBHfs7ImZAJUvQ/9XTnzQKu7ZPq4M0lRcw==
-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:55 2025 by rpki-client