Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37362e302f32342d3234203d3e20323134303234.roa
File: 3137382e3234382e37362e302f32342d3234203d3e20323134303234.roa (raw, json)
Hash identifier: JikbqnpKajZI2JuxlY+TTYmy6DToKoSov4y2Ga81BQg=
Subject key identifier: F0:11:4E:5F:90:01:6E:28:00:EA:22:95:B1:33:C3:F0:64:3B:E8:19
Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Certificate serial: 18F57817BD7804D6E9BD10D60F5CDAE10E7C402A
Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37362e302f32342d3234203d3e20323134303234.roa
Signing time: Tue 01 Jul 2025 15:59:28 +0000
ROA not before: Tue 01 Jul 2025 15:54:28 +0000
ROA not after: Tue 30 Jun 2026 15:59:28 +0000
asID: 214024
IP address blocks: 178.248.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 09:49:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f5:78:17:bd:78:04:d6:e9:bd:10:d6:0f:5c:da:e1:0e:7c:40:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Validity
Not Before: Jul 1 15:54:28 2025 GMT
Not After : Jun 30 15:59:28 2026 GMT
Subject: CN=F0114E5F90016E2800EA2295B133C3F0643BE819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:c0:a1:e7:9a:d5:38:79:32:be:51:c5:63:
5b:f6:69:8f:be:5f:f4:30:9e:09:d1:7a:e0:19:ab:
bd:a7:e8:dc:a2:da:b3:14:fd:dc:7a:d0:d4:cd:c5:
f7:78:9a:76:3b:c2:65:a7:29:ee:6a:09:9e:c2:88:
5e:55:c1:c8:a2:ae:6e:a3:ee:28:cc:a7:7e:fe:4c:
f2:1f:7c:b5:49:4e:ea:40:11:3e:93:a0:15:82:36:
59:55:1f:f2:7f:67:ac:e1:be:ca:60:90:97:2c:d4:
68:08:7a:fa:79:26:a0:c7:d4:cd:ee:c9:f5:81:b3:
7c:4d:31:2a:26:23:70:a9:48:ea:21:c0:2a:fb:ea:
64:a7:a4:31:e0:e6:6a:1d:17:24:c0:ca:2d:a9:1b:
11:bb:1f:74:10:a9:3b:43:70:23:b8:29:48:f0:cc:
1e:e1:97:ff:f8:04:38:fb:e0:1e:56:d6:f8:ae:46:
d5:64:80:bb:a1:95:66:15:ca:84:fc:77:4f:0c:7b:
57:e1:c5:83:07:91:08:6f:3b:9e:25:f4:59:45:fc:
a2:c1:81:b2:1c:ce:8d:08:46:b2:32:aa:8c:1e:f0:
b4:d3:2f:6f:13:84:54:cd:eb:dd:63:a0:48:ae:1b:
b1:fe:6d:d6:2d:c4:53:ae:04:b2:e5:ff:80:04:9f:
f4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:11:4E:5F:90:01:6E:28:00:EA:22:95:B1:33:C3:F0:64:3B:E8:19
X509v3 Authority Key Identifier:
keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37362e302f32342d3234203d3e20323134303234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.76.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ce:2b:ad:52:e9:3c:a2:0b:1c:5d:52:99:51:65:72:90:36:
07:ee:23:40:99:ab:5d:cc:a5:32:9d:8f:e6:f5:4e:e5:72:93:
b3:85:a1:5f:54:46:77:ba:15:7f:2f:83:d7:82:b7:5f:e2:90:
6e:90:ff:f6:a3:80:97:15:0a:2b:ab:1d:4a:b7:c7:b9:11:ca:
91:06:2a:cd:12:7f:57:49:08:97:98:bb:75:47:9d:a9:96:a1:
64:9b:d1:ce:12:03:5b:38:19:63:df:e5:35:ae:48:52:f1:f8:
56:68:94:ac:b1:78:e6:4e:48:e2:f7:90:1f:b3:4e:c2:36:a7:
43:5a:56:1b:f3:5a:5a:3b:e6:96:76:ae:74:5b:86:29:13:c0:
00:0d:71:0b:37:ab:16:95:ec:c1:32:18:d2:93:da:d8:da:fd:
6e:e1:9d:4e:42:ef:7d:ec:41:eb:80:c8:db:97:98:63:7f:8e:
bd:46:3e:9c:1a:8e:8c:3b:47:e6:30:6b:fa:f5:b7:eb:0b:fd:
7a:c2:5d:e1:92:23:61:19:72:76:d0:61:ef:04:c7:96:91:b0:
66:5a:20:e8:87:8c:2e:0b:86:b1:9b:ca:28:0a:ac:63:be:ca:
b3:fe:76:85:89:3e:9e:c8:cd:21:8b:9e:e3:52:1c:29:27:43:
0d:82:24:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:14:22 2025 by rpki-client