Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e203230313135.roa
File: 3138352e3232322e3138342e302f32332d3234203d3e203230313135.roa (raw, json)
Hash identifier: Xw2ro+0LcPeiBaOXP/a6tt5SXsn//NxTys5keaox8jc=
Subject key identifier: A8:B3:AC:61:AF:2B:BA:3E:44:04:14:59:1F:C9:EA:78:8C:B4:93:86
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 21AF106FC03E12A5C30593004D622ABB6C551415
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e203230313135.roa
Signing time: Thu 17 Jul 2025 17:33:06 +0000
ROA not before: Thu 17 Jul 2025 17:28:06 +0000
ROA not after: Thu 16 Jul 2026 17:33:06 +0000
asID: 20115
IP address blocks: 185.222.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:af:10:6f:c0:3e:12:a5:c3:05:93:00:4d:62:2a:bb:6c:55:14:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jul 17 17:28:06 2025 GMT
Not After : Jul 16 17:33:06 2026 GMT
Subject: CN=A8B3AC61AF2BBA3E440414591FC9EA788CB49386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:7b:37:54:99:a5:87:bb:82:b2:f4:bb:fc:
f9:2c:e1:be:53:90:22:bd:87:cb:fa:45:0d:ce:7f:
df:fa:d3:23:ad:c0:16:c8:c2:22:92:63:0e:ed:4d:
e8:66:94:f9:b0:91:d0:df:0e:32:64:17:c3:aa:f8:
f5:6b:51:ec:91:1d:8e:aa:36:e9:4e:af:c1:8b:f7:
a5:d4:5a:48:91:f5:38:8c:4c:3f:80:38:f7:9e:98:
ad:e2:32:a0:b6:86:0b:9b:57:21:5e:04:40:76:a7:
5e:e9:60:d8:7d:f9:63:ce:b2:0a:a5:73:8c:7f:38:
6f:66:19:6b:c9:2a:bb:c4:fe:c3:40:35:d9:1b:94:
7a:08:41:75:99:87:13:38:0d:7e:9e:99:e8:e8:b4:
9d:89:ea:45:6f:e5:20:1b:da:ec:1e:94:f2:0a:89:
61:36:82:76:a5:9d:b6:27:af:91:03:3e:6e:72:3f:
d2:01:05:72:0f:36:92:98:df:6b:85:68:e7:4c:8a:
a4:b4:7e:ae:5b:21:76:8c:57:1c:46:09:6d:8b:3d:
81:01:0a:46:51:10:98:2a:10:ba:d4:18:55:90:76:
b0:c4:94:fb:64:d7:d2:d7:f2:53:31:56:1a:f2:8b:
85:9e:e2:6c:27:1f:4f:8b:41:57:c6:7a:39:74:1a:
59:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B3:AC:61:AF:2B:BA:3E:44:04:14:59:1F:C9:EA:78:8C:B4:93:86
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e203230313135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.184.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:62:d4:0a:64:97:8e:7c:11:db:6e:81:f6:f3:47:7a:49:35:
a8:6b:5d:a6:89:2d:49:e7:08:4a:71:e1:1a:80:b5:f1:4c:30:
36:9b:4c:89:ef:ba:b1:3a:1a:f3:ce:48:bb:07:5a:12:7f:80:
f3:fd:0d:e8:ca:d5:a1:a1:44:8d:0f:1a:96:5e:a3:fe:f4:d8:
74:7d:78:8b:fc:db:78:97:d9:49:e3:45:4f:30:d7:cf:09:08:
1d:28:e4:66:e5:bf:f1:e5:5e:3f:af:85:00:c9:96:72:4e:60:
00:a1:f8:e3:f6:fc:11:6c:ba:af:9f:7b:9f:38:1d:6e:3e:f5:
5d:f3:32:7b:ff:74:ee:19:ed:58:e4:eb:bc:8d:09:7d:af:b8:
c5:1f:b9:9a:28:77:09:6a:c5:e1:36:15:65:3d:53:56:85:25:
8e:a4:f1:64:87:c2:cd:aa:f0:f7:b6:ef:ee:1c:f6:d4:db:69:
d7:1e:74:ef:d0:96:2e:ce:b2:16:6a:99:a9:9f:e1:9d:58:a4:
eb:e9:cc:17:39:3e:86:5d:13:80:e9:d7:f6:bd:57:da:63:c0:
44:b8:ea:e7:77:06:64:51:03:5b:19:de:70:b9:ff:d0:46:c1:
d3:60:25:c7:e1:14:4c:d1:2a:83:20:9b:7e:da:db:ce:06:bc:
5f:f2:ab:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:16:51 2025 by rpki-client