Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e2037303239.roa
File: 3138352e3232322e3138342e302f32332d3234203d3e2037303239.roa (raw, json)
Hash identifier: Je36uXGZCRooHS6rD1ivhrJdPDCht++5hmieqjweUq4=
Subject key identifier: 4B:F0:19:1C:9F:0D:4C:4D:1F:E4:15:AC:77:D5:6E:56:3B:12:82:E5
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 6BAB019B0AB99A3AE7F19A5C6D9F7151B8199703
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e2037303239.roa
Signing time: Thu 17 Jul 2025 17:33:06 +0000
ROA not before: Thu 17 Jul 2025 17:28:06 +0000
ROA not after: Thu 16 Jul 2026 17:33:06 +0000
asID: 7029
IP address blocks: 185.222.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 00:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ab:01:9b:0a:b9:9a:3a:e7:f1:9a:5c:6d:9f:71:51:b8:19:97:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jul 17 17:28:06 2025 GMT
Not After : Jul 16 17:33:06 2026 GMT
Subject: CN=4BF0191C9F0D4C4D1FE415AC77D56E563B1282E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:95:ac:23:f0:0f:da:23:d3:80:6c:67:b1:54:
14:42:51:eb:45:28:82:ed:04:23:ad:2a:01:39:d2:
eb:ab:b1:94:29:a7:52:8f:5e:35:b1:b9:65:25:87:
8b:4c:1b:70:64:15:3c:00:c5:a9:e8:6c:27:c2:a4:
a5:04:29:af:4f:c1:e0:9e:73:af:17:18:49:c0:47:
24:4d:8d:d3:1a:a9:69:5c:32:f9:95:c7:e7:07:cf:
e4:e0:2d:84:0c:3f:71:c6:60:4f:eb:95:53:31:db:
19:4b:ac:41:2c:68:e7:a1:42:41:61:4b:22:67:dd:
34:89:22:08:ba:d7:99:8e:41:1e:1d:b7:0d:cc:71:
fc:ae:51:19:9f:76:91:6f:b5:5f:33:85:50:d7:94:
a1:28:52:c0:bb:86:ae:b7:ad:d1:89:a2:bf:e6:5e:
f6:39:eb:ad:b3:26:5d:d5:b8:85:2e:33:4e:e0:d6:
fe:75:82:97:eb:f7:c3:19:e9:5c:21:49:26:84:9b:
f4:19:06:65:0e:11:07:bd:6d:8e:62:da:ac:70:a9:
11:85:f4:93:d4:f9:52:6e:49:b1:b2:7e:2b:41:07:
d1:03:c5:3c:fc:f0:3b:58:6a:31:7a:5d:94:3c:e2:
ec:27:1f:62:ba:a6:e7:a8:7f:55:28:f8:ca:66:bd:
64:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F0:19:1C:9F:0D:4C:4D:1F:E4:15:AC:77:D5:6E:56:3B:12:82:E5
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.184.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:b1:be:a9:e1:50:89:f1:4d:54:7d:4e:8d:16:f2:0d:40:f8:
0d:fa:2d:b1:70:aa:f3:15:38:45:69:fb:48:43:04:5c:37:4c:
9a:5f:fb:9c:d1:8c:ee:ba:24:d1:51:c8:7b:0e:0a:a7:94:b0:
02:1a:19:5b:13:a8:a9:cb:63:13:25:7b:1d:96:b2:4c:80:95:
48:93:83:4e:55:62:46:0d:6e:22:27:a1:1a:0e:60:f7:5c:ee:
9b:6f:43:22:99:e2:0d:c5:79:6e:01:f9:ae:7a:d7:bf:75:0e:
5b:e3:fc:66:1d:6a:33:ad:cb:58:8a:63:99:ef:4a:2e:c3:f0:
65:be:70:b2:fb:9f:8c:93:6f:ad:b7:a3:56:b2:83:70:80:5c:
4f:9c:4c:7f:55:5d:27:35:4b:e0:31:11:47:f0:8d:11:f1:42:
a7:8f:8f:6c:aa:c7:0a:b6:74:57:19:6f:5e:f4:b2:1e:7c:2b:
a2:27:a0:e1:fe:f7:38:67:d5:ba:34:57:ae:6f:e8:99:db:b5:
b3:04:6c:cb:5f:eb:34:d4:41:be:3f:49:38:d6:9b:3f:02:b4:
2e:a4:bb:7b:83:dc:3f:13:06:d9:6c:57:3f:63:b8:47:5c:bc:
b4:d8:d2:38:19:d3:4d:d4:e6:4c:6a:ce:f7:b3:f2:6b:56:f5:
5e:01:2a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:14:08 2025 by rpki-client