Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e2037383433.roa
File: 3138352e3232322e3138342e302f32332d3234203d3e2037383433.roa (raw, json)
Hash identifier: yvZiLIVVIKN2ZwsQ4UEf8hxQvaSwCuEeuKOKkullORc=
Subject key identifier: 7E:88:8F:56:9B:A7:CF:56:1D:53:1A:72:42:B8:34:B6:E6:BD:09:08
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 6148AE3F73FA5D7CDBDBAB985B5DE8D66499C320
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e2037383433.roa
Signing time: Thu 17 Jul 2025 17:33:06 +0000
ROA not before: Thu 17 Jul 2025 17:28:06 +0000
ROA not after: Thu 16 Jul 2026 17:33:06 +0000
asID: 7843
IP address blocks: 185.222.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:48:ae:3f:73:fa:5d:7c:db:db:ab:98:5b:5d:e8:d6:64:99:c3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jul 17 17:28:06 2025 GMT
Not After : Jul 16 17:33:06 2026 GMT
Subject: CN=7E888F569BA7CF561D531A7242B834B6E6BD0908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:83:db:2c:7b:bd:49:41:d3:32:a9:66:56:
c6:13:2d:da:1b:a9:0c:04:d6:ef:57:db:d3:f0:91:
1f:1d:04:e1:ed:af:f9:fb:69:80:96:67:cb:87:f9:
16:43:35:b6:93:d8:74:05:ce:65:bc:99:03:ef:63:
5c:8b:cd:19:97:4a:b9:2c:82:16:3a:37:0a:36:04:
a0:d8:30:d1:86:79:e0:a7:2f:9e:4c:25:99:80:6f:
03:74:23:9c:30:e3:2e:ef:fd:a3:e7:92:c2:95:28:
04:7c:a6:a5:bf:21:c6:bd:14:4c:b6:d6:7f:02:1a:
86:87:b5:83:bb:96:31:e3:24:0a:9d:1b:e6:79:17:
25:d4:c8:cc:e3:05:b4:4c:a1:13:89:36:73:1a:d8:
cd:fa:0b:5d:2d:96:e7:a2:dd:94:79:4e:0b:95:d8:
3e:78:9e:03:02:03:d4:b5:b1:b1:c1:01:67:3a:2a:
0c:ea:65:22:4e:08:3c:38:7c:97:f1:32:19:c4:38:
8e:40:27:96:54:bf:5b:80:b6:3a:96:87:f7:9b:6a:
2d:11:e1:f5:56:1a:85:46:40:5c:81:db:bd:99:a1:
d2:b1:00:47:9f:43:00:c3:69:db:4c:41:d0:32:52:
2b:ae:f6:4c:21:2d:7f:3f:d6:e3:9f:a5:d9:b2:a9:
79:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:88:8F:56:9B:A7:CF:56:1D:53:1A:72:42:B8:34:B6:E6:BD:09:08
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e2037383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.184.0/23
Signature Algorithm: sha256WithRSAEncryption
55:62:04:41:67:34:32:a9:ac:06:c6:04:50:c9:c3:d6:17:81:
76:fe:bf:c6:51:af:3a:b8:5f:a8:68:e9:50:85:72:61:be:07:
18:e1:7f:04:0b:e4:b3:cc:72:00:d1:38:82:bc:0c:8b:55:e2:
be:1e:1b:10:ec:34:43:73:94:f1:07:a0:76:fb:85:64:5a:ad:
46:06:2d:09:e4:e0:11:19:9b:36:29:45:08:ce:54:fd:01:02:
c4:af:fb:09:9c:42:03:8b:c4:41:9a:2b:ac:61:a2:61:6e:8e:
66:2b:25:79:f1:ac:1b:85:5c:48:b3:8e:13:fe:63:87:27:71:
e2:9e:20:e3:3e:9c:76:b2:3b:cd:96:da:92:2d:4f:dc:7e:cd:
0f:2c:9a:35:f3:91:2f:c2:65:96:88:7d:a0:0d:b8:e4:cb:bf:
fe:0e:09:cd:ef:2a:1f:3b:af:49:25:8d:a1:1b:00:c9:dc:ad:
10:65:e9:1a:12:36:ce:ff:f8:29:1d:ef:68:dd:99:cd:a4:71:
e6:ce:9c:62:ce:10:5d:a0:ed:a4:c2:45:5c:af:68:a8:2f:4f:
59:5a:7c:10:29:88:77:b6:ea:e6:05:40:cc:c5:1b:d9:d0:52:
76:71:55:e7:16:b1:e1:fa:46:b1:db:38:73:b9:74:88:1d:ae:
c2:26:dd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:15:14 2025 by rpki-client