Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138362e302f32332d3234203d3e2037303239.roa
File: 3138352e3232322e3138362e302f32332d3234203d3e2037303239.roa (raw, json)
Hash identifier: Hf3TpYS3F435AArmMVeQhPb7alQNgambLsGSPhrIb98=
Subject key identifier: C1:34:53:72:35:01:52:40:F0:F1:F6:EA:5E:16:29:E7:97:6F:48:CA
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 117567F8D3FAC0C167C126854777ABFAF37D4119
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138362e302f32332d3234203d3e2037303239.roa
Signing time: Thu 17 Jul 2025 17:33:07 +0000
ROA not before: Thu 17 Jul 2025 17:28:07 +0000
ROA not after: Thu 16 Jul 2026 17:33:07 +0000
asID: 7029
IP address blocks: 185.222.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 00:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:75:67:f8:d3:fa:c0:c1:67:c1:26:85:47:77:ab:fa:f3:7d:41:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jul 17 17:28:07 2025 GMT
Not After : Jul 16 17:33:07 2026 GMT
Subject: CN=C134537235015240F0F1F6EA5E1629E7976F48CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6e:21:63:2c:3f:ac:de:b5:54:0a:43:bd:3a:
85:a9:b9:7a:ba:25:00:57:6c:ad:e5:d0:78:6d:63:
da:0c:10:43:da:2a:71:ba:39:e6:f5:79:95:32:3e:
e4:25:68:02:f5:64:1b:a4:32:00:aa:dd:37:ba:2b:
d3:e6:bc:70:cd:1d:c6:92:95:cb:47:4f:77:a9:6a:
7d:38:1f:62:cc:89:ff:0c:bd:54:53:9a:59:7b:f3:
26:0b:34:36:97:f0:6c:8e:09:41:f3:00:0b:9e:db:
a0:b4:df:9d:16:bc:55:79:34:8e:70:36:22:4e:d8:
a5:a2:d9:6a:c8:2e:8f:58:a8:ce:ef:c4:16:07:2a:
98:2f:18:1c:b3:3f:bd:de:66:50:a7:7f:28:cf:6c:
2f:a8:08:ca:ed:ed:0b:bc:ab:1a:f4:c4:f0:ef:9a:
b8:6f:0c:b3:8d:6a:93:d9:a4:1c:0d:41:ce:62:7b:
e9:c7:df:3d:4a:21:2e:5a:e9:3c:47:51:b8:f0:bf:
2f:2e:b9:29:18:62:67:a0:50:e6:2b:b1:ce:0d:23:
ef:8b:82:36:01:05:51:91:17:a8:b7:1a:52:3b:9d:
2f:50:cc:8b:bc:50:c5:e3:39:b6:1f:b7:57:7b:6c:
51:ed:a2:3b:74:e4:1a:03:6e:f1:7c:51:b1:90:6a:
3f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:34:53:72:35:01:52:40:F0:F1:F6:EA:5E:16:29:E7:97:6F:48:CA
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138362e302f32332d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.186.0/23
Signature Algorithm: sha256WithRSAEncryption
80:1c:9f:47:c9:bb:3b:7e:15:21:e7:77:90:60:42:a6:16:f6:
85:e3:70:25:59:5a:22:b6:e6:42:be:d1:f2:2d:7a:54:fd:7b:
98:53:16:63:e3:46:68:a8:12:81:d5:e2:e9:21:03:05:84:8c:
55:64:4b:d6:e4:55:a0:39:ef:00:f8:2c:a3:4c:74:90:01:eb:
a1:ab:72:a1:0c:27:1e:fd:88:99:a9:bb:7f:1a:62:01:c0:ad:
b8:71:0c:08:f6:b9:8b:06:b0:3a:a9:9a:a3:35:37:cd:a2:e0:
3b:29:dd:86:8c:85:bf:3e:91:3b:e7:5c:f1:81:6d:4f:97:c6:
63:1c:ae:42:45:31:f3:c2:9d:e1:bd:b1:0b:87:6b:d1:bf:ca:
0b:12:78:2d:60:7c:cb:1e:bf:5a:3b:67:c4:af:1f:83:1e:5e:
8a:9c:4e:8d:b2:d9:6b:ee:d5:ec:b4:7a:a1:83:84:0f:c3:eb:
f4:f3:44:b9:58:90:77:62:2b:1b:d6:34:f7:c3:f6:60:82:71:
92:14:33:18:00:49:26:1e:75:a9:8e:5f:fc:34:e3:8d:34:b2:
f9:d2:ac:79:f8:64:ad:e1:61:1c:73:96:4e:b8:23:a1:11:89:
0a:f4:20:90:fa:05:7a:5d:43:a1:f1:ed:bd:ef:6e:bb:78:fc:
23:8d:05:47
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUEXVn+NP6wMFnwSaFR3er+vN9QRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNTA3MTcxNzI4MDdaFw0yNjA3MTYxNzMzMDdaMDMxMTAvBgNV
BAMTKEMxMzQ1MzcyMzUwMTUyNDBGMEYxRjZFQTVFMTYyOUU3OTc2RjQ4Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcbiFjLD+s3rVUCkO9OoWpuXq6
JQBXbK3l0HhtY9oMEEPaKnG6Oeb1eZUyPuQlaAL1ZBukMgCq3Te6K9PmvHDNHcaS
lctHT3epan04H2LMif8MvVRTmll78yYLNDaX8GyOCUHzAAue26C0350WvFV5NI5w
NiJO2KWi2WrILo9YqM7vxBYHKpgvGByzP73eZlCnfyjPbC+oCMrt7Qu8qxr0xPDv
mrhvDLONapPZpBwNQc5ie+nH3z1KIS5a6TxHUbjwvy8uuSkYYmegUOYrsc4NI++L
gjYBBVGRF6i3GlI7nS9QzIu8UMXjObYft1d7bFHtojt05BoDbvF8UbGQaj/jAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUwTRTcjUBUkDw8fbqXhYp55dvSMowHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzODM1MmUzMjMyMzIyZTMx
MzgzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM3MzAzMjM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
ud66MA0GCSqGSIb3DQEBCwUAA4IBAQCAHJ9Hybs7fhUh53eQYEKmFvaF43AlWVoi
tuZCvtHyLXpU/XuYUxZj40ZoqBKB1eLpIQMFhIxVZEvW5FWgOe8A+CyjTHSQAeuh
q3KhDCce/YiZqbt/GmIBwK24cQwI9rmLBrA6qZqjNTfNouA7Kd2GjIW/PpE751zx
gW1Pl8ZjHK5CRTHzwp3hvbELh2vRv8oLEngtYHzLHr9aO2fErx+DHl6KnE6Nstlr
7tXstHqhg4QPw+v080S5WJB3Yisb1jT3w/ZggnGSFDMYAEkmHnWpjl/8NOONNLL5
0qx5+GSt4WEcc5ZOuCOhEYkK9CCQ+gV6XUOh8e297267ePwjjQVH
-----END CERTIFICATE-----
Generated at Sun Jul 20 14:16:11 2025 by rpki-client