Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138362e302f32332d3234203d3e2037383433.roa
File: 3138352e3232322e3138362e302f32332d3234203d3e2037383433.roa (raw, json)
Hash identifier: yayDf1w7g2SzDGM9Oh1+saAQhUdKr0LAF5ZliJQz+J8=
Subject key identifier: C4:A3:53:E5:6D:22:0A:3B:74:54:B1:2F:A6:79:6D:40:FA:2D:77:24
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 521C6FA12FBEAC54AB5F42762A8DEE5D29B555F2
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138362e302f32332d3234203d3e2037383433.roa
Signing time: Thu 17 Jul 2025 17:33:07 +0000
ROA not before: Thu 17 Jul 2025 17:28:07 +0000
ROA not after: Thu 16 Jul 2026 17:33:07 +0000
asID: 7843
IP address blocks: 185.222.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:1c:6f:a1:2f:be:ac:54:ab:5f:42:76:2a:8d:ee:5d:29:b5:55:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jul 17 17:28:07 2025 GMT
Not After : Jul 16 17:33:07 2026 GMT
Subject: CN=C4A353E56D220A3B7454B12FA6796D40FA2D7724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:15:ef:12:70:f1:7a:9e:7c:4f:99:fe:b8:e2:
d8:57:27:e4:cf:30:d9:db:eb:18:cb:74:1f:af:e0:
fc:c5:bc:5c:8c:99:83:e8:0c:4c:11:5e:ef:28:32:
42:14:a5:21:f4:42:b3:00:50:00:fc:42:7c:6e:3a:
0e:df:79:a6:da:03:1b:74:b8:f0:b1:59:f5:fd:79:
f7:4a:84:17:5e:00:6d:05:ec:6d:70:8b:f1:7b:0f:
38:91:de:f4:f5:65:40:fc:6c:98:3e:21:4d:23:ea:
2f:d2:33:69:e1:91:f6:65:69:3a:9f:a0:2b:71:c4:
0d:87:da:6c:43:6c:53:6b:a1:19:ed:67:73:f4:63:
d5:3e:de:37:62:cd:37:77:8b:53:ba:69:00:4c:06:
91:3b:b5:e5:bf:92:87:5b:88:46:b9:67:04:4e:9a:
c2:6a:88:27:ed:0b:00:9a:0a:d6:c7:b1:86:46:12:
9e:91:f8:65:9e:c6:6b:6e:43:7f:89:ef:0a:7b:24:
df:b7:a4:64:ff:5e:43:8d:11:d1:bc:ab:62:90:2f:
52:f5:c9:84:a8:61:f1:b4:fa:5f:80:fb:84:f1:25:
68:1b:c9:b6:44:50:ab:cf:28:dd:37:e1:6c:6d:a2:
75:f3:7d:a8:08:2c:32:37:6a:82:4d:1f:f3:7c:61:
12:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A3:53:E5:6D:22:0A:3B:74:54:B1:2F:A6:79:6D:40:FA:2D:77:24
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138362e302f32332d3234203d3e2037383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.186.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:6d:09:f8:34:fc:fd:0c:11:bf:90:d6:b1:cc:b8:6e:01:11:
e4:3c:41:85:1e:d1:b6:77:8a:61:85:25:cf:ed:12:95:f8:c9:
4c:22:ee:ee:ca:d8:2d:06:0b:76:51:71:8d:2d:cb:ff:84:45:
55:a6:f1:ee:13:28:c3:ff:2a:f1:7a:5d:25:19:ec:6f:96:a6:
33:41:5a:2b:67:c7:4f:18:5e:10:4b:e1:f8:3e:94:3a:20:51:
5a:07:93:63:21:cd:62:a2:50:5a:0c:a6:f9:1b:b5:cf:b7:bb:
0e:73:06:fe:bd:5a:b2:af:80:ce:ac:9b:cc:af:94:a2:0b:e3:
40:05:5b:b9:ce:3b:ae:c2:74:f8:03:1f:45:26:46:86:f1:a4:
6c:65:43:ec:f4:05:a5:4a:10:b0:1d:7a:7c:11:d3:eb:6a:f6:
6b:e2:22:49:02:e5:cd:91:7e:0c:be:ec:24:52:be:88:1a:ec:
86:7d:8a:b2:2d:fc:d2:da:0c:e5:ee:e7:1b:a2:6c:ee:0a:a0:
eb:bc:51:d3:f4:74:97:f3:4e:20:6c:fd:52:d2:c1:d0:2e:f3:
87:67:34:47:10:29:15:5a:45:5b:6c:cd:dc:cb:58:24:c7:d7:
a0:ee:45:92:89:00:8a:8f:2b:2c:3c:17:8a:cd:6b:4c:27:66:
b9:cf:14:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:16:37 2025 by rpki-client