Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3231372e36352e37302e302f32342d3234203d3e20323035383936.roa
File: 3231372e36352e37302e302f32342d3234203d3e20323035383936.roa (raw, json)
Hash identifier: TrQA9a9dotq/sNEznvdoYuC+Mz+MBq0A14+szNuN9/k=
Subject key identifier: 75:2C:A7:73:C0:AD:13:3B:C5:90:46:A1:84:78:29:8F:6C:CD:0A:0A
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 07772385CC86141BF01D5F964F9591C0D63F43D8
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3231372e36352e37302e302f32342d3234203d3e20323035383936.roa
Signing time: Wed 10 Sep 2025 09:41:56 +0000
ROA not before: Wed 10 Sep 2025 09:36:56 +0000
ROA not after: Wed 09 Sep 2026 09:41:56 +0000
asID: 205896
IP address blocks: 217.65.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:77:23:85:cc:86:14:1b:f0:1d:5f:96:4f:95:91:c0:d6:3f:43:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Sep 10 09:36:56 2025 GMT
Not After : Sep 9 09:41:56 2026 GMT
Subject: CN=752CA773C0AD133BC59046A18478298F6CCD0A0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:9b:0f:57:6c:76:2f:6a:29:2a:dd:ee:71:
8e:39:ac:1a:d4:8a:59:61:40:d5:b1:57:f0:6d:9a:
ec:be:92:b4:e3:ba:87:72:04:fd:a7:b0:3f:a5:60:
db:85:f4:e6:32:f3:7a:4b:46:92:19:7d:ac:57:31:
cb:e7:9d:7a:f6:61:0f:7f:bd:fb:1e:66:e3:a0:db:
3a:37:95:26:19:8e:18:8a:5f:83:ac:3b:b1:f7:bd:
67:c0:04:f4:de:7d:52:2e:df:95:15:3d:14:4b:fd:
28:2c:49:3d:03:e9:f1:f9:f3:a1:f1:44:22:79:d1:
b8:a2:c4:8f:90:a4:dd:48:72:db:c4:29:86:8d:29:
22:db:1e:42:6d:89:e1:ee:c4:f7:14:85:be:90:be:
3f:de:46:ad:b2:d2:90:d8:09:c9:d9:82:8c:42:d7:
3d:e1:7f:f6:2e:af:6f:d4:d7:d0:4c:86:69:d2:a9:
1b:ec:ab:14:dc:5d:6f:5e:e3:8a:bc:cb:b2:d9:17:
02:09:02:8d:bf:32:be:32:32:df:ec:91:96:ff:2b:
57:cd:6f:09:bf:d8:4b:b0:d4:26:80:0c:44:0b:25:
61:8a:b3:eb:db:27:65:a8:26:06:c0:92:66:8b:28:
6b:b8:66:50:07:c0:88:0a:77:2d:27:8b:d2:da:24:
d6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2C:A7:73:C0:AD:13:3B:C5:90:46:A1:84:78:29:8F:6C:CD:0A:0A
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3231372e36352e37302e302f32342d3234203d3e20323035383936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.65.70.0/24
Signature Algorithm: sha256WithRSAEncryption
82:7b:f2:88:b6:cd:b9:c4:fa:ee:97:4e:0c:00:2c:49:06:d0:
65:5c:b3:92:07:5e:51:38:93:e0:ca:bc:76:e0:59:cd:e1:5a:
82:0b:78:c9:57:66:14:09:eb:67:81:48:09:70:1d:6a:21:7a:
c1:71:80:7a:f5:05:6e:5a:de:16:1b:e5:ba:05:45:98:59:97:
2d:73:44:f3:2a:c7:78:89:32:8c:1e:9a:3a:e1:d6:ff:75:44:
c7:d5:21:df:1a:e7:6a:17:22:7b:d3:37:4e:5f:78:a4:cb:b2:
9b:75:fa:32:00:8a:54:a4:3b:3d:26:7e:03:04:af:da:fd:46:
3a:9a:3a:68:05:5a:03:ad:76:12:da:6e:47:e0:c4:38:df:06:
60:9f:8f:9d:0e:06:ab:d4:a6:72:d2:ca:cb:b7:e0:72:24:9d:
f3:d6:3c:c6:c3:ac:3a:44:2f:61:20:43:1c:b5:08:fc:5d:66:
58:ae:63:77:95:6b:e5:94:4c:cc:43:78:3b:7c:0e:f4:7b:cd:
a1:22:93:c3:f3:05:8b:84:03:be:62:c2:ca:a5:c4:a8:02:62:
2c:a2:78:39:41:87:5c:a3:da:9c:70:01:58:33:f5:10:a5:c7:
af:55:7f:c2:0c:b9:a2:36:cf:a1:07:ef:62:49:1a:d7:09:e4:
33:ac:a7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:34:41 2025 by rpki-client