Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39322e302f32332d3234203d3e203139333138.roa
File: 33362e3235352e39322e302f32332d3234203d3e203139333138.roa (raw, json)
Hash identifier: FthEwpOIKT5rKWCqEXY9gMB5simU3azPQORqXvTeqVo=
Subject key identifier: B9:83:41:98:BA:83:E7:39:4D:7A:53:E8:20:2F:19:43:BA:5D:09:FE
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 6BB85D0887454D6B73327F09096906EEDF97A00D
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39322e302f32332d3234203d3e203139333138.roa
Signing time: Mon 21 Jul 2025 08:15:55 +0000
ROA not before: Mon 21 Jul 2025 08:10:55 +0000
ROA not after: Mon 20 Jul 2026 08:15:55 +0000
asID: 19318
IP address blocks: 36.255.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b8:5d:08:87:45:4d:6b:73:32:7f:09:09:69:06:ee:df:97:a0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jul 21 08:10:55 2025 GMT
Not After : Jul 20 08:15:55 2026 GMT
Subject: CN=B9834198BA83E7394D7A53E8202F1943BA5D09FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:76:46:94:ee:8d:1b:5d:64:37:d8:04:99:
fd:b5:ba:03:ba:6a:86:96:af:1a:25:06:07:11:62:
c9:b1:3a:d7:cf:17:a4:cc:18:c7:71:91:41:52:ee:
90:09:68:e8:c6:95:01:06:73:72:19:61:73:70:78:
82:d7:87:56:66:f1:ad:42:b4:70:bb:bb:ad:f3:54:
1b:b0:82:50:28:e5:dc:4b:79:d3:2e:d0:0b:91:fd:
fa:70:d4:1a:80:a5:ac:e4:be:c3:10:74:1f:73:be:
86:85:40:97:e2:ff:e3:ce:36:8b:b5:f9:a9:98:20:
20:9d:7a:f4:53:a6:f3:e2:c8:ec:95:b2:6a:a1:d4:
17:fc:dc:2f:7f:b1:a4:f5:96:35:af:3c:c5:ef:cd:
3d:6d:d1:21:28:3d:18:f9:bb:23:e3:06:d4:77:b3:
c8:bf:69:e1:94:e6:b6:59:44:b4:47:6c:dd:56:ac:
57:8b:77:65:42:04:41:62:59:26:e8:4c:d2:56:77:
93:c2:fc:80:35:09:5f:9e:39:1c:d2:6e:02:b1:53:
9b:10:67:2c:65:ad:7a:7b:be:29:32:d9:23:80:92:
97:45:4b:d0:83:ee:0c:e1:9d:7f:a3:e5:1f:32:6c:
73:2c:18:4e:47:9f:d6:9b:ff:ae:c2:98:ce:7d:ff:
78:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:83:41:98:BA:83:E7:39:4D:7A:53:E8:20:2F:19:43:BA:5D:09:FE
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39322e302f32332d3234203d3e203139333138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.92.0/23
Signature Algorithm: sha256WithRSAEncryption
60:20:da:7c:31:30:ad:8d:2f:31:5b:b7:a4:63:a1:99:99:c7:
a2:6a:66:13:0b:86:de:44:72:6f:1c:58:14:ec:7e:75:c0:3c:
cf:27:aa:b1:81:b7:a8:5b:fd:34:dd:4d:81:e5:e4:0f:09:91:
d5:65:8b:56:5f:22:63:37:a8:0f:7e:a8:62:fe:a3:cc:5c:d4:
a4:9e:ab:5b:67:72:f8:75:a3:46:0b:31:78:6a:e6:36:ed:60:
4b:e4:26:18:e9:62:f0:ee:70:9a:17:91:8c:8b:c0:cd:a1:04:
eb:dd:40:f2:e1:8e:3c:2d:e0:1a:57:c7:28:b4:c1:6c:e3:44:
ac:02:b3:14:d8:78:ce:28:b1:dd:11:98:11:6e:b1:69:67:f3:
f4:0f:93:10:7e:c8:60:b8:0c:d0:e0:9f:21:b7:88:53:c9:a5:
75:3e:07:0c:85:bc:a0:6c:68:3b:40:f5:a3:2e:74:2a:a9:55:
cd:2a:00:54:4b:86:55:46:26:db:92:78:11:42:c2:d5:60:7c:
fe:19:95:fa:fc:59:9b:4e:53:00:a5:f9:66:75:bf:f0:16:29:
72:15:89:e9:0d:25:a5:26:71:22:3b:77:d0:86:55:97:64:fc:
ad:aa:4a:b7:86:e9:76:58:07:dc:39:4b:9b:83:d9:03:c2:06:
86:bf:6c:5e
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUa7hdCIdFTWtzMn8JCWkG7t+XoA0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm
Yjc3YjRhOTAeFw0yNTA3MjEwODEwNTVaFw0yNjA3MjAwODE1NTVaMDMxMTAvBgNV
BAMTKEI5ODM0MTk4QkE4M0U3Mzk0RDdBNTNFODIwMkYxOTQzQkE1RDA5RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyhnZGlO6NG11kN9gEmf21ugO6
aoaWrxolBgcRYsmxOtfPF6TMGMdxkUFS7pAJaOjGlQEGc3IZYXNweILXh1Zm8a1C
tHC7u63zVBuwglAo5dxLedMu0AuR/fpw1BqApazkvsMQdB9zvoaFQJfi/+PONou1
+amYICCdevRTpvPiyOyVsmqh1Bf83C9/saT1ljWvPMXvzT1t0SEoPRj5uyPjBtR3
s8i/aeGU5rZZRLRHbN1WrFeLd2VCBEFiWSboTNJWd5PC/IA1CV+eORzSbgKxU5sQ
ZyxlrXp7viky2SOAkpdFS9CD7gzhnX+j5R8ybHMsGE5Hn9ab/67CmM59/3g7AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUuYNBmLqD5zlNelPoIC8ZQ7pdCf4wHwYDVR0j
BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy
Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190
M3RLay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVkMThlODIt
NGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQyMjc5LzAvMzMzNjJlMzIzNTM1MmUzOTMy
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzEzOTMzMzEzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAST/
XDANBgkqhkiG9w0BAQsFAAOCAQEAYCDafDEwrY0vMVu3pGOhmZnHompmEwuG3kRy
bxxYFOx+dcA8zyeqsYG3qFv9NN1NgeXkDwmR1WWLVl8iYzeoD36oYv6jzFzUpJ6r
W2dy+HWjRgsxeGrmNu1gS+QmGOli8O5wmheRjIvAzaEE691A8uGOPC3gGlfHKLTB
bONErAKzFNh4ziix3RGYEW6xaWfz9A+TEH7IYLgM0OCfIbeIU8mldT4HDIW8oGxo
O0D1oy50KqlVzSoAVEuGVUYm25J4EULC1WB8/hmV+vxZm05TAKX5ZnW/8BYpchWJ
6Q0lpSZxIjt30IZVl2T8rapKt4bpdlgH3DlLm4PZA8IGhr9sXg==
-----END CERTIFICATE-----
Generated at Thu Jul 24 23:30:42 2025 by rpki-client