Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130332e302f32342d3234203d3e20333239303037.roa
File: 3139332e3234362e3130332e302f32342d3234203d3e20333239303037.roa (raw, json)
Hash identifier: RPXnPhP3kmn+nLQChjFVjWqPvCzvvWp/RsN04Irw1Jo=
Subject key identifier: 80:18:37:BB:95:B4:B1:68:67:4F:7C:4E:0F:C3:3D:8B:2F:5F:C1:DF
Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial: 69AB38270EF42E46D8F1E1888820FD34C329290B
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130332e302f32342d3234203d3e20333239303037.roa
Signing time: Fri 11 Jul 2025 16:47:29 +0000
ROA not before: Fri 11 Jul 2025 16:42:29 +0000
ROA not after: Fri 10 Jul 2026 16:47:29 +0000
asID: 329007
IP address blocks: 193.246.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 18:10:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ab:38:27:0e:f4:2e:46:d8:f1:e1:88:88:20:fd:34:c3:29:29:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Validity
Not Before: Jul 11 16:42:29 2025 GMT
Not After : Jul 10 16:47:29 2026 GMT
Subject: CN=801837BB95B4B168674F7C4E0FC33D8B2F5FC1DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d7:46:00:70:11:b2:ee:f8:62:1a:7d:50:25:
3d:c1:a6:68:ca:75:00:13:ff:04:c3:b0:ac:25:19:
f1:04:4b:fd:60:6c:43:59:83:fb:da:17:64:83:28:
45:6d:ed:70:32:eb:a5:a4:b4:19:8b:7f:c4:e4:fe:
59:70:3e:74:e8:70:57:57:2b:e3:a6:91:ab:93:22:
da:8d:25:66:7e:b2:63:c0:c0:8e:0e:b0:d7:6a:9c:
7e:ec:bd:1b:72:02:41:61:3f:36:26:f5:ba:96:31:
53:b1:5f:14:17:d5:f3:50:35:ad:9c:a8:aa:97:40:
24:67:a7:be:2c:22:c1:07:a7:7e:69:6e:f6:31:1a:
0b:44:5a:94:d4:07:41:d7:99:2d:f8:8c:3b:25:6f:
79:0f:05:23:84:92:40:24:9a:f9:f9:05:8c:14:0f:
68:7d:3f:4e:22:98:05:71:6e:67:29:9d:44:16:00:
83:c1:f7:66:c8:aa:65:d7:c7:ed:35:b8:ce:9f:ed:
bf:fe:2a:1d:d1:df:b8:56:2d:bd:8e:9c:f0:74:5b:
81:36:e5:6e:1a:45:db:e7:ff:90:83:34:84:2b:56:
d8:6c:7c:c3:4c:e5:10:f6:f0:2e:c2:0e:32:67:f7:
f3:58:12:3a:8a:25:35:20:78:47:e1:35:e8:56:d4:
46:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:18:37:BB:95:B4:B1:68:67:4F:7C:4E:0F:C3:3D:8B:2F:5F:C1:DF
X509v3 Authority Key Identifier:
keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130332e302f32342d3234203d3e20333239303037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.103.0/24
Signature Algorithm: sha256WithRSAEncryption
50:a8:1b:c9:40:44:c8:a0:7b:d0:a9:21:9f:36:35:1b:60:da:
42:f6:54:cd:88:6f:1f:9e:35:d0:5f:a1:11:5a:06:62:15:97:
f7:75:3c:c0:f0:2c:18:1e:d6:61:2b:a6:e7:3a:49:dc:a9:73:
ae:5c:4a:0a:52:fa:09:6a:4c:f9:2d:f7:38:1b:cd:0e:50:e7:
f5:66:fb:1e:a8:ba:bb:82:40:57:55:ea:6c:cf:b7:62:8a:09:
75:3e:b4:fc:a8:c8:49:79:a2:e5:41:32:3d:cf:0e:0e:96:09:
60:88:af:6e:c0:6b:dd:53:cf:67:2c:fd:13:cb:72:9b:fb:ac:
ab:dd:ee:04:b7:7c:e2:01:66:e6:a2:07:d1:8e:3d:d4:a3:3b:
31:d1:e8:1a:ec:e0:07:3c:26:7f:f2:94:d1:52:50:f4:21:42:
0c:64:43:95:83:50:c7:e8:7a:e1:6b:1b:ff:8b:93:69:6a:0f:
fe:21:4c:2c:6a:73:fb:78:c3:5b:4a:63:37:70:5e:c6:c3:69:
6c:41:f9:35:35:5e:70:84:a1:ab:ad:72:3f:f5:00:ef:50:fc:
d6:87:e0:86:fb:8e:ab:a1:fb:76:fc:40:c2:59:3b:03:7c:d8:
46:ee:c9:0f:d3:7a:f5:fc:3c:14:21:3d:1b:ab:6a:77:16:d2:
6f:9b:66:99
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUaas4Jw70LkbY8eGIiCD9NMMpKQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi
NDk0YTdiZjAeFw0yNTA3MTExNjQyMjlaFw0yNjA3MTAxNjQ3MjlaMDMxMTAvBgNV
BAMTKDgwMTgzN0JCOTVCNEIxNjg2NzRGN0M0RTBGQzMzRDhCMkY1RkMxREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo10YAcBGy7vhiGn1QJT3BpmjK
dQAT/wTDsKwlGfEES/1gbENZg/vaF2SDKEVt7XAy66WktBmLf8Tk/llwPnTocFdX
K+OmkauTItqNJWZ+smPAwI4OsNdqnH7svRtyAkFhPzYm9bqWMVOxXxQX1fNQNa2c
qKqXQCRnp74sIsEHp35pbvYxGgtEWpTUB0HXmS34jDslb3kPBSOEkkAkmvn5BYwU
D2h9P04imAVxbmcpnUQWAIPB92bIqmXXx+01uM6f7b/+Kh3R37hWLb2OnPB0W4E2
5W4aRdvn/5CDNIQrVthsfMNM5RD28C7CDjJn9/NYEjqKJTUgeEfhNehW1EbPAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUgBg3u5W0sWhnT3xOD8M9iy9fwd8wHwYDVR0j
BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0
ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT
VXA3OC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEt
YTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0ZjI4LzAvMzEzOTMzMmUzMjM0MzYyZTMx
MzAzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzIzOTMwMzAzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMH2ZzANBgkqhkiG9w0BAQsFAAOCAQEAUKgbyUBEyKB70KkhnzY1G2DaQvZU
zYhvH5410F+hEVoGYhWX93U8wPAsGB7WYSum5zpJ3KlzrlxKClL6CWpM+S33OBvN
DlDn9Wb7Hqi6u4JAV1XqbM+3YooJdT60/KjISXmi5UEyPc8ODpYJYIivbsBr3VPP
Zyz9E8tym/usq93uBLd84gFm5qIH0Y491KM7MdHoGuzgBzwmf/KU0VJQ9CFCDGRD
lYNQx+h64Wsb/4uTaWoP/iFMLGpz+3jDW0pjN3BexsNpbEH5NTVecIShq61yP/UA
71D81ofghvuOq6H7dvxAwlk7A3zYRu7JD9N69fw8FCE9G6tqdxbSb5tmmQ==
-----END CERTIFICATE-----
Generated at Mon Jul 21 03:08:20 2025 by rpki-client