Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634323a3130303a3a2f34382d3438203d3e203438323830.roa
File: 326131333a393634323a3130303a3a2f34382d3438203d3e203438323830.roa (raw, json)
Hash identifier: j84/Fm1nc/JJrf9h3dAaKkat+XV/si7APTv6iSnl64I=
Subject key identifier: 3F:66:75:FE:5F:59:FA:DE:3E:7E:CA:C0:2C:D3:48:1D:12:8C:37:5B
Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace
Certificate serial: 257F8D6451CDC9A1C3AB90D6A6C4A123E672FA87
Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634323a3130303a3a2f34382d3438203d3e203438323830.roa
Signing time: Thu 10 Jul 2025 16:08:18 +0000
ROA not before: Thu 10 Jul 2025 16:03:18 +0000
ROA not after: Thu 09 Jul 2026 16:08:18 +0000
asID: 48280
IP address blocks: 2a13:9642:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:7f:8d:64:51:cd:c9:a1:c3:ab:90:d6:a6:c4:a1:23:e6:72:fa:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace
Validity
Not Before: Jul 10 16:03:18 2025 GMT
Not After : Jul 9 16:08:18 2026 GMT
Subject: CN=3F6675FE5F59FADE3E7ECAC02CD3481D128C375B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:a4:f8:9a:e2:dd:c5:24:70:fc:96:ff:5a:
dd:56:bd:b3:4d:a4:6f:e7:1c:eb:ce:7f:62:70:45:
03:24:d8:00:11:f1:63:fc:03:a6:7a:f0:ec:45:fb:
3d:3a:6f:5c:67:8f:cb:71:e5:c4:87:de:dd:c8:08:
5d:44:8f:8c:6d:5f:74:9f:6f:ed:b2:b3:57:99:90:
e7:ad:36:ea:18:b0:78:35:10:09:f7:a9:b7:bb:ed:
59:6f:97:0e:00:b4:95:11:a9:78:39:be:2f:95:84:
e4:8e:0e:59:d3:dd:86:e4:17:3a:4e:21:13:39:03:
23:59:af:3f:75:85:fb:18:8b:53:42:ef:a8:e5:43:
10:7d:5c:2e:67:8f:a1:5b:4d:de:a4:cd:22:37:ce:
dc:8d:3f:56:90:dd:f0:17:1b:62:1b:63:6c:09:ca:
eb:54:f1:73:17:f3:5c:1a:a9:54:71:a1:63:b3:c9:
21:63:e9:ab:a3:f1:0e:b3:56:5b:55:28:36:53:f6:
62:82:54:5a:c8:37:a0:38:fa:c0:31:7d:c4:bb:c2:
38:69:ae:17:c2:9f:88:38:3a:2f:75:c9:ef:bd:f0:
9d:67:dd:ac:c5:2b:48:9f:58:d8:82:17:22:d2:ea:
f2:a0:83:e7:eb:93:a9:f4:d6:50:47:65:69:80:58:
08:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:66:75:FE:5F:59:FA:DE:3E:7E:CA:C0:2C:D3:48:1D:12:8C:37:5B
X509v3 Authority Key Identifier:
keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634323a3130303a3a2f34382d3438203d3e203438323830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9642:100::/48
Signature Algorithm: sha256WithRSAEncryption
4c:f8:2e:9c:e9:54:6d:d9:86:14:fc:d6:54:a0:02:b1:f7:21:
dd:52:d5:c7:e7:66:d6:7d:63:79:c8:fb:23:09:ed:9d:22:79:
b1:48:2f:39:6c:b3:56:1c:1e:19:7e:5c:43:16:e3:69:5d:30:
23:6a:9a:a8:71:8b:8f:b9:96:41:82:80:bb:c1:89:0b:6c:28:
23:74:4d:80:4d:fd:4a:d1:47:f5:33:ea:13:c2:17:bb:4d:a3:
e4:40:16:1d:eb:ea:92:08:c2:6b:19:ea:06:a9:d8:83:19:62:
bf:cb:e4:33:7c:fa:9a:21:2e:3a:26:08:81:0a:b9:7d:a7:86:
1c:0d:e3:57:52:ce:73:77:66:c5:7f:8d:69:2c:f7:eb:e8:e7:
af:0e:b3:e2:f9:b0:af:c7:7d:ea:ab:4b:bd:8b:b4:1a:c9:7b:
51:2d:e9:f1:9a:a9:f8:78:1c:5c:19:f2:2d:72:1f:7c:6a:3d:
c5:0a:54:f7:df:e3:5e:f9:65:28:e4:77:62:41:4e:89:e0:ca:
f4:f7:a9:08:7a:df:13:a2:21:eb:4a:e3:5b:5e:95:4c:1e:16:
5d:06:0d:6a:63:f7:ed:2b:3e:7c:b3:d9:43:37:e1:eb:6b:4a:
53:68:26:0d:13:98:4c:d6:b5:0e:4f:f8:6e:49:b2:a2:2d:72:
13:7c:83:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 20:56:17 2025 by rpki-client