Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa
File: 326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa (raw, json)
Hash identifier: 894RTKAEh4ciZZOdefpuTBSaNDM2TQpQSdGle6pgy08=
Subject key identifier: D2:33:F0:17:38:45:AD:F6:C8:6A:7F:E9:D8:7F:D4:EC:88:A4:6E:A2
Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace
Certificate serial: 08597241A9B2AE6747A75283A1E542AE38F208F1
Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa
Signing time: Thu 10 Jul 2025 16:08:17 +0000
ROA not before: Thu 10 Jul 2025 16:03:17 +0000
ROA not after: Thu 09 Jul 2026 16:08:17 +0000
asID: 214992
IP address blocks: 2a13:9644:2220::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 20:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:59:72:41:a9:b2:ae:67:47:a7:52:83:a1:e5:42:ae:38:f2:08:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace
Validity
Not Before: Jul 10 16:03:17 2025 GMT
Not After : Jul 9 16:08:17 2026 GMT
Subject: CN=D233F0173845ADF6C86A7FE9D87FD4EC88A46EA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:39:3c:46:b3:54:51:e9:e9:8b:78:ae:b9:ba:
14:8e:a6:1d:d0:4e:d4:32:53:09:30:69:ec:27:7e:
75:aa:73:74:8b:e1:53:f6:ea:46:6d:80:29:7c:45:
10:15:87:f5:86:a3:11:bc:73:97:fe:7a:ed:67:aa:
e1:28:47:4f:94:22:ad:75:5f:c8:e4:13:a5:31:4b:
13:5c:46:25:f2:7a:de:ca:d2:ae:bb:16:30:3d:a6:
4d:e4:2a:a2:1e:4c:e8:1b:01:9b:ff:97:3c:d7:3c:
fa:6c:60:c0:23:71:36:15:dd:0a:f2:2e:e4:2f:0e:
21:b4:f8:5b:15:a0:ec:87:a9:47:c9:18:07:a3:fb:
bd:18:0b:28:e6:8b:ff:0c:3e:09:1f:1b:76:36:cc:
65:9a:a9:0d:a3:87:ba:9b:bc:00:4d:4f:b0:f4:4c:
0e:bf:c3:ab:53:4a:96:2a:60:fd:d7:2d:56:f8:fb:
54:7a:9b:ae:7f:d0:af:e5:fe:aa:81:bc:a6:d9:9b:
f0:ca:08:65:a8:9e:4a:4e:6f:97:9c:e3:93:0a:1d:
46:b4:1c:a8:6b:51:87:6e:92:f7:ba:43:75:4d:b9:
d2:45:2c:68:de:ff:de:56:76:53:96:ca:bc:94:01:
17:87:48:4d:81:7e:09:68:1c:06:ee:31:97:3d:f8:
2f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:33:F0:17:38:45:AD:F6:C8:6A:7F:E9:D8:7F:D4:EC:88:A4:6E:A2
X509v3 Authority Key Identifier:
keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9644:2220::/44
Signature Algorithm: sha256WithRSAEncryption
c8:89:26:34:73:7e:e0:ab:df:03:0f:17:39:c6:6e:67:e5:98:
aa:4c:57:98:0f:28:1c:7a:90:a9:6b:77:21:37:b4:b1:a8:d7:
87:51:d2:eb:23:4a:a2:83:51:f8:93:69:85:8c:4e:ad:6b:e0:
b5:64:9e:15:a3:51:2d:fc:8f:e3:b9:75:14:fe:4d:3f:96:67:
5c:d2:ca:e7:b4:6e:9a:b5:18:40:a5:65:87:e1:0a:2d:1f:f2:
8e:0c:fb:8c:67:a5:6a:3e:95:2f:ec:26:cb:d0:26:84:0f:60:
7b:bb:d6:86:6c:8c:89:8d:81:28:9e:22:01:a5:43:9f:61:c9:
40:d6:20:4b:70:53:02:9b:1c:25:94:68:ad:34:15:88:f9:3b:
24:51:8a:94:30:7c:62:47:17:0e:d8:d8:0c:d1:59:84:33:51:
0f:99:a2:af:b3:ea:20:f7:2f:28:64:5b:24:bd:58:c6:26:0e:
11:fe:01:fa:e9:f6:fa:50:c7:ce:8c:de:94:8e:6f:cf:66:9e:
8f:63:23:ce:3c:16:84:cc:2f:16:73:0d:e8:01:31:72:0a:ae:
27:14:85:0b:c8:de:0a:25:ec:aa:6c:fc:d0:8a:75:a3:44:41:
b6:fe:68:9e:29:fd:45:5b:2a:00:30:0a:90:c0:22:88:2b:db:
7b:16:2a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:20:03 2025 by rpki-client