Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137362e302f32342d3234203d3e2030.roa
File: 3138352e3136322e3137362e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: d0AlRJgK5NjOYlyRyrqobfHqyMhKx+NE0hxXUcILT1g=
Subject key identifier: 29:66:5E:48:41:19:3A:E2:5C:EA:BA:A2:39:C2:87:68:BA:B2:71:12
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 40BC8705DAAE7DFB046F612F3525F21796B77A8F
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137362e302f32342d3234203d3e2030.roa
Signing time: Mon 14 Jul 2025 12:05:54 +0000
ROA not before: Mon 14 Jul 2025 12:00:54 +0000
ROA not after: Mon 13 Jul 2026 12:05:54 +0000
asID: 0
IP address blocks: 185.162.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 19:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:bc:87:05:da:ae:7d:fb:04:6f:61:2f:35:25:f2:17:96:b7:7a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Jul 14 12:00:54 2025 GMT
Not After : Jul 13 12:05:54 2026 GMT
Subject: CN=29665E4841193AE25CEABAA239C28768BAB27112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:a8:2e:d2:87:0b:ac:3a:4a:ca:1b:6c:c1:
85:34:bf:a2:33:b2:a7:3a:09:b5:63:ea:1e:f5:27:
7b:50:66:50:e1:96:9b:a8:15:58:e4:3c:a8:06:32:
63:16:3d:6e:50:6a:28:01:4c:ee:8d:f8:f0:d3:b5:
e6:d8:c1:d8:23:46:7f:99:59:ab:b0:6e:73:df:a1:
07:ef:9d:ac:96:e9:be:8f:bc:d8:fd:f4:7a:25:34:
84:c9:52:96:9b:fe:c8:fb:1a:e8:af:5b:76:18:52:
a5:50:b2:e2:7b:31:b7:cd:8d:bb:23:09:4e:e2:82:
06:52:0c:cd:02:7c:2f:70:93:e7:a6:21:43:85:a0:
3f:3a:41:c4:b1:50:be:94:09:00:c6:09:c6:b3:f7:
f8:32:53:09:85:1c:87:fc:10:d0:74:51:13:2a:19:
cc:04:ce:df:72:a8:1d:3a:8d:0a:e7:ea:a1:ba:15:
0c:7a:e7:e3:a0:ef:77:4d:57:19:3d:07:e7:07:65:
ef:20:e5:86:30:9a:99:38:e7:8d:26:ac:9d:82:36:
fd:78:e4:da:10:e5:40:4a:8d:2c:37:97:2c:45:4a:
cc:90:50:b9:7b:f2:f1:9c:fe:1f:48:a2:25:c5:73:
40:1d:90:10:dd:5d:a1:bb:da:2c:6b:2c:ed:56:31:
1d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:66:5E:48:41:19:3A:E2:5C:EA:BA:A2:39:C2:87:68:BA:B2:71:12
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137362e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.176.0/24
Signature Algorithm: sha256WithRSAEncryption
29:c4:3b:f1:2a:7a:b2:1b:50:8d:4a:0f:68:d4:66:a7:67:6f:
21:f1:31:63:43:d5:89:83:3c:4a:0f:0a:92:ef:00:c5:a9:0a:
3f:8e:b8:cc:14:8c:47:77:c5:14:77:c8:5c:6e:b9:23:fe:66:
87:28:1b:0c:1f:d8:e7:4a:76:2d:e6:46:68:88:ce:7c:bd:d7:
e6:a3:4e:c1:1b:e3:b5:db:02:1a:88:40:f8:58:69:14:0d:cd:
bf:0c:59:4d:33:70:cb:3c:a0:71:f2:c0:51:c6:19:a2:70:99:
eb:0c:18:07:67:fb:48:34:2b:13:95:55:f5:59:f1:45:7d:8d:
c0:6c:e7:ef:ed:d8:c9:47:a6:a4:fe:9c:25:55:22:be:5c:b5:
7b:a9:49:54:0d:68:cb:5f:91:2f:52:22:ec:86:1d:29:d0:9d:
37:e1:59:7a:5a:90:27:5b:df:fe:df:1d:89:a6:fc:a5:3b:16:
13:43:e4:4b:b5:d3:76:0b:d9:be:a0:53:6d:0a:2d:c7:37:9d:
bb:49:bb:3d:cd:a1:78:a9:37:44:10:a8:3f:14:70:a3:07:0c:
e3:1f:9d:43:46:31:77:0b:39:88:4a:39:ee:75:a1:63:4a:31:
39:0f:80:1d:ae:a1:ad:3c:34:5c:e6:4e:92:a8:b3:80:75:ec:
c4:57:af:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 02:06:15 2025 by rpki-client