Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa
File: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (raw, json)
Hash identifier: m2CiuFBjrlRavusUidV8mkbKXKHzyUUUhDYGNFwtBAs=
Subject key identifier: DA:64:30:BB:9E:6D:66:57:ED:17:8F:A2:46:71:97:4A:8A:CE:09:A5
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 7C911FFED5A7D6363ECE547F3398BEDB8A1B0071
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa
Signing time: Thu 24 Jul 2025 16:39:45 +0000
ROA not before: Thu 24 Jul 2025 16:34:45 +0000
ROA not after: Thu 23 Jul 2026 16:39:45 +0000
asID: 41720
IP address blocks: 185.242.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 20:27:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:91:1f:fe:d5:a7:d6:36:3e:ce:54:7f:33:98:be:db:8a:1b:00:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Jul 24 16:34:45 2025 GMT
Not After : Jul 23 16:39:45 2026 GMT
Subject: CN=DA6430BB9E6D6657ED178FA24671974A8ACE09A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:90:d5:96:d6:39:8c:ea:f3:75:68:7b:f8:54:
cd:93:fd:6a:d2:fb:1c:cd:76:c4:29:6e:5c:da:2f:
aa:06:aa:b8:43:02:24:ca:9b:f9:11:69:e6:d1:94:
b0:3e:3a:97:8f:cc:fd:07:67:0a:a0:45:0e:62:6e:
3c:da:ee:2f:8e:18:61:06:90:66:56:e7:e8:87:66:
d5:d4:8c:48:00:6e:c6:86:81:7d:ca:35:c7:a9:0b:
cb:94:f0:b4:38:50:56:e0:d7:ee:c4:35:a4:8e:c3:
a7:0b:26:96:70:60:79:aa:59:87:36:81:66:32:a1:
ab:29:c7:32:ac:e9:f6:24:d1:08:5a:19:dc:3f:00:
49:83:13:35:c1:d7:57:7d:d6:02:7e:5b:82:92:16:
5b:ab:41:53:72:90:3b:96:1d:8f:c1:1e:20:a1:37:
56:c1:b8:6b:9e:ce:fe:54:2c:40:8a:a7:89:41:c8:
b6:8d:ec:af:a5:d3:ef:97:46:73:3e:0b:38:28:71:
61:b3:44:35:d7:de:98:46:ce:7e:63:f3:d1:91:5a:
9d:12:13:07:36:95:d4:75:79:40:b4:b6:20:ee:5b:
2c:1c:3c:78:1b:d0:85:50:0f:5d:6f:ee:29:e5:49:
46:d5:2d:a5:4a:6f:c9:57:43:9d:bf:51:5c:09:9d:
ed:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:64:30:BB:9E:6D:66:57:ED:17:8F:A2:46:71:97:4A:8A:CE:09:A5
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.180.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:8b:cd:db:be:51:0d:e0:d8:63:77:33:ab:48:c9:89:e0:50:
8e:7d:ca:20:4f:28:9b:c9:58:31:94:23:04:c7:f4:37:fd:d8:
23:61:b6:8a:62:10:8a:c1:f1:1d:17:8f:be:cd:60:c2:93:a8:
88:c3:c6:b7:a9:e4:3c:a7:e9:17:8e:fd:1f:eb:c3:c3:9f:d2:
e0:a4:2c:3d:bb:0b:92:50:4b:0f:55:4c:ad:74:e7:ea:d2:f3:
6a:0e:16:8b:48:ce:08:85:6e:ed:6f:e2:3f:19:ac:0c:b4:39:
73:d1:0a:fa:f1:4e:f7:65:21:1e:51:6e:e7:1e:a5:b7:d0:0a:
57:e7:e0:e5:c6:bd:15:1a:31:8e:55:51:9e:78:06:64:3f:dd:
45:db:be:a3:70:1c:2d:0d:8c:2f:54:ba:ac:cd:f4:fb:ff:d7:
b8:ec:12:0d:f4:71:a1:97:dc:2b:c2:e4:f9:fe:7d:12:b8:7b:
9a:4f:a0:a0:f9:e7:99:82:c3:71:a7:6d:08:51:e4:04:fc:f4:
d2:f1:4a:a2:7c:39:23:35:4d:d7:d5:ef:38:77:bd:24:75:48:
ce:30:7c:be:d2:41:d2:53:aa:fe:96:de:30:60:be:21:7f:e0:
df:c5:35:73:27:b1:f8:f2:65:f3:51:b9:48:e0:d5:a7:00:e4:
37:ec:09:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 04:41:33 2025 by rpki-client