Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132382e302f32342d3234203d3e20383334.roa
File: 3130332e34392e3132382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: f69Ng9E7cmqBwiI0B0WK6huEhniZtrLM96PEK5iUE1I=
Subject key identifier: 78:C1:1D:22:F7:0A:D2:92:53:10:0E:27:F6:5F:5F:85:E5:51:B4:85
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 025E56A5BC38EFD3F83A5D927421FF1AF5DB1B2B
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132382e302f32342d3234203d3e20383334.roa
Signing time: Mon 14 Jul 2025 13:04:18 +0000
ROA not before: Mon 14 Jul 2025 12:59:18 +0000
ROA not after: Mon 13 Jul 2026 13:04:18 +0000
asID: 834
IP address blocks: 103.49.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:5e:56:a5:bc:38:ef:d3:f8:3a:5d:92:74:21:ff:1a:f5:db:1b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Jul 14 12:59:18 2025 GMT
Not After : Jul 13 13:04:18 2026 GMT
Subject: CN=78C11D22F70AD29253100E27F65F5F85E551B485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:03:4f:c1:09:2c:e7:56:53:30:77:ef:ea:
66:bd:42:03:04:16:f5:e8:62:31:83:d5:9e:ad:72:
6f:c6:4e:e8:7d:d0:cc:cb:3c:e3:14:c9:d8:a9:6d:
e9:3f:f0:ba:34:7b:2d:f2:99:95:13:a5:63:8e:d6:
ca:a8:1f:b0:dc:86:51:27:c2:6a:c6:83:53:5e:2a:
7a:0f:5f:90:aa:43:aa:93:60:c3:28:52:56:30:4f:
d8:83:21:b8:0a:9a:71:34:d3:94:c3:b0:4c:15:4c:
c1:da:fc:ee:3d:11:85:9e:e4:27:b7:83:40:11:3d:
63:7b:d0:70:99:82:8a:13:a0:67:70:d9:fe:7b:c6:
52:03:0b:5d:ff:8c:ea:d3:af:95:e2:c1:26:35:fa:
71:35:b6:8d:8d:18:17:38:e6:e6:b8:5f:0c:35:af:
85:df:05:63:b6:02:84:b5:96:62:a6:4e:d9:ed:f5:
50:90:71:7d:b5:07:16:ec:b8:ef:75:a5:a4:9d:69:
b8:05:9e:3a:61:8d:13:f6:2c:91:80:33:53:55:5e:
22:1c:ca:da:0b:98:ba:23:5f:ea:67:eb:1d:c8:46:
2f:53:cd:66:26:e8:f3:2e:f2:5e:ca:45:69:77:5f:
73:0f:08:b9:6e:c4:f3:6c:ae:5a:60:39:d8:e9:92:
33:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C1:1D:22:F7:0A:D2:92:53:10:0E:27:F6:5F:5F:85:E5:51:B4:85
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.128.0/24
Signature Algorithm: sha256WithRSAEncryption
54:13:4a:e2:27:7e:7c:6a:9e:3b:3a:b6:72:cd:5a:13:8e:98:
d9:b9:27:ac:88:38:45:b0:89:73:6b:62:c9:f6:14:18:7c:01:
0f:67:ea:5c:95:24:e5:4a:93:b0:4e:6c:10:c1:43:7c:b8:3a:
65:c0:18:2b:7c:3b:f4:ea:82:ea:0a:df:15:53:28:89:29:c6:
00:a5:59:a6:fd:fc:23:a8:6a:0c:8a:b2:4b:47:4e:f7:5d:95:
51:27:41:26:fd:07:d9:c3:0d:4f:2a:c0:26:b5:32:d9:c7:97:
38:b7:1b:c7:8d:06:ec:96:ab:6a:02:62:02:a6:01:cb:88:84:
7a:53:5d:48:6a:91:1e:75:1d:12:ab:86:80:98:3c:25:54:90:
48:95:0d:4e:42:34:05:41:d3:36:f5:6b:70:d1:60:28:be:66:
a5:6e:80:9c:b0:19:ce:c1:0d:9a:d1:d5:75:54:11:52:12:43:
aa:39:ff:e9:8c:02:bb:f7:dc:89:86:4d:0e:a1:0d:af:8c:81:
1b:36:3e:16:95:33:65:cc:94:78:f2:48:95:89:04:af:32:44:
88:f8:e7:42:27:d5:ef:b1:0c:f9:28:44:c9:b9:cc:b4:23:2a:
5f:45:de:5a:0c:91:03:76:ff:d6:93:04:fa:7b:62:0c:ad:1c:
e6:ba:d5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:21:41 2025 by rpki-client