Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e20323132343737.roa
File: 38322e3131382e32362e302f32342d3234203d3e20323132343737.roa (raw, json)
Hash identifier: M3/fBiajTDnmjbsUTFc/VWwOxC3a0iuPTsEteuhOl7k=
Subject key identifier: A0:05:91:57:A0:C4:C7:46:F9:F0:1A:85:C4:BE:80:15:22:03:F5:F9
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 5C57255ABA49F55A48D63827CC1A69A37F411AB1
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e20323132343737.roa
Signing time: Sun 06 Jul 2025 01:54:13 +0000
ROA not before: Sun 06 Jul 2025 01:49:13 +0000
ROA not after: Sun 05 Jul 2026 01:54:13 +0000
asID: 212477
IP address blocks: 82.118.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:57:25:5a:ba:49:f5:5a:48:d6:38:27:cc:1a:69:a3:7f:41:1a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Jul 6 01:49:13 2025 GMT
Not After : Jul 5 01:54:13 2026 GMT
Subject: CN=A0059157A0C4C746F9F01A85C4BE80152203F5F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:3d:6a:58:4d:99:a7:48:dd:dc:d6:4b:7b:33:
bd:d2:35:ed:8b:d9:c5:f1:31:c6:ff:c6:2a:6a:ea:
ff:ea:b7:7b:e1:89:9d:ad:10:d2:99:dc:4e:71:58:
5a:95:3a:96:9b:02:41:6b:ca:fc:40:19:90:54:aa:
bf:0e:ab:84:f1:94:b1:4d:ac:57:69:ca:f6:65:96:
eb:c1:37:ad:5c:46:6c:5f:46:2a:a6:0b:c0:2c:b7:
c8:4c:66:cc:19:14:7b:12:e2:11:8e:13:35:92:7d:
f7:e6:21:05:f9:ab:bd:16:db:7f:e2:8d:28:6e:65:
a3:1f:96:32:85:1b:69:e9:d5:17:5a:3c:37:26:9f:
9d:f6:6a:37:fa:97:a3:8b:40:70:97:f8:82:29:a5:
88:93:09:cd:11:ba:0a:0d:32:06:1a:cb:a6:77:b4:
3a:3e:72:e1:91:1b:3a:75:43:c4:0d:b9:a2:31:91:
48:91:0d:03:b9:da:90:ce:54:4c:ae:35:6f:d3:36:
0d:2c:f0:8f:c9:aa:34:de:a4:7f:b7:bf:1d:0e:ec:
d1:ce:8b:af:87:4b:7a:96:10:c3:de:11:38:b2:8b:
8b:83:f8:e4:16:a5:ca:9c:3e:c1:95:dc:38:16:be:
59:e3:20:fc:44:79:8e:1e:63:bf:fd:8d:b0:97:0d:
a9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:05:91:57:A0:C4:C7:46:F9:F0:1A:85:C4:BE:80:15:22:03:F5:F9
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e20323132343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.26.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d7:35:f6:26:a5:73:1d:12:be:a1:f7:ff:57:79:61:0d:4a:
4d:3e:b4:e5:34:f7:02:d3:81:14:21:a2:1a:02:fd:4e:40:32:
01:03:d3:e3:89:83:c2:44:6e:b4:e7:b3:89:c0:ff:78:6b:27:
ba:d4:40:e6:0c:73:62:d9:52:e6:24:c6:8e:a7:63:7b:c6:f4:
97:fb:2b:fd:20:ca:64:b8:93:94:d0:0e:a7:e8:74:a5:66:a1:
16:eb:50:59:b8:cf:d7:4a:62:09:8e:40:83:80:67:c7:a4:5d:
37:d4:c8:97:55:69:e5:fc:af:9f:57:c1:a0:4c:6e:9c:49:1c:
3f:8f:eb:ca:86:12:c7:5e:32:dc:0b:ab:7f:aa:b8:02:19:71:
a9:9b:f4:7c:f7:6f:94:3e:91:2f:62:99:ba:ab:cf:ff:0a:bc:
70:be:59:5c:99:83:ce:07:67:e0:4f:27:6f:a5:13:61:46:e6:
f5:87:e6:41:aa:8c:96:6b:ac:30:1b:81:8d:e8:fd:49:0c:2b:
97:5f:c4:09:df:28:c4:6e:a5:cf:fc:80:68:0f:f7:42:b9:4d:
3e:88:fb:97:31:bc:6d:df:b2:eb:b4:d0:25:59:cb:9d:b7:e1:
4e:5d:95:99:05:3e:1c:f7:d6:9a:91:c5:31:78:bd:b1:f8:14:
40:7d:fb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 20:23:57 2025 by rpki-client