Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31332e302f32342d3234203d3e20323132323338.roa
File: 3139332e3230332e31332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: v2LeNdTWZgk/ESMEj+v8J1ClxEXG60rf3QURAPwXegk=
Subject key identifier: 24:DA:92:1D:54:AE:C0:74:F6:C5:7D:1E:68:76:13:DD:92:03:15:67
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0F67DE8FF1A9F53BAD6239410CF66BAA90233A49
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31332e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 30 Jun 2025 21:30:25 +0000
ROA not before: Mon 30 Jun 2025 21:25:25 +0000
ROA not after: Mon 29 Jun 2026 21:30:25 +0000
asID: 212238
IP address blocks: 193.203.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:67:de:8f:f1:a9:f5:3b:ad:62:39:41:0c:f6:6b:aa:90:23:3a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jun 30 21:25:25 2025 GMT
Not After : Jun 29 21:30:25 2026 GMT
Subject: CN=24DA921D54AEC074F6C57D1E687613DD92031567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:a0:39:94:b8:3e:03:8c:94:e1:34:a7:4c:
d9:50:07:af:4b:0c:f5:50:d1:14:3a:2d:2c:5e:4f:
93:c6:a4:28:a9:19:f0:f7:3f:6e:77:ce:9f:c8:64:
cd:38:d8:a2:54:62:32:7a:5c:4f:d5:8e:23:5a:00:
1e:e8:08:06:32:18:d5:19:ae:fe:f1:64:4a:ec:46:
a7:18:bc:70:47:f7:8f:48:2e:cb:f6:e2:6e:e9:f3:
c3:9e:05:fb:82:9e:73:b9:7f:e0:89:f7:6b:0a:63:
01:c8:81:f6:7f:77:3a:d4:db:13:26:0c:c8:41:d9:
b5:02:2a:df:ca:68:68:9f:e4:b7:86:7f:1f:55:49:
fc:b3:a4:ce:27:40:9b:ed:aa:23:0d:7e:50:46:d9:
3b:d9:66:57:fb:38:10:9f:83:5c:50:70:fa:03:b3:
ef:23:4a:22:a2:a9:31:f2:46:bb:d3:bf:c4:97:88:
8c:a9:af:a5:ab:84:1f:f4:55:48:58:b4:35:43:cf:
0d:b7:01:68:7e:eb:54:18:6b:54:ba:fb:78:e4:c3:
b6:b2:1e:e9:e8:3e:d5:e8:d5:f5:61:1a:d8:7c:3a:
49:fb:f2:3b:c5:8e:f9:6d:28:9e:40:b7:4b:35:5e:
e9:84:7f:98:58:80:d0:c2:5c:50:43:76:f1:ad:13:
ac:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DA:92:1D:54:AE:C0:74:F6:C5:7D:1E:68:76:13:DD:92:03:15:67
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31332e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.13.0/24
Signature Algorithm: sha256WithRSAEncryption
45:4f:be:fb:c4:6c:39:4b:c9:45:75:94:4c:e6:24:75:b9:b6:
73:4c:23:e5:48:57:89:f6:8a:44:98:6e:9f:94:59:64:b6:cb:
19:2c:ec:5e:f0:e4:ca:3a:4f:f9:12:98:3d:01:4d:da:67:76:
b8:43:bb:27:1c:30:bf:7b:f4:15:73:b6:1e:b5:76:7c:e0:3a:
12:fd:c4:c4:59:81:58:50:73:83:11:05:f3:a3:8c:9f:1b:5c:
e5:73:bd:a4:ec:5f:42:dc:69:e9:f4:76:ce:05:db:c6:1c:3e:
2b:df:e0:95:14:e5:9f:96:80:86:b2:a8:78:d7:96:c4:f0:31:
6b:2a:e9:18:68:f0:23:21:d7:ee:b8:3a:49:28:9f:de:8d:56:
73:21:2f:d0:75:72:fe:df:ec:b7:ab:a5:80:fb:7c:3b:ee:1e:
45:bc:2b:c7:bc:4a:f2:71:c5:9f:76:a5:65:69:b6:05:31:01:
3e:cd:3c:d4:ab:11:5f:3d:b0:50:9b:30:ed:86:08:01:db:51:
46:1c:67:95:71:32:e2:d0:0d:d2:ea:ac:e1:11:68:45:75:d6:
e2:b1:3f:ef:a0:d3:e9:ee:8a:86:c6:35:57:43:4c:c9:60:11:
28:93:12:f6:63:f1:cf:2d:e3:91:9a:cf:1c:9e:50:1f:96:7d:
ce:31:8d:6a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:56:45 2025 by rpki-client