Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234352e3235352e302f32342d3234203d3e20323132323338.roa
File: 3138352e3234352e3235352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: QsbE5Rna8NTmie0Mme1X1q+iqWaas6YJucvLMr4f7nI=
Subject key identifier: 11:AF:CF:DF:2B:2F:79:57:F7:E2:B5:0C:B2:04:87:47:1D:F5:AE:19
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 3124B3602B25A7ADEF70EBC50CEDA9AC951A2A29
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234352e3235352e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 03 Jul 2025 19:57:58 +0000
ROA not before: Thu 03 Jul 2025 19:52:58 +0000
ROA not after: Thu 02 Jul 2026 19:57:58 +0000
asID: 212238
IP address blocks: 185.245.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:24:b3:60:2b:25:a7:ad:ef:70:eb:c5:0c:ed:a9:ac:95:1a:2a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Jul 3 19:52:58 2025 GMT
Not After : Jul 2 19:57:58 2026 GMT
Subject: CN=11AFCFDF2B2F7957F7E2B50CB20487471DF5AE19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:62:1e:eb:f5:22:95:27:12:a7:9c:05:c5:
f8:ba:63:76:df:ef:a6:75:cc:ae:4a:b6:6b:5f:54:
2f:26:ed:b7:92:c5:b1:76:33:cc:8b:09:47:90:3e:
85:ea:36:ba:83:f8:36:09:69:12:20:cb:13:25:00:
ec:ae:4a:00:5a:de:37:f6:d4:0e:83:49:be:23:bb:
4c:3d:a1:5f:8a:df:a3:54:94:2d:da:c3:1c:02:b2:
fc:3f:99:fe:e2:1e:f8:29:47:00:2f:48:e9:8a:f8:
8f:16:8d:b0:24:16:f3:76:b9:d5:93:16:f8:cd:a8:
59:6a:c7:ef:31:f6:6a:9a:a6:b7:6b:68:c4:07:32:
9c:cc:6c:eb:4c:cf:01:20:9f:ed:bb:fa:ee:e5:a1:
11:2a:aa:19:b8:94:c9:40:63:41:e5:56:52:54:ea:
3a:49:09:f6:14:75:44:63:0d:36:2a:c2:8f:de:88:
68:c3:a2:72:b9:05:8d:5d:c0:2b:b3:32:50:de:f1:
53:90:21:ac:01:08:fb:c1:d2:de:46:66:42:45:58:
ba:96:8a:07:cb:a4:31:cc:23:4c:4b:a2:ea:93:13:
7c:12:c8:66:03:24:4d:bf:9c:88:13:bc:fc:6a:4b:
31:d8:3d:f6:ae:69:b7:89:bf:4d:17:c1:0b:09:d4:
b8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AF:CF:DF:2B:2F:79:57:F7:E2:B5:0C:B2:04:87:47:1D:F5:AE:19
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234352e3235352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.255.0/24
Signature Algorithm: sha256WithRSAEncryption
74:22:59:ed:98:97:3e:9f:50:f5:e7:e4:09:80:0c:e5:27:42:
aa:55:7b:f2:40:da:64:3a:06:12:7f:4a:b3:bd:d6:04:ff:cc:
a6:48:92:18:ee:c8:c7:5e:30:57:89:62:55:22:f8:e3:43:50:
ee:fe:bf:02:dc:1d:b6:b6:7c:fa:b1:29:c5:2c:34:8d:6e:02:
13:75:cd:22:4a:94:19:bd:0c:f4:04:b6:c4:b9:c8:1c:ce:bc:
91:38:32:46:9e:7e:5b:fa:91:97:c7:5a:41:dd:c0:f6:75:f4:
08:99:dc:92:82:39:68:57:a4:1c:b7:2b:f3:e8:d8:38:19:78:
48:59:21:77:2e:8c:67:a6:ea:ce:fc:4a:f7:d3:2e:46:db:f6:
09:65:4c:3e:c5:71:bb:22:e3:d2:bf:44:8a:17:4f:4c:8f:8a:
da:0e:ed:d6:60:c7:af:f4:de:67:31:49:f9:7f:54:92:0e:29:
d3:25:e5:6b:9b:e9:12:66:22:77:da:d5:60:e9:15:1c:1b:24:
13:16:29:1d:a0:96:04:5e:c3:f8:c6:bb:14:16:d6:95:c7:30:
23:79:40:6c:86:c0:d0:3a:b3:f9:4a:b3:3a:d2:43:c3:e1:78:
cb:72:1c:b7:40:68:f0:65:ba:01:6d:43:12:77:8f:4d:4f:1d:
50:34:e7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:56:42 2025 by rpki-client