Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130372e302f32342d3234203d3e20323132323338.roa
File: 39312e3230352e3130372e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: PuXIi/wDi0HkxwsSormTIAyXwmiGIuHw9HTcrxByKrc=
Subject key identifier: FE:D9:49:A0:7A:96:07:11:A1:B5:3F:FF:2B:F9:6A:B8:58:3B:01:FB
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 11E10DEE86DE04522AD5D44751B2781F9C02F4D9
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130372e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 03 Jul 2025 19:58:06 +0000
ROA not before: Thu 03 Jul 2025 19:53:06 +0000
ROA not after: Thu 02 Jul 2026 19:58:06 +0000
asID: 212238
IP address blocks: 91.205.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:e1:0d:ee:86:de:04:52:2a:d5:d4:47:51:b2:78:1f:9c:02:f4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Jul 3 19:53:06 2025 GMT
Not After : Jul 2 19:58:06 2026 GMT
Subject: CN=FED949A07A960711A1B53FFF2BF96AB8583B01FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:19:e2:52:f3:15:bb:5d:ae:35:31:45:d8:47:
12:6a:c0:9b:e9:d1:41:f4:ec:ef:30:24:27:a4:0a:
9d:1a:38:6b:92:f9:e4:0d:42:35:64:8d:06:27:9e:
59:a1:58:60:32:c1:3d:4b:d2:af:e6:75:52:f2:d8:
f7:cd:81:bc:63:86:22:78:e2:b2:5f:be:6c:3d:34:
82:ec:64:26:4a:3c:88:dc:7b:99:2c:1a:97:40:c3:
99:11:a9:78:74:50:cd:09:2f:ad:fd:e4:5b:bb:bf:
a8:5b:c8:be:2d:9f:ed:73:64:0c:ce:e2:d0:59:9b:
66:fd:e2:c2:d0:95:5d:10:56:5a:d7:b1:e2:fb:ff:
41:f2:ff:c8:4c:1a:3b:f9:99:e5:5f:38:04:84:87:
43:47:2d:c9:0e:f4:b6:28:a8:46:b0:7d:db:08:7d:
3e:3e:96:25:14:ab:e9:d6:ef:9a:b2:f3:08:2b:40:
a0:ef:cb:f3:e4:bc:09:34:41:df:be:e8:ee:58:18:
4c:8f:9a:d3:b4:b2:45:40:93:6d:36:94:96:49:10:
12:24:64:5f:75:fa:57:98:3e:fc:17:ad:21:0f:64:
d0:41:43:c4:43:55:76:c0:cd:98:2e:eb:a4:35:f8:
26:49:63:75:66:96:4b:1b:82:29:89:cf:c6:30:84:
fb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D9:49:A0:7A:96:07:11:A1:B5:3F:FF:2B:F9:6A:B8:58:3B:01:FB
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130372e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:1e:22:21:0f:b2:7c:a0:5b:b8:16:8d:43:d3:ae:8a:27:eb:
fc:b8:63:61:6a:79:5f:64:16:1d:a2:d3:14:4a:27:f0:2f:37:
64:f3:1a:6e:b7:53:e9:09:42:07:92:89:68:4a:d4:c5:ad:97:
26:d7:36:2a:22:44:ca:4d:10:62:c0:04:15:b9:24:bd:7b:a4:
ed:fa:1a:5b:20:2c:d4:6e:58:b6:e1:fa:13:3a:30:91:0f:70:
bd:d1:99:ce:da:b5:a5:61:1f:87:13:04:57:82:80:bd:9f:c2:
70:fe:9d:d4:03:ef:f9:48:ab:5d:6f:94:a6:4a:53:76:a3:d6:
2e:46:8a:72:e2:04:14:57:18:55:0a:f0:86:76:e6:ec:a4:d9:
e1:f5:3d:d3:05:b9:dd:d7:b0:6e:33:c9:1e:80:36:8b:2a:fb:
5e:c1:73:bf:40:fa:e9:cf:a0:d0:3c:80:a2:03:fb:fc:29:e7:
74:08:22:f4:1e:b5:58:59:90:79:a5:9e:dd:91:27:bf:e6:56:
24:fc:8b:fd:28:fd:59:da:ae:9f:07:e2:cd:7e:45:0d:76:2f:
6d:50:ab:3a:ab:58:37:1e:83:d8:be:1d:e1:5e:f3:25:2c:ee:
ba:ff:29:cf:e1:df:38:24:30:ff:80:6b:1e:7b:c3:fd:c1:72:
f0:76:fd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:56:53 2025 by rpki-client