Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa
File: 3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa (raw, json)
Hash identifier: b3VPqm78d32upkRS45HOejDpaZzakM7RvUm8zYxxirQ=
Subject key identifier: B0:80:39:C5:2B:E6:C3:5E:CD:9F:14:CD:58:1F:B5:53:A5:B8:D1:50
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 7D3ED5636B0BCA7FF3E5DC67D191A19069B3AF39
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa
Signing time: Thu 04 Sep 2025 08:42:51 +0000
ROA not before: Thu 04 Sep 2025 08:37:51 +0000
ROA not after: Thu 03 Sep 2026 08:42:51 +0000
asID: 31898
IP address blocks: 109.234.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 20:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:3e:d5:63:6b:0b:ca:7f:f3:e5:dc:67:d1:91:a1:90:69:b3:af:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Sep 4 08:37:51 2025 GMT
Not After : Sep 3 08:42:51 2026 GMT
Subject: CN=B08039C52BE6C35ECD9F14CD581FB553A5B8D150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c3:87:d4:7d:ab:d0:69:f9:24:98:20:8e:74:
05:f7:f1:64:46:04:b2:0d:d3:f2:cf:be:2c:4f:99:
ef:47:a1:05:e1:84:25:c3:71:2d:be:e4:13:c3:03:
2a:05:b1:b3:f2:92:7e:82:8a:f0:37:50:9c:3e:73:
e8:37:03:03:d0:13:f3:24:c7:cc:9d:2b:13:ec:75:
f5:23:f8:b5:21:b2:62:54:fc:32:f6:de:18:1b:02:
26:7f:cb:d9:05:a3:24:0f:06:f8:22:3a:eb:e4:85:
2c:82:c4:f6:a7:81:bf:ab:d9:32:48:a5:11:3a:82:
ca:ac:bb:90:71:7c:31:53:d5:e6:d3:82:79:dd:c9:
32:38:33:46:de:77:73:b4:66:d0:25:32:44:57:8e:
fd:ec:a5:17:47:a5:76:35:08:ec:42:96:29:84:97:
30:a5:da:06:9c:9b:33:62:c6:05:6e:4b:98:f5:2b:
e0:da:37:bd:3d:80:37:7c:c7:01:b0:ce:90:47:41:
b1:a1:52:93:c6:5c:65:f6:9e:0e:31:6e:f9:da:17:
12:1b:f6:dc:e5:27:a7:38:a1:5a:b0:da:49:78:18:
cd:ac:af:63:9f:9b:4f:ad:04:db:29:06:20:fc:fa:
c2:85:75:78:24:a2:da:f6:55:fe:39:6f:04:0b:71:
ef:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:80:39:C5:2B:E6:C3:5E:CD:9F:14:CD:58:1F:B5:53:A5:B8:D1:50
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.208.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:50:cc:46:fc:44:da:68:66:3f:d0:11:1c:30:8d:63:9b:ea:
31:7f:52:11:d5:06:13:01:37:fa:a3:74:30:bd:68:c7:a1:63:
63:b5:73:7c:52:52:b8:14:cd:3c:6c:e4:f9:0d:fc:b9:f0:a4:
3c:af:3e:a4:e1:37:7d:23:bb:c6:b1:97:17:da:57:52:9f:6d:
c1:7d:9d:79:a2:63:bc:b3:83:c3:6c:11:7e:84:07:49:e9:d7:
43:0a:80:0c:81:3f:3a:9f:bd:c6:25:50:3b:5b:45:3c:a0:a1:
e2:87:cf:57:38:46:4f:af:0c:a9:b3:ca:87:ea:87:93:29:29:
6f:ed:fa:39:da:50:bc:75:df:f2:de:bf:9e:81:3d:07:f8:c3:
4f:4f:f5:8f:f6:31:e1:52:91:4b:5a:30:ae:4d:ff:60:51:57:
d4:10:84:e3:b2:9a:21:97:42:66:56:cd:6d:40:20:18:e4:ed:
00:9c:af:9a:45:f3:5a:9c:90:9f:b2:59:e5:52:5d:e3:d9:60:
00:3a:fc:e1:20:76:c7:d0:bb:ab:28:be:e4:0b:0d:0b:06:00:
09:d3:f2:40:15:27:b6:b5:d3:b7:1d:53:59:18:3e:b4:4b:95:
fe:40:85:82:e6:58:89:6d:40:ff:d9:99:c5:58:6d:16:35:1d:
d4:6c:a8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 00:40:22 2025 by rpki-client