Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139332e302f32342d3234203d3e203539343332.roa
File: 3137382e3133322e3139332e302f32342d3234203d3e203539343332.roa (raw, json)
Hash identifier: 2WBDusHWUq99xTu0ZxVx6iJ/cgBviWpO2frc88B7PQ8=
Subject key identifier: 25:10:C9:74:FA:2C:B7:9A:76:AD:84:39:ED:CE:B3:C4:EE:46:08:69
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 19E0789E5A17F2052229CE606EB066BADDEC9509
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139332e302f32342d3234203d3e203539343332.roa
Signing time: Tue 03 Jun 2025 07:31:24 +0000
ROA not before: Tue 03 Jun 2025 07:26:24 +0000
ROA not after: Tue 02 Jun 2026 07:31:24 +0000
asID: 59432
IP address blocks: 178.132.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 05:42:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e0:78:9e:5a:17:f2:05:22:29:ce:60:6e:b0:66:ba:dd:ec:95:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Jun 3 07:26:24 2025 GMT
Not After : Jun 2 07:31:24 2026 GMT
Subject: CN=2510C974FA2CB79A76AD8439EDCEB3C4EE460869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8c:fa:19:e1:f2:36:7b:e3:b4:b3:a0:4c:97:
13:4f:bc:6a:6a:a2:0d:e6:d0:4c:72:d4:aa:47:cc:
3c:bd:e4:f8:ec:0e:8e:15:7c:16:0a:92:ad:e9:ef:
eb:77:6c:8c:7d:a2:89:bb:5c:b6:84:0f:77:77:dc:
44:64:d2:55:fb:a1:45:d1:f6:e7:19:84:77:69:75:
c0:dd:be:ea:eb:09:68:ef:49:46:18:42:fc:e4:71:
d4:01:fc:aa:87:56:b3:70:a8:1c:99:72:cd:2a:a8:
94:3b:2a:08:69:3d:f4:45:fb:a7:6e:9e:ff:02:ec:
3e:c7:99:8e:fa:1b:36:d0:e4:cb:6f:75:fa:d3:b4:
e6:aa:3a:b1:01:95:3a:dc:96:50:a4:4f:a0:a2:7d:
69:e1:34:17:60:e0:21:75:91:2e:5d:b9:70:1e:bb:
84:80:70:0e:1c:36:e7:c7:8f:d2:bd:a1:71:35:84:
f9:d2:e8:36:6d:fd:92:7d:d1:6d:23:06:38:83:75:
ca:70:db:de:24:7e:97:57:a8:e5:9c:cc:81:e6:d1:
63:ea:9c:2e:59:50:f4:c0:a7:14:e7:de:65:e4:34:
ca:3d:61:99:13:67:5d:8c:33:f4:14:f4:2f:01:50:
ab:45:ea:91:74:12:d3:b7:05:fa:2d:1c:4d:82:20:
c6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:10:C9:74:FA:2C:B7:9A:76:AD:84:39:ED:CE:B3:C4:EE:46:08:69
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139332e302f32342d3234203d3e203539343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.193.0/24
Signature Algorithm: sha256WithRSAEncryption
be:87:76:e3:a3:48:f6:91:0d:f0:2f:7e:97:12:6c:f4:28:6a:
6d:87:c5:99:47:68:53:de:46:01:84:bc:f8:d3:bd:d4:39:c4:
c0:92:4e:c1:f1:82:96:d3:1e:65:c7:fb:6f:52:f5:0a:07:df:
c4:72:6c:ae:12:0e:96:f7:51:28:eb:b5:e4:20:13:d3:0f:43:
6d:df:97:09:3e:3c:4d:bd:1b:cc:f8:ad:01:ab:e7:9f:15:d5:
cf:9c:59:5d:c9:bc:23:6f:bd:46:58:6d:86:d3:d6:77:1b:4a:
14:0c:4d:92:87:86:4e:d7:fd:05:f1:6d:6b:b9:72:32:71:8b:
5f:7a:9c:a0:9a:d5:50:57:bb:79:4b:0c:0c:8d:76:3f:7c:8d:
b8:7c:37:dd:21:d4:ef:ed:90:f3:1b:d2:26:cf:fd:2f:92:73:
27:ae:40:bb:60:db:b1:b4:bb:c6:67:5b:2e:9a:81:53:b6:b4:
4c:3a:c3:a7:3c:3d:da:ba:fb:de:5a:04:9f:be:6a:59:04:f2:
f4:17:23:d2:a6:da:b8:40:a9:82:b1:e3:92:59:fb:77:9e:75:
39:65:2b:8f:50:e4:54:9e:22:9e:84:34:fc:03:8a:be:4b:5b:
b3:74:06:d2:6b:0f:c3:9e:60:d7:c3:21:f5:fb:e7:9a:2c:bd:
46:66:e1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:38:17 2025 by rpki-client