Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233302e302f32342d3234203d3e203633393032.roa
File: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (raw, json)
Hash identifier: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=
Subject key identifier: C5:E2:B8:08:4F:E7:05:67:1D:C8:93:F2:59:14:2F:1D:63:5D:B0:4E
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 6B0B8AC493FE6047C0B0D08981A3A0702964B108
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233302e302f32342d3234203d3e203633393032.roa
Signing time: Tue 27 May 2025 12:01:50 +0000
ROA not before: Tue 27 May 2025 11:56:50 +0000
ROA not after: Tue 26 May 2026 12:01:50 +0000
asID: 63902
IP address blocks: 85.209.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:0b:8a:c4:93:fe:60:47:c0:b0:d0:89:81:a3:a0:70:29:64:b1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: May 27 11:56:50 2025 GMT
Not After : May 26 12:01:50 2026 GMT
Subject: CN=C5E2B8084FE705671DC893F259142F1D635DB04E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:18:70:22:cf:cc:e8:60:f1:bd:3d:dc:23:cb:
7e:a5:86:c8:b3:27:cf:05:d6:6c:71:a7:96:80:b7:
7c:39:05:0a:82:14:8a:14:10:67:1d:8b:0a:39:05:
b7:55:c2:59:e8:d2:af:ae:ba:53:7c:d4:9e:05:48:
7d:e3:70:ec:cd:23:b3:46:d7:7c:3b:06:7d:11:bb:
11:0d:1f:c9:1a:ad:a8:75:2a:70:0f:4b:28:86:be:
bf:86:47:5b:9e:4f:e0:7d:0a:29:6f:c6:85:c3:53:
9b:59:b6:ef:39:b4:10:3f:eb:5e:8a:39:03:48:91:
83:d0:42:e5:ac:9d:6e:cb:e3:70:05:e4:95:a7:ee:
1d:9b:ea:a8:8e:ce:b0:4e:2f:c6:9a:a2:95:6a:7a:
e0:93:14:e0:4f:e3:ea:59:e4:79:17:d6:ea:0b:a9:
e2:5a:51:28:f1:e8:f2:af:31:34:ec:b3:e3:fe:02:
1e:0d:e0:46:de:58:ac:23:61:e4:f9:db:57:dc:ff:
fb:fe:b3:18:c2:c7:b3:44:67:1f:6a:47:cc:52:0a:
f4:1c:00:c2:cc:a3:7f:ff:de:0a:ee:25:56:2e:04:
2f:15:b7:dd:5e:75:93:c1:26:e7:1e:33:86:59:01:
60:84:1b:9a:b7:46:b3:e0:1b:01:51:1a:0d:0a:24:
2e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E2:B8:08:4F:E7:05:67:1D:C8:93:F2:59:14:2F:1D:63:5D:B0:4E
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233302e302f32342d3234203d3e203633393032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.230.0/24
Signature Algorithm: sha256WithRSAEncryption
27:3b:48:cc:06:ff:36:9c:b9:94:51:47:e3:46:a5:18:d5:2f:
52:e3:a7:c2:fc:75:f7:9c:10:74:59:8e:38:8d:ac:2c:b5:07:
21:e4:63:d4:4a:83:53:61:f2:bf:d4:1b:85:cc:b7:16:54:20:
96:6b:a8:67:e7:3f:a7:cb:89:88:7f:ea:19:f4:62:16:d9:b0:
bc:d7:db:08:83:9e:b6:d1:ae:14:81:be:95:8a:88:de:fb:ef:
b7:80:fb:fc:fd:ef:0e:5a:6f:4c:5a:5e:7d:54:ac:c8:19:df:
f9:f4:76:37:f2:91:bc:a5:9a:fe:70:ab:42:06:f4:1e:8c:f5:
a1:ba:e2:77:98:9c:22:18:93:af:f3:8b:d9:c0:18:ff:29:15:
0b:b4:56:74:a1:7f:02:da:3f:95:59:44:62:de:0c:58:aa:d8:
86:fe:d0:0e:40:11:a8:22:b1:80:af:6c:34:38:c1:42:37:a0:
16:af:69:8b:44:62:a3:64:c7:4e:55:93:3f:7c:c3:68:b7:7e:
b1:7a:d1:dd:fc:24:47:bb:80:b6:3f:be:2d:0e:71:29:98:7c:
3f:5f:b9:cd:55:21:98:28:c7:0a:f8:12:fd:79:f9:83:e5:69:
fe:42:04:aa:77:93:cd:d9:4a:8d:00:96:b0:80:bd:f5:ce:f4:
04:7c:80:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:30:38 2025 by rpki-client