Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/3231322e362e34382e302f32342d3234203d3e203136353039.roa
File: 3231322e362e34382e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: dFw6eMiHdkNiTVAeBFv17UaWeglb2wjbxw3SzLNr1IQ=
Subject key identifier: 85:4D:11:73:93:A4:7A:D8:7D:F7:CA:C5:A7:32:F0:97:A1:B3:49:37
Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial: 29162C9107025174085D1BBCC92846EC1DC173E5
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/3231322e362e34382e302f32342d3234203d3e203136353039.roa
Signing time: Wed 06 Aug 2025 14:58:40 +0000
ROA not before: Wed 06 Aug 2025 14:53:40 +0000
ROA not after: Wed 05 Aug 2026 14:58:40 +0000
asID: 16509
IP address blocks: 212.6.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 02:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:16:2c:91:07:02:51:74:08:5d:1b:bc:c9:28:46:ec:1d:c1:73:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
Validity
Not Before: Aug 6 14:53:40 2025 GMT
Not After : Aug 5 14:58:40 2026 GMT
Subject: CN=854D117393A47AD87DF7CAC5A732F097A1B34937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:c8:7c:c8:ca:aa:f8:1b:97:4c:b5:be:00:
9f:3b:38:11:f6:cc:45:2e:7a:40:5c:81:78:18:43:
18:76:dc:b4:e2:7e:64:a8:18:1e:30:0b:a1:84:07:
13:2d:67:3d:9c:f6:95:36:be:d2:4b:7b:20:c3:19:
c7:f4:7f:ab:d2:72:fd:3e:11:fc:8f:a1:a7:84:c9:
3d:34:05:48:c4:71:89:f7:89:77:7d:81:c7:d0:d6:
05:cb:1b:25:df:89:cf:b2:68:ca:e1:77:bc:dd:52:
38:48:1c:4a:ff:2d:34:b7:d5:72:28:1e:a7:3e:50:
f5:90:e7:fb:88:a2:88:43:93:99:7c:8e:7a:5f:0e:
d3:19:8c:28:5e:23:02:ca:11:59:ae:e4:1a:bb:d1:
a4:ed:4b:6c:a7:07:41:66:02:58:be:44:c7:f1:3a:
22:c5:45:7c:a9:ef:dd:71:7a:1c:3d:87:9b:bf:81:
87:b4:4a:e1:2b:e5:56:65:30:d8:f9:bd:6b:d0:f9:
90:8a:37:a6:38:ea:56:16:b7:1c:70:ad:dd:19:f5:
a0:1e:03:92:91:1d:9c:94:06:94:14:f1:a3:22:ba:
bd:fa:52:4d:92:d9:06:d3:81:84:2d:47:22:a0:80:
34:83:a3:c5:ec:72:65:c0:44:ff:db:dd:e6:d3:ad:
1a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4D:11:73:93:A4:7A:D8:7D:F7:CA:C5:A7:32:F0:97:A1:B3:49:37
X509v3 Authority Key Identifier:
keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/3231322e362e34382e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.48.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:2b:c9:c4:6f:09:f5:dd:dc:72:35:f4:de:f2:88:92:e2:76:
91:b3:be:57:7d:50:04:58:80:4f:76:3e:1a:bd:68:f8:04:3b:
5e:aa:22:a0:b9:5f:13:f3:41:dc:c3:4a:11:44:5a:e1:e0:63:
25:79:9b:a4:7a:db:67:19:77:ca:03:62:1f:e9:17:ce:04:f6:
bf:bc:fe:69:89:32:61:7e:ed:fc:1e:78:e0:04:aa:c0:d2:7f:
4c:e1:6f:29:0a:5d:02:3a:47:a5:59:a7:a4:59:51:a7:44:77:
f9:34:ab:31:ac:66:ae:85:06:2c:e1:0a:38:e6:75:53:71:3b:
9b:2f:fb:be:f0:4a:c5:50:ee:9c:6b:8d:e9:7e:47:62:e5:6d:
fc:7e:a1:92:e0:6c:5b:68:91:7d:c0:ee:88:1e:8e:65:85:85:
84:33:85:17:b3:39:d2:1d:0b:cb:6a:e7:ab:e4:1a:0b:2c:c9:
0a:c9:17:25:e6:60:bc:ac:50:39:f5:57:63:09:f4:96:a9:49:
5c:1c:57:09:ef:d0:eb:4e:78:93:fd:8a:ca:a7:ff:27:a5:33:
16:75:e8:68:67:4f:a5:bf:a2:a0:d8:5a:b9:d4:c3:e7:e1:89:
65:fa:4c:7e:71:8c:86:d8:ed:b4:24:5b:cb:c6:42:c1:44:57:
84:3e:8a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:50:09 2025 by rpki-client