Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/326130313a3137303a313030303a3a2f33362d3438203d3e2038383230.roa
File: 326130313a3137303a313030303a3a2f33362d3438203d3e2038383230.roa (raw, json)
Hash identifier: Z7SaYOX7DR4e/BqTODyNuOqmX01XCUwak0/aKb1mV6g=
Subject key identifier: 9A:85:98:85:1E:2F:6A:05:0B:BE:E8:AC:82:BC:92:F8:01:B0:4A:6F
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 7041DC0E91E7552589D10C639F9A5E80B2D5F1E1
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/326130313a3137303a313030303a3a2f33362d3438203d3e2038383230.roa
Signing time: Thu 04 Sep 2025 10:40:04 +0000
ROA not before: Thu 04 Sep 2025 10:35:04 +0000
ROA not after: Thu 03 Sep 2026 10:40:04 +0000
asID: 8820
IP address blocks: 2a01:170:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:41:dc:0e:91:e7:55:25:89:d1:0c:63:9f:9a:5e:80:b2:d5:f1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 4 10:35:04 2025 GMT
Not After : Sep 3 10:40:04 2026 GMT
Subject: CN=9A8598851E2F6A050BBEE8AC82BC92F801B04A6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:85:e5:8a:de:28:3e:90:ac:27:72:fb:d8:
ea:e7:3c:99:d7:34:df:5f:1d:d3:10:fb:b8:68:d6:
eb:e7:57:dd:47:36:54:97:42:a0:81:c4:be:f6:5c:
5d:f0:e1:2c:8a:1e:73:de:c3:02:c8:9e:2d:09:12:
da:19:a7:6c:1c:6d:3a:ce:65:67:84:7b:d0:fe:91:
7f:8d:9e:1d:a2:e9:b1:1f:09:49:6d:47:90:ff:5c:
cb:f3:5c:bf:63:2f:7a:25:47:89:25:f7:8e:34:43:
8d:95:9c:80:0f:88:10:9d:22:5c:4b:62:2a:8d:19:
b4:a3:b5:69:05:e1:9f:5d:98:fb:32:c2:be:8f:fb:
27:ff:c2:38:68:f5:25:5e:c1:ad:3d:82:ed:0e:34:
39:d5:ae:0a:c4:0d:20:e1:39:d0:81:c6:e7:da:92:
2f:0a:83:7c:97:69:e0:5d:41:e4:df:d8:6d:fa:b4:
8a:fb:f0:01:b5:38:2c:cf:77:b8:00:f8:a4:dd:9f:
6d:ef:52:15:3a:ca:ef:02:86:e5:c2:b0:59:07:28:
11:dc:80:2f:ba:3e:49:17:77:82:9b:ed:8a:5f:03:
93:2a:c3:1e:50:dc:70:41:c5:75:7f:73:db:fb:65:
52:6f:73:36:c3:fa:f6:c6:22:13:75:9c:80:56:bb:
14:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:85:98:85:1E:2F:6A:05:0B:BE:E8:AC:82:BC:92:F8:01:B0:4A:6F
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/326130313a3137303a313030303a3a2f33362d3438203d3e2038383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:170:1000::/36
Signature Algorithm: sha256WithRSAEncryption
3b:73:fe:25:74:11:e7:78:57:f3:db:4f:d0:00:bd:1a:cb:36:
d9:a2:02:92:45:a3:e2:55:d2:0f:36:a5:27:2c:67:dd:10:5d:
26:3a:08:ec:a0:20:65:13:01:f7:e1:5b:11:23:65:b3:16:ef:
b8:65:0d:e3:e4:7e:96:71:c3:6e:36:27:06:50:9b:7a:a0:5c:
4e:0d:93:aa:aa:50:14:34:24:a7:14:c7:f5:80:f1:bf:93:5c:
d1:e5:63:66:70:08:de:33:12:c5:4b:31:db:ff:bf:1e:8c:9f:
a3:c9:5f:4f:d4:27:20:9e:49:85:26:d7:5c:70:cf:a6:8c:47:
02:89:d5:a4:af:60:b0:4f:58:26:59:11:05:41:35:b7:fd:77:
7c:28:99:3d:ca:2d:df:bf:36:94:c8:8f:a3:4b:41:52:ea:d1:
30:8b:c9:ee:bf:7c:6b:2a:3c:20:4a:af:6e:49:df:92:2d:78:
2d:d1:a8:4a:af:68:dc:3b:b8:a7:2e:51:a4:28:85:9c:ee:5d:
ff:9e:38:62:33:d3:89:3b:dd:d1:1c:1a:ad:76:9d:54:80:1f:
b6:f0:e6:28:9a:e7:fd:37:b1:da:e9:ee:cd:ae:8c:e8:5b:be:
3e:af:31:37:37:8c:40:4a:f7:ae:f6:82:88:f9:94:e3:d3:90:
5d:67:df:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 03:53:01 2025 by rpki-client