Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38312e39322e302e302f32302d3234203d3e2038383230.roa
File: 38312e39322e302e302f32302d3234203d3e2038383230.roa (raw, json)
Hash identifier: NV44ygNtLWnq5Gi2GaSIKpctt772JbNBoTrVV6Y+jPU=
Subject key identifier: 2F:01:D3:15:29:35:2F:54:9D:B8:30:C0:0F:86:FE:45:C0:83:0F:B9
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 7F96A322F7C0049505F300425D0E5F6137E8A088
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38312e39322e302e302f32302d3234203d3e2038383230.roa
Signing time: Thu 04 Sep 2025 10:40:04 +0000
ROA not before: Thu 04 Sep 2025 10:35:04 +0000
ROA not after: Thu 03 Sep 2026 10:40:04 +0000
asID: 8820
IP address blocks: 81.92.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:96:a3:22:f7:c0:04:95:05:f3:00:42:5d:0e:5f:61:37:e8:a0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 4 10:35:04 2025 GMT
Not After : Sep 3 10:40:04 2026 GMT
Subject: CN=2F01D31529352F549DB830C00F86FE45C0830FB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bc:33:70:08:d4:c8:20:65:ff:12:1d:3d:05:
9f:ed:9e:39:e9:dc:6d:d2:e6:ad:2b:86:e3:30:5f:
09:c8:5d:02:69:58:91:73:0e:08:30:8d:4f:eb:44:
1f:24:5e:3f:88:5b:5f:00:56:c2:bf:cf:01:20:89:
7e:d1:dc:55:f9:61:aa:6c:48:7d:66:97:bf:62:a8:
f4:6c:12:fd:57:07:4a:b2:5b:be:7b:44:b8:23:e0:
87:60:cb:c1:eb:c0:57:5b:35:08:69:6e:49:bc:b9:
27:8d:2b:d7:df:89:58:78:97:a6:92:59:e7:a0:11:
e5:2e:81:7c:b4:bd:55:11:08:91:3b:d3:b2:3b:12:
fa:d4:c7:67:3f:88:ad:2b:5c:3a:73:39:b0:15:35:
6c:85:32:ce:44:29:87:01:f9:03:5c:04:13:36:7b:
9e:ca:56:f8:ae:6d:8b:89:2e:5a:38:44:e9:9a:a6:
7e:3a:f9:53:fc:4c:93:bb:b9:21:16:8b:0b:b6:2d:
e7:2b:ae:7a:cc:d7:b4:e8:63:a7:3c:b6:c1:04:29:
df:de:cd:ff:4a:ab:20:c0:72:69:ab:12:f2:b8:a5:
9c:1a:77:cd:e0:65:73:46:16:86:0e:22:ac:ca:b9:
3a:ad:2d:44:98:22:e6:4f:b6:58:96:fd:bf:f0:83:
60:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:01:D3:15:29:35:2F:54:9D:B8:30:C0:0F:86:FE:45:C0:83:0F:B9
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38312e39322e302e302f32302d3234203d3e2038383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.92.0.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:01:47:20:f4:c9:12:e8:62:94:b5:b9:7e:3a:76:63:52:29:
5e:6a:3e:63:c6:d5:26:9f:57:c0:9b:e8:3b:53:8e:8e:22:0f:
f9:cb:3a:48:9b:e9:12:61:9d:f4:cc:f9:a8:58:78:62:5e:87:
91:91:4f:99:84:b3:03:3e:4d:6b:ee:fe:e6:22:04:13:d1:b4:
1f:14:29:62:02:42:66:70:75:9c:07:9d:f1:73:37:57:3a:1c:
16:90:14:c1:88:41:5a:81:5b:97:80:b8:2c:7d:63:cc:4c:2e:
55:25:bf:6b:78:59:ab:52:91:bc:e1:28:a5:85:8f:5b:bc:cc:
b4:2b:0f:55:bb:22:07:3f:34:2f:98:0a:2b:22:d2:fb:60:f8:
67:84:a0:18:40:ba:a6:51:b7:ef:27:95:50:75:8e:71:5e:3e:
5a:76:69:7e:e6:ba:44:fd:23:e2:c4:b0:87:d8:b6:07:36:c1:
35:41:f0:66:78:ea:01:18:dc:6c:1a:6f:86:19:ce:f0:46:c2:
79:58:ea:7c:78:0c:59:45:93:f1:0a:df:1b:2d:d7:f6:5f:ca:
04:3d:ca:cf:77:94:9e:17:6e:49:64:87:be:c3:10:8c:77:1f:
4e:60:3a:2a:27:fb:5c:35:d0:0f:e5:2c:16:f2:d2:02:21:cd:
89:7c:fc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 03:54:46 2025 by rpki-client