Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3230382e302f32322d3234203d3e20383334.roa
File: 38322e3133392e3230382e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: IgL96hjMtkvTpmW2KVU5Z64yRi7uZyn9rsS6kKvpC5U=
Subject key identifier: 60:E9:27:BC:3F:54:C0:20:18:07:69:0A:16:EB:4E:86:C2:57:DF:A5
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 7DF42627F6AA36A0CB091A9B3D4A0ED4B67BF6F8
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3230382e302f32322d3234203d3e20383334.roa
Signing time: Wed 17 Sep 2025 11:51:32 +0000
ROA not before: Wed 17 Sep 2025 11:46:32 +0000
ROA not after: Wed 16 Sep 2026 11:51:32 +0000
asID: 834
IP address blocks: 82.139.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 14:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:f4:26:27:f6:aa:36:a0:cb:09:1a:9b:3d:4a:0e:d4:b6:7b:f6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 17 11:46:32 2025 GMT
Not After : Sep 16 11:51:32 2026 GMT
Subject: CN=60E927BC3F54C0201807690A16EB4E86C257DFA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:05:fb:58:51:5b:eb:83:cf:d3:de:da:13:58:
64:de:86:97:4a:13:e8:1a:15:91:a4:9d:21:37:bf:
a1:2f:8c:d8:d6:6c:2a:6f:76:cd:58:63:57:60:3f:
65:63:e9:ef:0e:ac:09:46:06:07:24:7d:ab:03:c1:
f2:ec:88:27:fa:39:40:00:34:42:21:c4:81:58:53:
82:8b:5b:11:20:db:64:ca:2b:be:bc:19:00:15:aa:
2b:b7:84:1b:d4:02:48:61:b1:a6:64:d9:ae:ae:2b:
f9:42:dc:21:86:cd:4b:a6:7e:ab:01:e3:05:4a:24:
97:5b:ff:ce:e9:aa:e6:ad:27:71:47:6e:44:0a:b8:
9e:1d:ef:d0:07:ca:2e:75:7c:66:81:e2:7f:17:0b:
c5:8e:df:71:3a:fe:a1:d1:b0:87:da:0f:3c:17:9e:
39:8d:8b:ed:47:79:62:b3:65:03:e1:6a:9c:d5:c6:
69:ae:9a:93:ad:30:c2:eb:f6:ab:ab:50:32:b3:ef:
61:5c:42:80:4f:af:a4:62:2b:52:e6:d3:9e:e4:94:
10:22:0b:76:9c:67:ec:d5:3c:92:9b:31:80:06:79:
a1:2e:cd:f0:a6:fe:7c:b3:36:93:da:40:7d:75:b9:
b5:0f:ee:52:a7:29:3a:90:3a:a4:8d:dc:fe:2f:f9:
f6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E9:27:BC:3F:54:C0:20:18:07:69:0A:16:EB:4E:86:C2:57:DF:A5
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3230382e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.208.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:f3:71:e1:ad:88:8c:2d:41:93:41:74:20:ad:f5:d0:0e:48:
5b:80:08:2f:bb:f7:06:8e:27:ba:0b:a8:ce:43:05:bf:c4:33:
5a:d4:f8:70:59:a0:5e:e5:ea:fd:07:dd:98:ac:de:e3:ef:dc:
10:6f:dd:74:fd:cd:ac:c1:83:05:04:ba:d3:10:60:fe:76:b1:
d7:96:36:8f:d4:99:ee:2b:3a:f3:d8:4c:f3:55:4f:3d:9a:df:
e1:91:b3:62:bc:2e:33:62:7f:06:19:c3:5e:66:19:7d:f5:c2:
5e:a5:21:4f:f4:a5:49:be:35:85:ab:6f:0e:90:bb:96:c2:44:
e5:be:f3:07:4f:23:cf:c7:6a:60:67:60:05:7c:d8:9d:03:3a:
78:f4:25:0e:3a:9c:af:37:aa:fa:5b:e7:c7:c4:4d:58:e5:fc:
c5:25:8d:98:c5:41:86:db:f5:10:2c:be:69:7c:f2:4d:bf:dd:
89:46:ab:e8:71:6e:8f:bf:ea:e2:1b:a5:a6:df:90:66:0f:9a:
73:29:58:cc:f6:f6:de:7d:3c:ca:d9:7b:33:35:47:86:23:ec:
be:8c:7a:46:c0:53:1e:71:b0:f4:9b:9c:9e:2b:ce:96:e3:84:
3d:a2:b8:64:8b:44:8f:e6:0e:62:8e:db:f1:d3:05:91:89:19:
d0:0f:4d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 06:38:51 2025 by rpki-client