Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233332e302f32342d3234203d3e203336353330.roa
File: 38322e3133392e3233332e302f32342d3234203d3e203336353330.roa (raw, json)
Hash identifier: 576ZFGyyv6M10LFHChCxukvsZlbu5YJSRAqqWSKCY8M=
Subject key identifier: 96:76:B1:40:45:D4:04:34:AB:EE:12:BE:0B:26:19:B9:B8:E0:86:D0
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 68A2DDB48EB5F9AC2D5D0022BF7BFB5061DDD2BA
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233332e302f32342d3234203d3e203336353330.roa
Signing time: Thu 04 Sep 2025 10:40:07 +0000
ROA not before: Thu 04 Sep 2025 10:35:07 +0000
ROA not after: Thu 03 Sep 2026 10:40:07 +0000
asID: 36530
IP address blocks: 82.139.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:a2:dd:b4:8e:b5:f9:ac:2d:5d:00:22:bf:7b:fb:50:61:dd:d2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 4 10:35:07 2025 GMT
Not After : Sep 3 10:40:07 2026 GMT
Subject: CN=9676B14045D40434ABEE12BE0B2619B9B8E086D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:df:f8:7b:98:01:9d:f6:ee:70:8e:bb:44:
5e:35:1f:2f:f7:3d:bd:f6:e2:79:80:1f:03:49:56:
0d:d2:09:1e:fd:b2:a9:83:d1:67:ee:db:af:2d:2c:
be:28:49:7c:a8:a8:b3:3a:76:cc:e6:95:ab:d7:d0:
26:3c:6d:54:88:63:2e:ac:59:44:2c:87:38:4f:ff:
47:a0:88:9b:92:79:44:a8:c4:98:2f:8d:7e:05:91:
d5:1a:5d:52:36:ab:30:c3:12:24:64:f6:f8:61:fb:
05:08:e0:af:14:0a:62:8d:1f:b3:a5:06:ef:be:2c:
fc:07:1b:9f:73:bb:d3:52:46:76:c3:f5:f9:8a:06:
c7:ad:a8:72:a5:0a:d3:42:8b:f1:59:70:9b:91:18:
7f:51:76:d9:c9:29:c3:38:d2:6d:50:0f:03:45:d5:
e9:48:b4:f9:f7:62:a2:6a:28:ba:df:f6:61:e5:3a:
2d:15:e5:65:bb:c9:99:36:b1:85:1a:53:ab:d9:91:
cc:cd:f9:3e:82:80:12:6e:25:d6:a1:76:a0:5d:e6:
14:32:99:cc:4e:a4:c1:3d:25:95:87:05:6f:e8:95:
c5:b8:c0:13:36:a7:7f:12:1c:d0:17:0d:65:6b:7c:
e9:b4:23:32:4f:10:e2:6c:64:4a:15:72:94:42:e4:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:76:B1:40:45:D4:04:34:AB:EE:12:BE:0B:26:19:B9:B8:E0:86:D0
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233332e302f32342d3234203d3e203336353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.233.0/24
Signature Algorithm: sha256WithRSAEncryption
83:0f:94:86:8f:0e:48:0a:96:a8:69:8e:97:ab:b2:16:88:93:
44:1a:8f:47:72:1b:7c:7d:e7:a4:44:27:b7:a2:c3:a5:b6:86:
c1:88:f5:6c:88:e4:b0:19:f2:99:22:79:fe:6d:38:41:06:a6:
aa:40:14:fc:3b:2b:c3:1c:ec:8c:4d:5a:78:75:60:27:54:b5:
77:72:e5:af:c6:a5:42:d7:71:c5:a7:6b:36:c3:2a:cd:41:70:
90:ce:40:f0:cb:75:67:72:a0:7b:98:a9:fd:89:4f:2d:96:65:
04:74:f1:2d:ab:9b:55:ac:08:83:f7:f1:64:7e:c6:c6:e9:4d:
0c:13:23:c3:20:a6:33:66:4f:6a:33:45:61:35:fe:bb:ad:28:
3a:d3:41:e8:25:65:73:36:d0:7e:80:29:10:c3:e9:6a:56:88:
60:16:f2:6f:47:36:3a:87:82:96:6f:47:1a:6e:5c:ce:8a:9e:
3a:ad:9b:9c:1f:86:e5:6c:d6:e8:8b:0c:73:6b:5e:a9:b2:04:
87:7e:84:5a:1b:a6:b1:be:56:0d:e9:7e:b7:e4:a7:55:7a:1f:
aa:d1:c7:9c:16:d9:b3:0a:98:5b:51:f0:61:21:25:c4:85:bc:
99:55:c0:0f:a4:f0:ff:71:e7:87:fc:d8:73:43:99:c8:a3:11:
36:50:b3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 03:54:44 2025 by rpki-client