Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233362e302f32342d3234203d3e20323134363534.roa
File: 38322e3133392e3233362e302f32342d3234203d3e20323134363534.roa (raw, json)
Hash identifier: 0Jb2LNctPES+gV66+EblVe2nHx/sAKm6Lzsr55T6HLg=
Subject key identifier: 65:6A:F9:10:96:F1:83:BB:78:47:F5:E6:9C:F7:A4:87:64:CD:A1:80
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 6C4A7CB052E161BB8F5A03638395664F1D381DD6
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233362e302f32342d3234203d3e20323134363534.roa
Signing time: Thu 04 Sep 2025 10:40:03 +0000
ROA not before: Thu 04 Sep 2025 10:35:03 +0000
ROA not after: Thu 03 Sep 2026 10:40:03 +0000
asID: 214654
IP address blocks: 82.139.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:4a:7c:b0:52:e1:61:bb:8f:5a:03:63:83:95:66:4f:1d:38:1d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 4 10:35:03 2025 GMT
Not After : Sep 3 10:40:03 2026 GMT
Subject: CN=656AF91096F183BB7847F5E69CF7A48764CDA180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3b:13:23:1f:09:56:54:c0:7c:ee:97:ab:6b:
9d:0b:35:d2:6d:51:bf:88:41:c1:db:ff:41:3a:72:
a2:59:81:69:03:1a:6d:95:ba:75:a3:84:7d:90:63:
f9:e9:0e:7e:45:02:a3:e1:f8:23:ef:9a:f2:f5:20:
42:97:63:74:29:0e:db:51:06:3f:20:16:5f:ea:c7:
b9:d7:77:d5:c8:47:1c:90:76:9f:73:c1:fd:9f:6c:
a7:c0:7c:64:df:29:00:d5:e2:b3:da:8d:e0:4a:2d:
68:cf:22:89:a9:35:50:4f:6c:a3:38:bf:cd:f1:5d:
ac:95:60:34:8e:1d:7e:c7:23:0e:60:f1:9e:43:96:
4b:9d:cd:d0:15:ea:1a:03:63:a4:47:d2:b0:a8:5f:
08:45:4c:f4:22:df:6b:cb:93:47:f0:6c:a8:7b:31:
b4:44:21:dd:2b:ab:a0:e4:13:a9:28:e8:91:22:29:
f5:fa:88:68:66:4d:55:e0:bd:d3:68:29:71:83:3a:
be:dd:7f:50:ab:cc:e9:d4:25:86:6b:52:9b:e7:7d:
e8:96:9b:e2:d6:4c:77:8b:c8:ba:4b:25:c5:ae:33:
0e:43:aa:b2:27:1e:4f:6f:8d:0f:3e:ef:b3:82:3e:
f4:81:f5:95:7e:4f:7e:4f:66:0e:a1:0a:15:83:66:
2e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6A:F9:10:96:F1:83:BB:78:47:F5:E6:9C:F7:A4:87:64:CD:A1:80
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233362e302f32342d3234203d3e20323134363534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.236.0/24
Signature Algorithm: sha256WithRSAEncryption
50:58:54:a6:30:ac:70:ee:a7:1b:c4:60:fe:af:e5:77:c6:3d:
fc:cd:76:2c:92:6d:47:a2:63:b9:01:50:78:1b:57:52:ab:cc:
62:dd:63:7b:27:70:8a:ef:9f:3f:fd:cc:e6:55:e8:44:e4:ec:
60:4f:4c:1f:b9:05:af:58:15:3a:08:60:d6:15:bd:85:96:67:
73:b3:ec:d2:1b:c2:d0:e2:8b:e7:92:41:3b:55:59:5e:b8:59:
ca:d2:8d:97:c9:d2:75:72:c3:50:35:ce:e2:53:0b:f3:f9:d5:
39:bf:88:b7:a2:b8:48:03:9c:9f:4c:67:88:7c:0e:36:dd:70:
de:54:19:04:96:87:86:8c:79:fb:0d:07:66:e2:35:dd:7e:89:
94:30:a7:e2:2e:22:6e:3a:d6:4b:59:8e:1f:12:cc:fc:02:92:
a1:f7:37:cc:83:6d:d9:f3:5d:f1:96:34:92:6c:c6:1f:4b:2f:
9f:6e:e6:8a:04:98:7a:80:83:f9:9e:31:e8:4a:ed:70:68:4f:
83:17:4d:06:e7:c9:b4:45:0f:cd:bb:3e:f2:55:81:c5:71:15:
80:fd:95:a1:8d:44:c4:8d:4d:41:e5:cf:43:10:69:7e:06:b8:
41:6c:78:d5:0e:67:53:b8:cc:fc:6d:5b:43:e1:53:f0:dd:36:
5b:67:ce:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 04:02:24 2025 by rpki-client