Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233372e302f32342d3234203d3e20323134363534.roa
File: 38322e3133392e3233372e302f32342d3234203d3e20323134363534.roa (raw, json)
Hash identifier: dzpYqp2lIhUbzd6xE8RsOIoron5JJU4JLhSfkrHbY2k=
Subject key identifier: 13:9B:02:B1:C7:A8:49:A5:E4:46:B9:58:A2:85:40:49:82:79:5F:58
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 55875106EB26CB6167D6E3ED333DF7D368718D93
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233372e302f32342d3234203d3e20323134363534.roa
Signing time: Thu 04 Sep 2025 10:40:06 +0000
ROA not before: Thu 04 Sep 2025 10:35:06 +0000
ROA not after: Thu 03 Sep 2026 10:40:06 +0000
asID: 214654
IP address blocks: 82.139.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:87:51:06:eb:26:cb:61:67:d6:e3:ed:33:3d:f7:d3:68:71:8d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 4 10:35:06 2025 GMT
Not After : Sep 3 10:40:06 2026 GMT
Subject: CN=139B02B1C7A849A5E446B958A285404982795F58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:ad:63:00:fd:ba:e5:a3:83:ed:38:7f:67:
f0:c9:c3:7d:7a:09:7b:dc:81:af:50:5b:8e:45:91:
b8:5a:06:5f:82:c6:cc:be:8a:a5:0a:fd:5f:d6:02:
06:d3:db:35:c5:ad:56:01:7a:cd:91:93:d7:ae:f1:
6d:e4:15:a5:8e:b0:7d:3c:b4:77:84:7a:45:08:ff:
24:9e:11:f3:8c:52:54:7e:07:6b:f8:74:2c:d9:e5:
71:fe:11:c7:65:07:d9:f3:52:b2:e1:e9:96:45:9b:
54:db:a0:18:c0:65:63:f2:b4:d2:03:b0:cb:e8:62:
87:84:db:e1:40:a4:17:3a:1e:73:c4:a5:72:70:73:
f0:78:a0:4a:4a:21:5e:07:cd:d7:91:d9:70:ce:9a:
6b:40:a1:fe:0a:28:82:7a:11:fe:6c:60:de:5d:32:
a8:90:85:4c:aa:ae:0a:9d:bd:89:2f:b8:ce:23:ff:
d7:a2:68:7d:2d:7d:70:d4:e4:fd:05:a6:75:76:a4:
03:43:eb:2e:91:47:14:8c:ca:f8:56:29:71:49:c7:
5f:2a:d6:19:0b:9c:d7:0c:51:63:13:e3:1c:f5:37:
d9:73:be:d9:21:6e:a1:93:c1:e4:3c:e4:08:97:6e:
e0:25:1d:8d:dd:3b:5e:a9:88:19:fb:56:61:e2:0e:
e2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9B:02:B1:C7:A8:49:A5:E4:46:B9:58:A2:85:40:49:82:79:5F:58
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233372e302f32342d3234203d3e20323134363534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.237.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e7:93:4d:e1:81:68:9e:b9:73:86:4d:c5:15:38:7b:c3:49:
62:01:53:4f:c2:83:80:43:cf:49:c5:30:77:6f:ea:7e:dd:ef:
fa:18:b1:68:6d:11:6d:b0:a6:58:c4:15:0f:6f:84:1e:ce:22:
0c:ba:88:67:67:19:48:4f:5e:d1:53:4d:5d:6e:c5:5c:13:34:
c6:b4:78:f1:43:85:fc:8f:7c:ec:d7:02:73:59:50:07:82:5e:
fd:28:84:1c:bf:9a:eb:f4:12:14:da:75:e6:48:59:a9:4e:18:
0c:b6:0b:c9:75:1d:6a:48:06:fa:56:88:23:81:1b:38:b4:c8:
25:a5:bc:e2:ce:05:db:74:20:85:b4:46:4e:07:0f:da:03:00:
dd:e1:42:3c:38:95:31:57:29:05:41:19:39:af:91:4a:07:ed:
8e:7a:7c:b5:33:c9:3e:89:93:99:46:c5:ac:b2:ae:25:06:04:
01:66:8e:a0:52:d1:a3:69:c1:e1:07:23:13:87:33:17:81:0a:
d5:cc:2b:a3:2a:5d:26:bc:f9:8b:e6:89:ba:76:ca:1d:66:98:
87:af:f3:7a:d4:c1:37:ee:f0:43:17:4b:f7:a6:f4:94:86:45:
a0:4f:96:06:f1:b1:1b:21:e0:81:d2:13:c0:ec:73:29:bd:53:
31:e2:f5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 03:55:32 2025 by rpki-client