Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233372e302f32342d3234203d3e203336353330.roa
File: 38322e3133392e3233372e302f32342d3234203d3e203336353330.roa (raw, json)
Hash identifier: DBZgN6l84Y4gX//xK6S+6sdjRAjBouu2atQIhSMSphQ=
Subject key identifier: 61:BA:2C:86:B7:5E:91:B8:4C:82:5E:14:8A:98:33:B5:7E:22:EE:86
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 04BE3CF0A5A751A2704AAADE41C4C75DEA8420D9
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233372e302f32342d3234203d3e203336353330.roa
Signing time: Thu 04 Sep 2025 10:40:07 +0000
ROA not before: Thu 04 Sep 2025 10:35:07 +0000
ROA not after: Thu 03 Sep 2026 10:40:07 +0000
asID: 36530
IP address blocks: 82.139.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:be:3c:f0:a5:a7:51:a2:70:4a:aa:de:41:c4:c7:5d:ea:84:20:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 4 10:35:07 2025 GMT
Not After : Sep 3 10:40:07 2026 GMT
Subject: CN=61BA2C86B75E91B84C825E148A9833B57E22EE86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:ea:b2:97:25:df:bb:c3:e6:f9:70:aa:61:
78:c6:86:38:91:bc:37:e9:c8:c0:8c:d3:5f:8d:36:
df:78:fe:76:8a:0a:e9:b3:89:99:ce:2e:f0:79:16:
05:60:51:91:94:69:6c:51:d3:bf:11:86:78:1f:32:
df:88:27:43:db:37:8e:96:18:e2:c9:0d:b0:2b:79:
14:69:b2:25:8c:9e:98:ac:0d:db:fe:2b:3c:ff:d6:
8c:e0:27:66:1b:52:de:21:8f:42:c3:2e:59:98:fd:
10:c9:1b:64:2d:97:ae:b5:c0:7d:d1:11:e5:f2:7b:
c2:7e:17:bb:86:df:bb:a4:31:8a:a9:ce:f4:a4:e6:
a9:e3:7a:17:96:3f:d1:03:c0:7d:4e:6e:a4:e6:90:
22:ee:23:17:88:a2:b2:e2:6d:7f:3a:27:a4:41:31:
70:06:e9:43:e9:c1:cd:bf:03:cd:ec:6c:37:39:e2:
5a:f8:32:8f:da:4f:13:0a:fb:6e:40:d2:cb:9d:ff:
3c:c4:51:2c:24:b9:67:d3:34:c0:5f:85:f4:a6:3b:
b2:17:c1:29:80:9f:11:8f:16:70:de:1e:a3:06:f5:
ac:27:f2:cc:93:71:4d:01:4b:0c:07:03:68:4a:27:
a8:9b:34:eb:0e:4f:a4:06:24:24:75:28:93:bd:12:
79:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BA:2C:86:B7:5E:91:B8:4C:82:5E:14:8A:98:33:B5:7E:22:EE:86
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233372e302f32342d3234203d3e203336353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.237.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:30:a6:b7:5a:c7:26:c7:e5:23:5e:91:4b:0e:d0:b0:7d:47:
5f:69:21:1e:49:6b:91:7d:4b:eb:ae:57:5b:79:22:9f:c1:98:
4b:41:09:0f:e9:1a:13:8e:f9:d7:da:53:89:87:fd:ab:8c:32:
16:d8:5e:1b:ae:2a:36:4b:91:a8:5d:af:2e:49:03:5b:3c:cc:
fa:91:0f:21:67:d9:2d:35:a4:df:80:05:db:d4:ba:93:05:94:
95:72:e9:03:03:e9:86:21:0b:77:64:c7:db:0b:24:22:86:cb:
cf:b8:1a:4f:7e:96:35:5b:62:0e:d6:5b:24:a3:fd:76:f8:8c:
1e:7a:28:67:96:2a:e8:f7:20:a5:59:cb:f0:dc:de:04:2b:70:
e7:5c:1f:4d:2d:44:26:07:a8:d9:1a:d7:e4:0d:60:45:a6:43:
07:a5:47:27:94:27:cc:13:fd:73:7f:e8:57:fa:e8:5f:48:56:
7e:0c:3f:ac:fe:e8:37:25:06:da:37:94:dc:87:d3:4c:9e:f6:
98:ec:e4:49:2f:92:21:af:21:eb:b9:b1:e7:68:97:d1:b8:1c:
ee:19:68:c9:17:2e:bd:ce:9a:8c:31:c9:76:57:a6:97:a6:bf:
e4:59:cb:9a:79:e1:3f:1b:4f:cf:07:83:68:a2:56:54:b2:4e:
ee:ee:b1:5a
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUBL488KWnUaJwSqreQcTHXeqEINkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNTA5MDQxMDM1MDdaFw0yNjA5MDMxMDQwMDdaMDMxMTAvBgNV
BAMTKDYxQkEyQzg2Qjc1RTkxQjg0QzgyNUUxNDhBOTgzM0I1N0UyMkVFODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYYeqylyXfu8Pm+XCqYXjGhjiR
vDfpyMCM01+NNt94/naKCumziZnOLvB5FgVgUZGUaWxR078RhngfMt+IJ0PbN46W
GOLJDbAreRRpsiWMnpisDdv+Kzz/1ozgJ2YbUt4hj0LDLlmY/RDJG2Qtl661wH3R
EeXye8J+F7uG37ukMYqpzvSk5qnjeheWP9EDwH1ObqTmkCLuIxeIorLibX86J6RB
MXAG6UPpwc2/A83sbDc54lr4Mo/aTxMK+25A0sud/zzEUSwkuWfTNMBfhfSmO7IX
wSmAnxGPFnDeHqMG9awn8syTcU0BSwwHA2hKJ6ibNOsOT6QGJCR1KJO9EnkrAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUYboshrdekbhMgl4UipgztX4i7oYwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUt
OWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1NGJjLzAvMzgzMjJlMzEzMzM5MmUzMjMz
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM2MzUzMzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
UovtMA0GCSqGSIb3DQEBCwUAA4IBAQCaMKa3Wscmx+UjXpFLDtCwfUdfaSEeSWuR
fUvrrldbeSKfwZhLQQkP6RoTjvnX2lOJh/2rjDIW2F4brio2S5GoXa8uSQNbPMz6
kQ8hZ9ktNaTfgAXb1LqTBZSVcukDA+mGIQt3ZMfbCyQihsvPuBpPfpY1W2IO1lsk
o/12+Iweeihnliro9yClWcvw3N4EK3DnXB9NLUQmB6jZGtfkDWBFpkMHpUcnlCfM
E/1zf+hX+uhfSFZ+DD+s/ug3JQbaN5Tch9NMnvaY7ORJL5IhryHrubHnaJfRuBzu
GWjJFy69zpqMMcl2V6aXpr/kWcuaeeE/G0/PB4NoolZUsk7u7rFa
-----END CERTIFICATE-----
Generated at Sun Sep 7 03:54:44 2025 by rpki-client