Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233382e302f32342d3234203d3e20323134363534.roa
File: 38322e3133392e3233382e302f32342d3234203d3e20323134363534.roa (raw, json)
Hash identifier: mG8N2i7OWswvfXEiKd3e6mad258UtbOzcMrAnnHtiME=
Subject key identifier: B6:ED:44:01:2A:15:12:91:3C:15:C2:F7:18:2F:53:E7:3E:6A:04:50
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 042EDB76B402BB47AFC2244CB4DAD39B27C52DC4
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233382e302f32342d3234203d3e20323134363534.roa
Signing time: Thu 04 Sep 2025 10:40:06 +0000
ROA not before: Thu 04 Sep 2025 10:35:06 +0000
ROA not after: Thu 03 Sep 2026 10:40:06 +0000
asID: 214654
IP address blocks: 82.139.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:2e:db:76:b4:02:bb:47:af:c2:24:4c:b4:da:d3:9b:27:c5:2d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 4 10:35:06 2025 GMT
Not After : Sep 3 10:40:06 2026 GMT
Subject: CN=B6ED44012A1512913C15C2F7182F53E73E6A0450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:47:4a:40:29:9c:9c:fd:99:b1:22:c8:89:23:
1c:e4:4d:af:66:15:77:5b:fa:19:40:b3:9b:b5:6c:
91:66:3d:3b:1a:35:fe:16:de:0b:c3:ff:b9:b8:a0:
56:a9:b3:b9:8f:25:43:d4:66:6a:f6:17:2f:7c:6a:
ef:84:31:0e:9f:66:f8:0b:f5:8b:c9:41:3a:06:ac:
e5:c9:64:96:db:04:94:d6:b9:cb:56:d6:c7:4e:8a:
c9:76:47:8c:9f:37:8a:2f:5a:26:ae:98:61:a6:da:
a1:15:cc:64:80:1c:4b:c7:55:b3:a7:c2:fd:ab:16:
d9:36:e2:b5:4e:0e:f0:8b:bb:2e:a5:fa:67:c5:2e:
2d:2b:4c:6e:80:5d:7e:89:b8:9c:2e:10:1f:8b:f2:
b1:74:a7:5f:ec:f6:b7:98:38:bd:71:c8:7b:fa:61:
4c:a9:90:db:ae:07:ba:3b:41:f1:c2:1d:73:22:9e:
5c:d2:2b:cd:66:24:1c:34:6c:54:25:1a:ed:7f:13:
7a:5d:0e:8b:ce:a4:86:2a:fa:38:b4:2d:6f:b7:d6:
1d:89:b4:32:61:e9:58:fb:09:4f:4e:13:0a:55:62:
08:6a:c4:9d:12:a2:b4:7c:94:82:aa:49:6b:53:94:
07:dd:44:c4:51:d5:83:c5:d3:3d:e8:07:96:98:45:
27:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:ED:44:01:2A:15:12:91:3C:15:C2:F7:18:2F:53:E7:3E:6A:04:50
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233382e302f32342d3234203d3e20323134363534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.238.0/24
Signature Algorithm: sha256WithRSAEncryption
06:df:e2:c0:69:10:3c:74:a1:c5:ec:62:bd:f6:3a:e2:9b:03:
c7:af:da:3c:79:d6:9a:62:61:53:9e:9c:35:49:3b:42:6c:ec:
c5:6f:bf:52:e4:df:9c:e7:07:45:b5:f2:ad:fc:cd:55:8f:07:
82:d3:0a:70:1e:9f:1a:b6:18:fd:b4:d9:82:6a:a8:e2:04:18:
bb:39:4a:18:01:c3:19:25:55:fa:2f:62:e9:bc:51:b5:69:77:
3a:b6:01:c7:c2:a3:37:4b:7c:b8:fe:84:9b:8d:b7:d0:c3:de:
fe:90:50:53:45:d5:27:c6:06:e5:86:32:98:ad:82:55:91:c3:
96:6d:ce:e9:f1:0d:da:c4:04:9e:fe:76:4f:39:7f:a7:bb:53:
bf:6e:d3:d6:0d:42:5c:f8:89:e9:bd:23:a6:f5:8e:25:8e:04:
75:71:5b:b1:db:73:55:c7:09:79:fc:00:c9:79:a8:23:86:62:
38:79:da:74:76:d2:53:c9:16:72:b6:1b:69:bb:09:ca:2f:6b:
f0:7a:88:16:b3:73:9e:e5:0b:c9:a9:7c:df:6a:df:85:36:eb:
6d:8a:7c:5e:0e:80:82:bd:16:92:aa:8f:ca:b7:a6:43:0f:1b:
20:64:8e:5a:91:77:05:0c:8a:c0:13:84:b2:01:e7:68:c2:3f:
d0:ba:4e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 03:55:32 2025 by rpki-client