Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233382e302f32342d3234203d3e203336353330.roa
File: 38322e3133392e3233382e302f32342d3234203d3e203336353330.roa (raw, json)
Hash identifier: J23ZIleFtuz04WVK6x6GjPLOsDlXHHPm3DGflRodM2I=
Subject key identifier: CC:52:64:F0:E5:97:41:89:31:1F:15:A5:7D:76:A8:66:F2:16:90:DD
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 72125F6F87D73848E4735165BA7407C3E010966F
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233382e302f32342d3234203d3e203336353330.roa
Signing time: Thu 04 Sep 2025 10:40:04 +0000
ROA not before: Thu 04 Sep 2025 10:35:04 +0000
ROA not after: Thu 03 Sep 2026 10:40:04 +0000
asID: 36530
IP address blocks: 82.139.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:12:5f:6f:87:d7:38:48:e4:73:51:65:ba:74:07:c3:e0:10:96:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 4 10:35:04 2025 GMT
Not After : Sep 3 10:40:04 2026 GMT
Subject: CN=CC5264F0E5974189311F15A57D76A866F21690DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5d:fc:d8:ab:ce:10:27:af:05:d8:b8:1b:d0:
66:95:8a:c5:9d:7b:0e:92:b0:46:cd:0a:cc:38:b0:
7e:02:11:b4:76:68:82:2d:ef:6b:4d:28:f6:87:62:
23:b5:71:c5:f7:9b:01:52:9a:73:c2:63:62:a9:60:
59:ac:2c:45:b7:cc:be:e7:c6:ea:5b:8f:70:e3:ac:
69:fb:86:2f:89:a3:7a:8d:b3:1c:78:54:3f:2e:74:
d6:e9:9a:3c:5e:db:a8:6d:ec:22:6b:71:d1:cb:76:
a8:74:51:b0:f9:f1:22:cb:a5:1b:43:58:1a:f0:a0:
3a:0e:e3:09:73:9c:8f:68:2d:3d:88:fe:c5:85:0c:
91:fc:fd:7d:a4:7c:9f:d3:ff:fb:45:c8:7e:44:89:
8c:a3:4d:6c:23:ab:66:94:b2:27:15:fd:35:a8:6d:
f4:de:47:2d:33:b3:a4:32:ba:49:0b:13:b5:71:4c:
8b:6d:dc:f7:3d:09:53:02:ca:b2:bc:16:e5:4f:97:
4f:90:44:55:af:0f:5a:99:b5:d0:73:27:19:18:2a:
b1:8f:84:10:94:f2:96:e1:1c:31:28:d7:ee:c7:12:
6a:f8:f6:08:e6:04:54:9b:95:ca:90:e4:74:b2:b3:
8f:aa:c2:b7:40:90:b2:99:ff:f0:d3:f7:df:40:85:
e5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:52:64:F0:E5:97:41:89:31:1F:15:A5:7D:76:A8:66:F2:16:90:DD
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233382e302f32342d3234203d3e203336353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.238.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c8:38:13:8c:40:67:84:54:60:e9:89:05:0c:db:f6:3a:a9:
71:5e:e0:6b:73:15:ee:ea:2f:fd:9b:7d:b7:f2:8f:1e:55:39:
d1:e4:f4:4b:37:f7:fb:85:ae:63:1c:77:79:6f:1e:e6:14:e8:
29:ef:7b:8b:98:af:d2:22:13:12:75:22:d6:2d:e8:34:b1:c4:
31:e9:70:8d:5c:8b:f9:76:67:f9:00:e4:22:52:07:b2:63:54:
f6:14:5f:e7:96:83:2b:f2:11:77:e1:a3:73:4e:ed:0c:68:74:
d2:ca:19:b1:24:c6:4f:1f:1b:58:b8:93:50:f7:d0:02:1f:7e:
a9:2b:4f:d7:34:08:40:23:f3:0f:64:33:3e:fb:1c:71:4d:6f:
f0:6a:3d:cc:01:c3:36:36:0e:3c:50:79:e9:86:f1:07:a7:d4:
d2:da:38:a3:58:2c:3c:ca:81:41:57:9d:0f:2f:f7:b0:00:d9:
ed:8a:c9:bc:35:ec:0e:d3:f6:79:e8:8d:7f:9c:f6:c2:b1:c3:
44:35:39:f0:10:fd:47:a3:8a:fe:76:b9:0a:05:99:92:0f:3c:
d1:07:66:a9:20:bc:68:d5:40:79:91:ca:7e:4e:0a:be:0b:11:
a9:2a:11:2f:f9:da:de:cf:78:0a:96:fd:43:9b:51:27:7b:60:
7f:25:75:d6
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUchJfb4fXOEjkc1FlunQHw+AQlm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNTA5MDQxMDM1MDRaFw0yNjA5MDMxMDQwMDRaMDMxMTAvBgNV
BAMTKENDNTI2NEYwRTU5NzQxODkzMTFGMTVBNTdENzZBODY2RjIxNjkwREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKXfzYq84QJ68F2Lgb0GaVisWd
ew6SsEbNCsw4sH4CEbR2aIIt72tNKPaHYiO1ccX3mwFSmnPCY2KpYFmsLEW3zL7n
xupbj3DjrGn7hi+Jo3qNsxx4VD8udNbpmjxe26ht7CJrcdHLdqh0UbD58SLLpRtD
WBrwoDoO4wlznI9oLT2I/sWFDJH8/X2kfJ/T//tFyH5EiYyjTWwjq2aUsicV/TWo
bfTeRy0zs6QyukkLE7VxTItt3Pc9CVMCyrK8FuVPl0+QRFWvD1qZtdBzJxkYKrGP
hBCU8pbhHDEo1+7HEmr49gjmBFSblcqQ5HSys4+qwrdAkLKZ//DT999AheXdAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUzFJk8OWXQYkxHxWlfXaoZvIWkN0wHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUt
OWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1NGJjLzAvMzgzMjJlMzEzMzM5MmUzMjMz
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM2MzUzMzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
UovuMA0GCSqGSIb3DQEBCwUAA4IBAQAkyDgTjEBnhFRg6YkFDNv2OqlxXuBrcxXu
6i/9m3238o8eVTnR5PRLN/f7ha5jHHd5bx7mFOgp73uLmK/SIhMSdSLWLeg0scQx
6XCNXIv5dmf5AOQiUgeyY1T2FF/nloMr8hF34aNzTu0MaHTSyhmxJMZPHxtYuJNQ
99ACH36pK0/XNAhAI/MPZDM++xxxTW/waj3MAcM2Ng48UHnphvEHp9TS2jijWCw8
yoFBV50PL/ewANntism8NewO0/Z56I1/nPbCscNENTnwEP1Ho4r+drkKBZmSDzzR
B2apILxo1UB5kcp+Tgq+CxGpKhEv+drez3gKlv1Dm1Ene2B/JXXW
-----END CERTIFICATE-----
Generated at Sun Sep 7 04:02:25 2025 by rpki-client