Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a653430333a3a2f33322d3332203d3e20323135343632.roa
File: 326131333a653430333a3a2f33322d3332203d3e20323135343632.roa (raw, json)
Hash identifier: 0f4WAabP3xZvH36q2OTX1i3if9moXyHYYV6+CfUNtlk=
Subject key identifier: F0:61:CA:5E:DE:93:2E:41:B8:35:B1:9B:45:71:B0:93:63:34:A2:C9
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 4BF0406D836D11F21052359F489C142A68030158
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a653430333a3a2f33322d3332203d3e20323135343632.roa
Signing time: Mon 10 Mar 2025 18:38:29 +0000
ROA not before: Mon 10 Mar 2025 18:33:29 +0000
ROA not after: Mon 09 Mar 2026 18:38:29 +0000
asID: 215462
IP address blocks: 2a13:e403::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 03:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:f0:40:6d:83:6d:11:f2:10:52:35:9f:48:9c:14:2a:68:03:01:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Mar 10 18:33:29 2025 GMT
Not After : Mar 9 18:38:29 2026 GMT
Subject: CN=F061CA5EDE932E41B835B19B4571B0936334A2C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cf:45:b4:58:b7:7b:f6:ca:b9:6a:c1:54:18:
9b:2a:7f:80:68:0b:9e:dc:af:a0:2b:7a:2c:c0:63:
74:5d:86:9b:52:f2:6f:38:3f:58:eb:da:7d:68:ca:
5e:3b:49:95:4b:96:5b:43:19:af:37:53:04:c2:3b:
95:34:04:57:da:3f:06:d0:6f:d2:73:df:f2:f1:31:
c1:f3:40:99:b0:cc:8f:d8:4d:86:b0:2c:3a:71:f6:
08:f5:d9:d8:6e:6d:2c:d5:1c:20:8b:4a:35:0a:fe:
6f:2f:80:2a:e9:5e:69:b3:18:af:25:72:9a:96:25:
5d:2d:66:be:d3:a9:c6:47:bd:94:49:b4:d1:f2:14:
fd:0e:4e:68:a6:56:5f:24:9c:01:e9:27:0b:3f:62:
e7:fc:12:f4:4e:30:ef:4b:de:c9:99:5c:5f:2e:13:
f0:87:34:d7:58:4b:a8:3b:e8:99:68:9a:45:d9:18:
a3:f0:78:42:0c:5e:0d:6e:85:df:f4:18:e8:9d:ac:
9b:98:c0:bc:e0:3a:eb:43:41:29:9a:99:3e:64:d2:
fc:71:57:e7:4e:93:11:17:0b:87:d6:02:3b:ef:4e:
9e:98:2f:0d:20:c6:e0:d1:5d:02:f2:37:2f:03:8a:
64:9e:88:8c:7b:3d:9b:aa:49:9c:26:67:42:4b:2e:
9e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:61:CA:5E:DE:93:2E:41:B8:35:B1:9B:45:71:B0:93:63:34:A2:C9
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a653430333a3a2f33322d3332203d3e20323135343632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e403::/32
Signature Algorithm: sha256WithRSAEncryption
70:a3:bc:7f:41:b2:91:9f:b9:be:44:f0:52:b1:65:f5:5d:5c:
23:42:1d:4d:bb:ef:de:cc:d9:0f:82:bc:07:82:09:a7:44:37:
85:8e:f0:b5:25:42:3a:36:f5:c0:86:d8:95:dd:85:0b:8a:66:
f7:80:4c:d4:53:aa:3c:f1:f0:f6:5a:3a:72:bd:d8:f3:6a:03:
90:2e:59:6c:5c:36:e8:4c:a8:53:2c:0c:f4:e9:46:07:20:92:
8f:e6:4c:8a:71:7f:db:0a:e8:38:97:1f:76:52:77:62:05:f4:
e1:f3:b7:7f:f3:61:3e:12:11:8c:a0:ec:5f:45:4c:28:76:d7:
62:d3:ae:10:62:e6:e4:be:3f:6a:02:20:bc:05:71:32:8f:60:
38:eb:06:e9:80:de:b2:76:da:85:51:ff:b2:68:5f:76:b8:8a:
06:1e:8a:41:06:26:d0:4c:c9:8b:a4:ad:40:59:14:89:74:9b:
30:52:21:0c:30:3c:8f:79:8f:92:02:da:72:5d:50:5b:57:4c:
9d:1b:8a:1a:6f:e0:8e:1e:00:69:84:5a:81:58:1a:74:dd:bf:
bf:4a:05:9b:b8:9a:80:bd:33:1c:0b:b2:da:70:9c:ba:80:0b:
bd:e8:fc:3e:39:ec:cf:07:31:89:ec:d4:89:8c:82:6b:37:57:
12:3f:e1:6a
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUS/BAbYNtEfIQUjWfSJwUKmgDAVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmY0MjZmMTliYTY3YmM4OWRlNWFlNmRmNDg3YzFjOGMx
ZTc1MmUyNzAeFw0yNTAzMTAxODMzMjlaFw0yNjAzMDkxODM4MjlaMDMxMTAvBgNV
BAMTKEYwNjFDQTVFREU5MzJFNDFCODM1QjE5QjQ1NzFCMDkzNjMzNEEyQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnz0W0WLd79sq5asFUGJsqf4Bo
C57cr6AreizAY3RdhptS8m84P1jr2n1oyl47SZVLlltDGa83UwTCO5U0BFfaPwbQ
b9Jz3/LxMcHzQJmwzI/YTYawLDpx9gj12dhubSzVHCCLSjUK/m8vgCrpXmmzGK8l
cpqWJV0tZr7TqcZHvZRJtNHyFP0OTmimVl8knAHpJws/Yuf8EvROMO9L3smZXF8u
E/CHNNdYS6g76JlomkXZGKPweEIMXg1uhd/0GOidrJuYwLzgOutDQSmamT5k0vxx
V+dOkxEXC4fWAjvvTp6YLw0gxuDRXQLyNy8DimSeiIx7PZuqSZwmZ0JLLp5JAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQU8GHKXt6TLkG4NbGbRXGwk2M0oskwHwYDVR0j
BBgwFoAU/0JvGbpnvIneWubfSHwcjB51LicwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDY4YjA4MWUtYmE5My00NjVmLTliNmUtN2ZiZDYzYmRm
ZjYzLzAvRkY0MjZGMTlCQTY3QkM4OURFNUFFNkRGNDg3QzFDOEMxRTc1MkUyNy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL18wSnZHYnBudkluZVd1YmZTSHdjakI1
MUxpYy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDY4YjA4MWUt
YmE5My00NjVmLTliNmUtN2ZiZDYzYmRmZjYzLzAvMzI2MTMxMzMzYTY1MzQzMDMz
M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzMTM1MzQzNjMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA
KhPkAzANBgkqhkiG9w0BAQsFAAOCAQEAcKO8f0GykZ+5vkTwUrFl9V1cI0IdTbvv
3szZD4K8B4IJp0Q3hY7wtSVCOjb1wIbYld2FC4pm94BM1FOqPPHw9lo6cr3Y82oD
kC5ZbFw26EyoUywM9OlGByCSj+ZMinF/2wroOJcfdlJ3YgX04fO3f/NhPhIRjKDs
X0VMKHbXYtOuEGLm5L4/agIgvAVxMo9gOOsG6YDesnbahVH/smhfdriKBh6KQQYm
0EzJi6StQFkUiXSbMFIhDDA8j3mPkgLacl1QW1dMnRuKGm/gjh4AaYRagVgadN2/
v0oFm7iagL0zHAuy2nCcuoALvej8PjnszwcxiezUiYyCazdXEj/hag==
-----END CERTIFICATE-----
Generated at Thu Mar 13 16:19:30 2025 by rpki-client