Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa
File: 3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa (raw, json)
Hash identifier: G13vY29QnBftdVi9wxOE7EsR55MD+5g83z0Wgjkq5Ig=
Subject key identifier: CE:76:9A:30:8C:91:23:A0:5F:E7:D7:0F:54:EE:7D:96:4E:F2:17:77
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 52360788E71A951D93687225AF4114BD58B43E11
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa
Signing time: Wed 23 Jul 2025 03:10:18 +0000
ROA not before: Wed 23 Jul 2025 03:05:18 +0000
ROA not after: Wed 22 Jul 2026 03:10:18 +0000
asID: 212336
IP address blocks: 185.115.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:36:07:88:e7:1a:95:1d:93:68:72:25:af:41:14:bd:58:b4:3e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Jul 23 03:05:18 2025 GMT
Not After : Jul 22 03:10:18 2026 GMT
Subject: CN=CE769A308C9123A05FE7D70F54EE7D964EF21777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f4:46:b8:5b:4f:98:bb:1b:65:f5:55:85:34:
bf:c5:d5:82:88:a1:fc:bb:13:13:87:73:98:62:72:
fb:a5:b7:4d:4d:a7:f7:37:85:eb:d6:cf:0e:4f:f1:
77:d8:e3:32:96:8d:ef:1c:89:3b:5a:3b:bc:20:5c:
da:c7:1b:3a:29:32:de:d4:4b:7b:bd:76:f6:f6:8e:
eb:aa:77:5a:d8:a9:5c:8f:b6:9b:bd:72:16:f7:60:
b8:0f:4f:95:14:c7:f8:2b:ef:96:e5:68:1e:66:a7:
4d:2f:60:c0:ab:8b:4f:b6:c8:37:3c:19:08:7b:f4:
46:44:2f:b2:29:15:18:8e:71:20:11:59:bb:27:9b:
e4:be:76:7b:5a:d6:12:3b:87:ee:06:b6:a3:31:f1:
2b:2d:3b:93:e9:10:ef:e8:61:af:fa:85:10:e5:b5:
7b:a9:6e:e9:34:34:4d:11:09:e0:0d:11:01:62:fb:
4d:76:30:6b:b8:4f:20:6a:78:67:c9:0f:bb:c6:54:
72:fb:a5:6c:69:5d:f0:35:3f:14:14:f3:33:3a:aa:
4e:4c:0c:d3:a5:d2:08:c4:68:e0:1b:29:da:2a:38:
1d:85:97:f8:90:54:dc:3b:49:75:a9:e4:e0:de:c5:
62:d4:b0:47:95:cc:11:a7:4f:76:34:0f:0a:cf:dc:
cc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:76:9A:30:8C:91:23:A0:5F:E7:D7:0F:54:EE:7D:96:4E:F2:17:77
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.207.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:39:5e:64:e7:fe:c5:82:9b:1c:ec:05:3b:47:30:0e:fa:b5:
62:40:b2:f3:30:90:71:d1:68:c6:02:98:32:c2:ca:b0:d8:d3:
0d:fc:fe:cf:dc:fe:3a:60:9d:ea:6f:de:d6:1d:12:30:ad:5d:
4f:21:b8:7e:1d:06:ff:20:2d:4a:ad:b1:66:7e:77:e8:a0:33:
07:c7:1c:17:b2:d5:4d:b9:6c:16:a1:ff:77:a2:5d:67:1d:ea:
09:20:d7:e0:48:9a:26:dd:ac:94:1c:c9:11:5b:c9:aa:79:ba:
91:86:a4:48:1d:2c:42:07:39:d7:98:b7:da:df:9f:22:db:1e:
b9:cc:32:6a:e1:a4:a6:24:87:96:8d:f7:1e:e2:9d:29:c9:5f:
e6:03:cc:aa:20:ae:1f:9d:55:d7:13:45:5a:97:f8:f6:f0:24:
62:86:75:46:e3:b6:0a:2b:91:e1:95:8a:69:d7:44:67:e5:bc:
20:76:e6:4b:fd:f4:fa:9c:15:fb:74:16:7c:e4:51:62:2b:dc:
53:33:d3:56:45:35:1d:f7:23:64:33:60:1a:12:1d:91:4a:2e:
f6:31:84:34:eb:1c:3c:8a:98:b5:0e:ee:d0:90:e0:04:86:8d:
2a:6a:d0:33:14:1f:25:91:2d:11:37:e1:a0:bd:14:cd:0a:95:
67:e7:c1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:49:53 2025 by rpki-client