Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231352e302f32342d3234203d3e203533313037.roa
File: 3138352e3130302e3231352e302f32342d3234203d3e203533313037.roa (raw, json)
Hash identifier: nlPUp/nqu1E1wYBcfxG3z4hF4XPv1vQzH93yRUI6f3o=
Subject key identifier: 2F:CF:A1:A6:4A:0B:36:BF:7C:25:93:10:EA:75:34:CE:EA:D0:F9:A1
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 494EF6AEE650CDCEAF00429D741F78442B0E42D7
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231352e302f32342d3234203d3e203533313037.roa
Signing time: Fri 29 Aug 2025 11:53:18 +0000
ROA not before: Fri 29 Aug 2025 11:48:18 +0000
ROA not after: Fri 28 Aug 2026 11:53:18 +0000
asID: 53107
IP address blocks: 185.100.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 00:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:4e:f6:ae:e6:50:cd:ce:af:00:42:9d:74:1f:78:44:2b:0e:42:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Aug 29 11:48:18 2025 GMT
Not After : Aug 28 11:53:18 2026 GMT
Subject: CN=2FCFA1A64A0B36BF7C259310EA7534CEEAD0F9A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:47:da:fd:1b:04:21:47:39:03:a0:46:8c:
61:0a:5b:62:e8:f1:55:18:24:2e:24:8e:14:5e:c0:
ac:bb:d1:48:6b:3b:ba:9c:92:11:9d:ca:f5:04:23:
e7:ca:0d:3a:f8:0b:23:63:91:3b:b8:64:8a:3d:6f:
63:12:86:00:eb:10:9d:4f:66:e1:97:d7:53:61:b0:
b8:2e:63:a2:45:0e:cf:b7:ad:e8:21:75:7c:63:d0:
52:bd:a0:90:2b:81:08:4f:63:d3:f2:8f:ff:10:21:
2e:ce:82:f0:38:3e:81:6a:67:41:0e:48:da:19:17:
f6:9b:8e:f1:18:c8:db:b1:c2:a6:fc:5c:9b:ba:85:
e7:b0:c2:4f:34:59:45:43:33:93:62:3d:90:61:94:
7b:c1:35:31:2d:33:9e:91:25:69:8b:b7:51:95:87:
fe:31:1c:28:a2:da:19:78:4b:6b:96:c2:52:cb:b5:
a6:d7:32:c4:ed:4b:cf:67:dc:62:01:1f:53:bb:25:
3e:2f:ef:80:94:fe:6d:6a:38:cd:f1:65:6b:d3:eb:
55:a2:e2:46:36:3a:f9:a2:1b:e0:33:3f:ff:3f:69:
45:19:b5:55:83:15:c5:a5:d9:c5:a8:bd:e4:6b:04:
ad:a0:1f:e2:27:4f:48:3e:10:c8:8f:db:38:a4:45:
1c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CF:A1:A6:4A:0B:36:BF:7C:25:93:10:EA:75:34:CE:EA:D0:F9:A1
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231352e302f32342d3234203d3e203533313037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.215.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b5:7e:75:b8:66:f4:b0:37:2b:3b:7d:d2:07:7c:a3:6d:a2:
ea:2a:1c:38:85:4b:5d:e8:01:c2:49:b2:90:e7:1f:2b:b5:b3:
cf:cd:26:06:4c:b7:3b:71:4c:49:bd:60:82:96:0e:a0:91:94:
44:15:a2:4e:8a:01:7f:b7:66:1b:0a:24:45:e3:22:7c:25:64:
4e:b8:4c:a6:43:18:e9:6b:e8:83:d8:e6:6a:69:91:8d:f9:18:
6c:69:28:de:0d:c0:0e:c9:40:0e:25:5c:ce:a9:31:31:94:b6:
66:12:e8:f6:8d:50:16:d1:69:22:64:6c:7e:01:82:6b:1e:c5:
d3:ad:68:02:25:5a:01:01:82:da:a6:1d:9a:23:e7:e8:fb:82:
1e:42:69:03:3e:e9:54:67:69:79:c9:ca:1a:17:20:e4:67:d4:
f8:70:c8:32:09:38:4b:d2:f9:21:3c:7d:6c:9e:70:90:6b:f7:
ea:c9:fa:8d:15:86:db:85:40:7e:59:40:e8:b2:15:a4:4d:46:
f2:4e:8e:90:92:88:ea:aa:14:41:89:5e:75:8a:54:89:b6:7e:
2c:93:86:3b:90:79:13:34:b8:11:ef:54:ed:aa:0e:15:a8:42:
60:a8:92:96:38:30:58:50:73:10:d4:7c:7c:56:29:27:45:72:
00:88:d7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 16:38:11 2025 by rpki-client