Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e39332e33332e302f32342d3234203d3e20323035383836.roa
File: 3138352e39332e33332e302f32342d3234203d3e20323035383836.roa (raw, json)
Hash identifier: tjsI/S9g1e/ZKcrZ+fv2NLCRQTSubJ5iiQMBpppoLDk=
Subject key identifier: DD:1E:90:BF:DF:A0:37:C0:43:F0:0A:D3:46:0E:8A:0C:DC:E5:4E:E3
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 56AD5571AB71D329C65E27495E4187AAC8209208
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e39332e33332e302f32342d3234203d3e20323035383836.roa
Signing time: Thu 13 Nov 2025 12:45:04 +0000
ROA not before: Thu 13 Nov 2025 12:40:04 +0000
ROA not after: Thu 12 Nov 2026 12:45:04 +0000
asID: 205886
IP address blocks: 185.93.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Nov 2025 15:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ad:55:71:ab:71:d3:29:c6:5e:27:49:5e:41:87:aa:c8:20:92:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Nov 13 12:40:04 2025 GMT
Not After : Nov 12 12:45:04 2026 GMT
Subject: CN=DD1E90BFDFA037C043F00AD3460E8A0CDCE54EE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b6:ad:e9:22:db:ea:e2:45:b6:d4:52:1e:c9:
7d:51:24:5b:e4:39:86:e5:ea:0e:e9:25:34:2d:92:
fc:6f:6a:d1:20:eb:a1:bd:87:56:f0:8c:a6:18:f6:
16:ae:b5:36:53:f5:81:2d:c2:0b:07:5b:ed:f4:32:
31:69:89:e2:b0:ad:28:70:e7:47:c9:0e:83:09:c0:
ff:cf:da:12:e9:89:2f:6b:b2:b0:ed:08:1d:b9:a5:
97:bf:b1:e9:de:dc:5a:08:8e:33:0d:09:60:a4:2d:
5e:6c:bc:92:ab:af:05:4d:96:6e:50:e1:98:60:5f:
d5:f0:f0:ce:30:86:13:ae:a5:45:3f:a1:e7:80:63:
68:ed:d5:be:f3:72:49:c9:ce:61:9e:32:0e:fe:5a:
9f:7f:ba:38:8a:de:53:fb:87:c6:0d:4a:ce:f5:13:
fb:72:1d:30:4e:8c:86:f4:2d:91:b5:9a:53:90:c4:
7f:c5:9b:97:1e:72:c1:c7:50:d0:29:9d:87:e8:08:
d4:81:df:44:2f:bf:74:03:75:db:c2:9e:f7:5e:60:
45:ff:e7:58:67:a7:d5:b5:4e:c1:b3:7c:3b:7d:f9:
88:84:da:32:84:47:eb:9d:70:cd:f1:b4:ab:ed:52:
e7:4b:74:47:80:40:02:e7:01:c9:f3:02:91:0f:75:
0d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1E:90:BF:DF:A0:37:C0:43:F0:0A:D3:46:0E:8A:0C:DC:E5:4E:E3
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e39332e33332e302f32342d3234203d3e20323035383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.33.0/24
Signature Algorithm: sha256WithRSAEncryption
93:54:90:0d:ff:9e:58:37:54:c8:d0:0f:58:68:18:84:ac:26:
66:57:6a:49:36:f4:f2:a6:92:f4:42:26:59:b7:7e:20:ed:cd:
6a:7a:c8:72:1c:a3:8e:c3:0b:d9:ed:f5:13:22:9f:ef:d2:c8:
9e:2e:34:c3:6c:c1:66:54:be:82:da:1a:77:68:36:cf:13:a1:
55:5a:f6:32:8b:3e:b8:25:08:29:35:55:90:09:34:e6:d8:31:
a4:c7:f3:18:84:23:88:ff:87:a7:05:06:99:e8:66:89:c0:cb:
7a:75:52:95:d7:a9:c8:a5:05:f7:4e:41:f3:f1:5f:72:4a:72:
0c:57:dd:97:04:76:ed:1b:b7:19:2c:4d:6a:98:54:73:a1:32:
5c:9f:f6:d4:94:cd:e2:20:27:bd:ee:55:84:30:f3:49:43:dd:
7a:c2:4e:b5:2d:b8:c2:03:fa:51:6e:dc:89:ac:bc:65:d9:90:
7f:33:29:dc:dc:ae:48:05:bc:fe:6b:23:78:70:ed:23:ae:2b:
52:dd:5b:3c:ce:c1:73:7c:95:e0:84:78:b9:41:66:1c:9e:a4:
17:98:ad:70:e5:55:63:f3:e7:73:31:e4:ab:ce:4d:d4:6a:28:
37:2d:86:08:8b:a2:5c:e3:a5:09:cd:5b:7b:c0:18:1a:26:45:
62:f0:19:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 15 23:08:41 2025 by rpki-client