Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20313335333931.roa
File: 3139332e3130392e3139372e302f32342d3234203d3e20313335333931.roa (raw, json)
Hash identifier: bV4bis7I7EzNXCtWD9iuTjzNtON+EirH1boLsK44OZA=
Subject key identifier: A9:DF:5D:4E:98:52:E2:9D:2A:89:6A:94:5C:3B:B1:40:A2:F3:A3:70
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 4C6F4CA56AB29EC5E42E07D634B81C0F40B27E76
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20313335333931.roa
Signing time: Wed 28 May 2025 06:54:08 +0000
ROA not before: Wed 28 May 2025 06:49:08 +0000
ROA not after: Wed 27 May 2026 06:54:08 +0000
asID: 135391
IP address blocks: 193.109.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 13:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:6f:4c:a5:6a:b2:9e:c5:e4:2e:07:d6:34:b8:1c:0f:40:b2:7e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: May 28 06:49:08 2025 GMT
Not After : May 27 06:54:08 2026 GMT
Subject: CN=A9DF5D4E9852E29D2A896A945C3BB140A2F3A370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:0a:5d:c6:2c:9d:b5:01:95:21:7a:3d:be:
2a:45:99:34:d5:0b:d0:44:74:e3:84:e0:b4:5a:e4:
a8:1e:96:0c:15:d5:4b:96:82:e0:06:8e:10:82:95:
d5:d1:aa:00:8f:51:22:01:bc:b3:c2:b3:2c:d3:b1:
df:18:e7:08:fc:96:5c:1b:9c:94:eb:80:c9:47:d0:
de:96:67:f5:63:9f:8c:02:d1:6f:f4:d9:87:49:c6:
6d:d4:a3:7c:06:3c:d9:9f:0a:e5:26:49:ff:25:95:
a0:ae:59:98:dc:5c:07:71:73:c1:65:5f:ed:1e:8c:
c5:97:30:b1:0c:e7:29:1a:e7:cd:d7:33:e3:f2:5a:
78:1d:c4:14:79:ba:b0:4e:8b:e7:ac:e9:9b:75:72:
7f:4a:da:64:a5:fc:2a:6c:11:70:95:90:6d:51:9e:
f5:d0:ea:71:ce:b9:e6:bb:a7:74:91:a6:7a:5b:ac:
c8:09:eb:ae:da:33:a6:ed:73:39:72:61:d9:44:69:
86:b6:79:38:7d:a0:71:53:83:56:f2:c5:be:b0:6d:
93:2f:c8:22:5f:35:0a:c1:b3:45:e7:c2:79:17:ac:
ba:dd:04:f8:3f:6d:9c:17:14:86:18:21:3f:ae:a0:
d0:c6:c0:21:19:7a:09:8b:d3:d7:da:51:3f:e2:7a:
fa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DF:5D:4E:98:52:E2:9D:2A:89:6A:94:5C:3B:B1:40:A2:F3:A3:70
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20313335333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.197.0/24
Signature Algorithm: sha256WithRSAEncryption
14:e5:83:e0:f8:4c:a7:fa:de:bf:2d:9d:b2:71:3e:1a:eb:d2:
c3:e1:22:d2:97:34:36:3c:b2:af:3a:e4:38:a3:6e:63:d8:95:
3c:64:ec:f7:00:5a:6a:90:76:b2:eb:d3:08:d6:9e:d6:15:fa:
af:49:3b:fd:48:3a:3c:07:5b:2c:be:e4:63:2b:c0:79:1b:93:
74:18:19:da:27:28:84:18:88:5a:fb:ac:4a:60:35:21:cf:03:
ee:c6:1f:2c:54:a4:1b:db:bc:40:17:26:00:96:c5:9f:30:b5:
7b:de:ee:41:b0:50:56:de:e2:1f:94:fd:6d:36:f5:76:20:c2:
93:35:6d:90:ce:a4:ff:1e:60:0f:60:64:5c:52:d5:1f:e8:84:
24:dd:30:fb:00:95:64:45:76:46:30:9e:67:4d:7e:e8:73:fd:
a4:2f:18:fd:0b:3c:a6:bb:f9:9e:ee:fa:f1:a6:95:01:46:0e:
fe:28:e1:04:d1:69:ad:80:89:7e:82:4d:2e:b6:ab:df:e1:b1:
39:9d:d8:ff:49:a6:22:3c:d8:a3:bd:96:1a:6f:34:49:f3:34:
c2:cf:1c:74:a4:07:12:8b:8e:e4:ec:e7:4e:f7:60:c0:94:de:
c5:71:dc:43:29:36:e7:e5:36:44:60:9c:f1:2c:9e:e5:8b:a7:
a8:19:59:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 07:23:48 2025 by rpki-client