Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232332e302f32342d3234203d3e20323132323338.roa
File: 38352e3233372e3232332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: RXroTdmQqOPrOCe5EkzfsFMB+ZC8jSaD9A2N+Nxm1eE=
Subject key identifier: 3A:5A:8C:F7:C0:EF:80:D0:DE:67:65:ED:E6:9C:1D:70:B3:70:0C:B4
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 1AFFE551CC9727EF8A2121557E4AA2FAD14F2DCA
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232332e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 30 Sep 2025 12:41:42 +0000
ROA not before: Tue 30 Sep 2025 12:36:42 +0000
ROA not after: Tue 29 Sep 2026 12:41:42 +0000
asID: 212238
IP address blocks: 85.237.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 22:41:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ff:e5:51:cc:97:27:ef:8a:21:21:55:7e:4a:a2:fa:d1:4f:2d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Sep 30 12:36:42 2025 GMT
Not After : Sep 29 12:41:42 2026 GMT
Subject: CN=3A5A8CF7C0EF80D0DE6765EDE69C1D70B3700CB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:21:fd:5a:8e:16:e0:5f:32:a4:5b:c7:0f:
47:aa:07:cc:94:5d:2b:ab:f6:7c:31:e8:fb:6d:63:
14:ab:8a:89:3b:59:ea:b2:04:f3:b2:0c:0a:7f:96:
64:6a:13:85:48:50:b7:14:4b:b3:39:b5:56:98:47:
82:7e:3c:bf:bc:22:4c:3c:e4:76:57:75:94:03:a8:
18:43:88:c5:76:ad:ca:46:fb:75:71:58:d5:0f:2e:
96:ec:19:38:7a:48:92:ff:fc:f0:56:3e:55:57:fb:
d7:a5:e7:d9:3c:b2:f2:86:62:d4:28:69:38:13:6b:
94:8c:21:25:50:c6:f5:55:3a:c7:d9:19:7a:fb:c7:
0d:4e:92:98:12:e8:23:ee:03:c9:9a:25:fd:8a:28:
e3:54:d8:2d:d8:49:5d:2c:ad:33:bf:40:60:8f:a8:
46:f3:c1:b4:e6:68:05:76:93:7d:9f:32:b7:fa:b0:
21:b7:bb:e2:49:1d:74:28:69:01:50:4d:8d:6b:35:
9e:38:a5:1a:0d:46:d4:08:ea:83:bb:1d:bb:b1:2b:
35:14:7a:0c:5b:88:30:90:3e:e7:36:f2:0e:06:dd:
41:ca:a4:99:f7:e0:11:7a:22:a3:b5:f2:a2:34:4c:
8c:35:b0:8a:4a:24:95:c8:73:d4:1d:e6:59:fa:35:
a5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5A:8C:F7:C0:EF:80:D0:DE:67:65:ED:E6:9C:1D:70:B3:70:0C:B4
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232332e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.223.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a5:d4:09:5e:d3:c0:24:37:77:67:88:cb:77:bd:53:ce:04:
bd:82:e7:63:49:d6:c5:46:5c:40:4a:a1:98:fd:5e:48:9e:06:
e7:cc:8e:93:d6:d4:a3:f7:7b:f6:6d:d4:96:9d:0a:f7:3f:b9:
6d:d5:05:38:6e:4d:a8:1a:59:98:54:0a:ad:73:53:31:12:ad:
37:89:fc:5b:18:f4:25:0e:6e:e4:f8:60:dc:c8:ec:aa:52:5f:
8c:fc:08:36:4e:86:26:de:3c:7a:56:58:14:68:77:09:0b:c9:
1e:2f:0b:28:bd:d6:f7:8a:36:af:15:b1:4e:e7:0e:a5:45:2d:
23:e3:39:73:99:d0:1b:4b:4a:e9:c2:73:fe:ac:e0:bc:6c:7f:
4d:7e:94:5a:9e:6c:82:e1:d2:e2:f1:ee:68:99:54:68:b0:a3:
b0:23:b7:8f:f0:a7:f2:03:a2:d0:75:c3:9e:a4:3c:21:ff:aa:
e8:50:bb:a8:d0:d2:d3:3b:08:52:38:d7:ee:f8:fb:be:15:72:
2a:56:da:6d:a7:ef:c4:cf:26:f0:d7:ac:7b:05:8e:c0:73:0a:
3c:0e:55:22:60:e0:ff:95:8c:08:7f:34:e2:6e:e9:0e:eb:bd:
af:fd:de:74:66:6c:8c:16:7b:21:dd:6e:21:58:da:e6:0f:f5:
03:1c:39:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:29:48 2025 by rpki-client