Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3234382e302f32342d3234203d3e20383334.roa
File: 3138352e3231332e3234382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: NeIyH9xxsoqFV+3yb/Ns2oP7cbsMBtN42kO76jjN4p0=
Subject key identifier: 26:D5:89:DF:1D:C5:7F:26:82:A7:E2:BB:8E:13:15:F6:A0:19:90:D8
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 28E8589067EF4062DE5F755C8CCE1E8A0133AF72
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3234382e302f32342d3234203d3e20383334.roa
Signing time: Fri 12 Sep 2025 10:33:42 +0000
ROA not before: Fri 12 Sep 2025 10:28:42 +0000
ROA not after: Fri 11 Sep 2026 10:33:42 +0000
asID: 834
IP address blocks: 185.213.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 21:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:e8:58:90:67:ef:40:62:de:5f:75:5c:8c:ce:1e:8a:01:33:af:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Sep 12 10:28:42 2025 GMT
Not After : Sep 11 10:33:42 2026 GMT
Subject: CN=26D589DF1DC57F2682A7E2BB8E1315F6A01990D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:76:13:52:82:66:e2:ad:e3:b4:58:5f:ce:56:
d4:52:45:72:60:86:d5:95:6b:7f:21:4a:c5:88:ef:
cd:c2:e6:a3:0f:f9:62:20:c8:d2:72:1e:9c:e1:a7:
bc:0f:af:c0:a9:36:0a:40:71:41:28:29:05:47:20:
33:16:e7:8d:34:3b:63:f4:7e:50:4a:a6:45:d3:2a:
fa:8b:fd:83:79:d5:fa:a7:98:89:3e:c2:c4:a1:dc:
59:ec:f2:34:75:f2:7f:70:ee:49:91:8f:e7:f9:c6:
d9:33:9b:c2:1e:63:e5:2a:6e:98:32:e7:f9:90:0f:
b0:ee:26:94:e0:99:65:61:47:4e:61:93:e8:88:64:
11:f2:d5:56:a4:a9:40:b6:e7:e8:97:97:71:b8:04:
ff:40:51:4e:b0:43:90:c1:07:ed:31:f2:0e:58:d5:
78:f6:f6:43:41:45:ad:74:bd:56:e3:7f:9f:96:0b:
39:8b:90:a7:a4:b7:57:40:9b:15:a7:0d:6f:e5:a5:
dc:ac:e9:9a:ca:30:29:e0:72:27:16:9f:06:d8:48:
23:3d:3d:39:5a:c8:76:8b:01:bc:73:77:99:0d:9f:
85:20:b6:9e:c3:4a:fb:02:25:6b:b1:26:b7:41:35:
60:67:a2:69:56:7a:0d:96:6c:30:37:cb:0c:da:16:
9c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D5:89:DF:1D:C5:7F:26:82:A7:E2:BB:8E:13:15:F6:A0:19:90:D8
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3234382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.248.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:c8:46:bb:d8:99:df:73:96:cc:b0:ca:5d:a5:fe:32:c7:5f:
23:41:77:e6:7d:5e:03:df:e0:e3:2c:69:90:4b:d2:f6:7a:df:
ad:0b:f2:fe:4f:b3:0c:12:53:af:9b:8b:2c:10:70:0a:a7:35:
cb:1f:b6:0e:75:9d:83:6b:ba:42:78:e7:ad:a9:60:10:31:8d:
a6:c0:4f:67:fe:d1:fd:80:cd:69:21:13:47:4e:f8:c7:7b:7c:
9a:f0:b5:04:5c:12:0d:8e:c2:f3:c2:f9:7e:e9:49:19:26:b9:
48:2c:9c:c9:3b:36:24:70:3e:c7:20:45:76:b1:b6:c8:93:ca:
3c:e5:26:49:ab:b1:c7:8a:43:9c:5f:05:96:92:57:ac:39:09:
5e:12:e9:f3:de:ac:99:59:19:9d:96:7f:f5:39:f8:99:08:d5:
5e:ca:5d:c0:28:4b:6d:bc:1d:2a:97:46:87:ac:82:7a:5d:36:
22:4b:6d:0e:6c:ba:3d:27:07:2f:d0:57:49:26:42:b6:77:13:
c2:0f:72:ae:15:b0:01:c6:54:9e:2a:d5:5c:dd:6a:d9:8b:cf:
dc:c2:a5:9e:d4:fb:c1:1a:21:8a:d6:c1:27:85:54:b3:70:82:
ce:2c:4c:5c:83:4c:f6:a4:e9:44:d7:b8:38:40:6a:ba:85:ef:
e0:be:fb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 11:19:59 2025 by rpki-client