Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235342e302f32342d3234203d3e203339353231.roa
File: 3139342e33342e3235342e302f32342d3234203d3e203339353231.roa (raw, json)
Hash identifier: NlXPjFULkcx7gkn+N7DXp0UvA+RAqFzlxOrFX93rGv4=
Subject key identifier: DB:14:A2:58:64:D0:3E:A4:DB:80:0D:D3:08:F8:0F:FD:39:5D:30:D1
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 2A7FC19F38B39E4801B6E16B1EA3479D901768B4
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235342e302f32342d3234203d3e203339353231.roa
Signing time: Tue 28 Oct 2025 15:02:51 +0000
ROA not before: Tue 28 Oct 2025 14:57:51 +0000
ROA not after: Tue 27 Oct 2026 15:02:51 +0000
asID: 39521
IP address blocks: 194.34.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 07:54:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:7f:c1:9f:38:b3:9e:48:01:b6:e1:6b:1e:a3:47:9d:90:17:68:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Oct 28 14:57:51 2025 GMT
Not After : Oct 27 15:02:51 2026 GMT
Subject: CN=DB14A25864D03EA4DB800DD308F80FFD395D30D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:87:94:f0:3b:72:8b:f2:b6:8b:99:3e:21:
2d:05:2f:26:0a:a7:8b:eb:c7:a9:09:cc:b6:db:59:
37:66:a2:05:e0:4c:a0:6b:a0:8a:e7:0a:b5:f0:04:
ef:ed:b1:76:3e:78:0e:03:65:65:07:9e:f2:e4:47:
1a:b9:da:35:60:fa:36:79:32:50:87:cc:a6:8e:d8:
d8:82:34:f5:2c:23:79:97:b0:9f:76:b4:e9:98:58:
33:1c:ab:50:fc:0b:07:12:9a:f4:c5:16:25:94:87:
ef:0f:ba:f3:9f:b3:73:b3:75:5c:d8:2c:fc:20:b7:
f3:d1:86:9c:82:20:52:06:dd:71:b2:a5:04:fb:a7:
cf:fb:d7:15:7f:7f:69:ad:b1:71:63:d4:ea:a3:8c:
12:53:ca:74:aa:1b:4b:05:ed:b7:12:93:34:da:ad:
32:2a:22:8c:e2:f0:19:93:c0:1f:f3:e0:4f:03:45:
1f:ef:30:bc:0c:f4:fb:31:c9:ce:ba:c6:40:5b:1b:
da:2f:5c:86:c9:4d:6b:80:aa:da:82:f8:da:0f:4c:
24:26:02:47:e0:36:12:c9:8a:cf:06:55:db:dc:9e:
a1:27:77:65:03:7e:f4:a2:f9:c8:d1:08:63:4b:a6:
0e:10:68:dd:cf:e8:c6:81:78:27:ee:3e:dd:96:d7:
27:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:14:A2:58:64:D0:3E:A4:DB:80:0D:D3:08:F8:0F:FD:39:5D:30:D1
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235342e302f32342d3234203d3e203339353231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:3a:d8:e6:71:42:a5:e4:1c:bb:04:69:6d:e8:23:82:2d:14:
28:8d:d1:75:fb:41:e8:77:d6:92:74:5b:54:3f:ca:43:73:cb:
85:ba:75:cb:42:13:53:94:96:97:d9:a4:e1:05:32:7b:c4:f7:
1b:69:ee:03:38:e6:55:de:ae:db:59:06:be:85:a4:7c:bf:c0:
f1:65:88:e8:88:5d:52:e9:71:1b:1b:f4:e0:1e:8d:66:eb:ce:
30:56:6a:07:f7:b6:2e:8b:4a:10:4a:f5:48:3b:73:36:a8:c0:
41:30:4c:26:45:f5:a9:b4:bb:7e:50:39:06:89:b8:88:37:6a:
0d:83:f1:e5:3d:e7:e7:0d:11:89:92:77:25:a5:d2:b3:db:0a:
6e:e8:67:4f:3b:d2:f3:25:9f:a7:c5:b4:2f:71:c5:ab:ba:1e:
31:8b:39:55:bc:fc:c2:8e:f1:aa:d7:f2:ca:74:ec:dc:4e:80:
dc:ce:23:f5:18:d7:4c:fe:76:f8:d5:af:d4:77:22:f8:8b:dc:
dc:50:89:02:f2:d2:58:56:ad:b7:37:51:dd:03:e4:e4:64:3c:
09:66:c1:e2:b2:f3:2b:bc:98:9d:08:82:b6:2f:02:d3:55:68:
ac:c7:ef:e0:b1:f1:02:98:dd:2e:ce:8d:9a:2f:2f:a6:b2:69:
69:00:32:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 14:10:49 2025 by rpki-client