Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3232382e302f32342d3234203d3e20323134343538.roa
File: 38352e3131372e3232382e302f32342d3234203d3e20323134343538.roa (raw, json)
Hash identifier: rcAG2FX2+ZD0Qb1+KeZK9os832Q7CwzkoxVHQi9yY7k=
Subject key identifier: A7:1B:F0:19:2F:19:7B:97:B2:F5:05:A8:23:52:0E:05:24:3C:7A:2B
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 414C25090BF83B862003026D0F390783CC1BCA87
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3232382e302f32342d3234203d3e20323134343538.roa
Signing time: Sun 14 Sep 2025 09:27:42 +0000
ROA not before: Sun 14 Sep 2025 09:22:42 +0000
ROA not after: Sun 13 Sep 2026 09:27:42 +0000
asID: 214458
IP address blocks: 85.117.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 21:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:4c:25:09:0b:f8:3b:86:20:03:02:6d:0f:39:07:83:cc:1b:ca:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Sep 14 09:22:42 2025 GMT
Not After : Sep 13 09:27:42 2026 GMT
Subject: CN=A71BF0192F197B97B2F505A823520E05243C7A2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:51:32:26:fd:d1:d0:42:a6:f0:ce:9a:43:
1e:b9:dd:28:f7:c7:b2:a2:17:61:d0:7f:98:2f:24:
3e:31:f0:75:9a:d1:f8:4d:a5:04:68:e2:eb:e1:6a:
26:00:ae:21:86:89:7f:d7:92:3d:ac:a9:d6:14:76:
b7:99:6a:c3:7d:dd:af:e1:d0:33:4a:a3:6b:64:97:
e9:c9:05:a9:89:a3:e8:2f:97:c3:32:b7:86:e2:d0:
38:cd:e0:53:73:d7:62:63:e8:d3:c9:48:73:d0:08:
de:f0:9b:a9:2a:d3:81:ad:5e:2a:2c:6e:9c:1d:dd:
23:a3:38:f1:63:15:a9:2d:aa:a0:52:6e:5c:74:87:
d7:5f:d2:b2:d3:28:2f:39:f7:53:1c:ac:b5:51:93:
2f:5d:c7:8f:14:67:db:90:e8:d3:f6:c0:85:07:ab:
ab:c2:e6:9e:4d:12:39:bb:5e:e9:d3:84:52:f5:8d:
59:b2:49:e4:f3:fa:ed:2d:21:96:a6:da:2a:6b:b3:
fb:d2:d7:a9:32:45:f6:f2:53:93:86:a4:2c:f6:99:
ad:a4:9f:63:08:66:25:13:eb:76:21:79:fd:5d:c7:
5e:d0:b2:e1:fe:5d:70:f9:26:e7:87:15:f9:43:5c:
8a:1e:23:f2:b2:ac:3d:64:47:3a:d7:c7:8b:d0:f8:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1B:F0:19:2F:19:7B:97:B2:F5:05:A8:23:52:0E:05:24:3C:7A:2B
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3232382e302f32342d3234203d3e20323134343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.228.0/24
Signature Algorithm: sha256WithRSAEncryption
53:49:2c:85:4e:c7:45:13:d9:b9:17:16:6b:28:20:06:d4:06:
ae:2a:0c:2b:51:28:e5:71:dc:20:14:57:a5:97:c3:2d:ba:d0:
1a:7c:6b:8d:93:28:7f:e9:e7:da:d1:14:c5:bf:25:1e:95:1d:
3c:49:6f:b9:95:3c:be:6e:67:32:b2:e0:7a:90:16:d2:c2:52:
6d:1f:6c:89:b7:ff:a8:c9:45:2c:d7:65:16:f7:78:1b:9f:ba:
2a:af:ee:7e:74:6b:d5:3a:d8:28:2b:61:70:48:0c:6e:03:79:
6a:db:f2:1f:bf:e0:31:61:85:72:12:be:dd:c0:6b:8e:d1:7b:
17:95:a2:9a:f2:56:5f:23:f1:df:d1:b9:8b:c7:5e:c4:99:95:
97:31:a8:80:75:6d:46:b4:3d:4f:89:76:b7:c7:38:4d:cb:23:
a5:1b:12:b1:cb:2b:2e:23:a4:81:8b:77:d8:7b:36:2c:ff:17:
97:4b:51:c9:ac:9d:5c:51:d0:6e:53:82:2b:d9:8b:b9:cd:77:
1a:99:2d:98:4f:fa:5f:ea:42:70:6f:c3:e7:e8:d7:4e:47:76:
24:62:27:28:b3:79:bb:d6:e6:ea:58:0f:8c:7d:e1:fa:e1:f3:
8f:7d:99:aa:9a:5a:25:b0:81:f2:c0:fe:6a:71:98:41:55:83:
59:e2:f1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 11:24:53 2025 by rpki-client