Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e20383334.roa
File: 3138352e32392e3136342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Iky3XFi5K1c1FiZgo9xx6v/28Sr0f1116fD/dSAcrbk=
Subject key identifier: EF:BF:A0:14:42:88:24:FC:EE:71:D7:47:9D:DD:5C:AB:8F:CD:2A:62
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 293D0826209F5748FFC405165C6C14B7C12FAF97
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e20383334.roa
Signing time: Sun 14 Sep 2025 00:08:02 +0000
ROA not before: Sun 14 Sep 2025 00:03:02 +0000
ROA not after: Sun 13 Sep 2026 00:08:02 +0000
asID: 834
IP address blocks: 185.29.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 20:35:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:3d:08:26:20:9f:57:48:ff:c4:05:16:5c:6c:14:b7:c1:2f:af:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 14 00:03:02 2025 GMT
Not After : Sep 13 00:08:02 2026 GMT
Subject: CN=EFBFA014428824FCEE71D7479DDD5CAB8FCD2A62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:0d:24:2b:b1:5d:91:df:fe:5d:22:2f:a5:
3f:73:55:91:53:08:98:0c:a6:1e:a2:8b:61:19:bd:
c3:17:eb:20:eb:25:db:64:60:37:95:f2:23:c8:9f:
99:c3:54:7b:de:a7:20:11:bb:66:85:3f:2e:61:6f:
6f:1b:5b:63:b0:c2:54:b2:7d:b6:c0:95:5f:fa:31:
cf:da:52:97:f6:67:60:32:3c:28:9b:b1:b9:b7:ac:
10:1a:0a:53:83:a0:af:52:b4:1d:87:8b:33:00:9e:
da:43:e8:6a:e8:6b:df:ad:2e:50:76:02:f9:44:5d:
f4:5e:09:26:43:24:d4:b0:ae:77:39:58:00:c5:52:
84:af:cd:5c:c3:e4:ef:4e:30:07:59:91:30:dc:8e:
c1:b6:1b:04:82:c2:60:7e:13:3d:e6:c7:d4:bb:02:
bf:18:e2:15:61:9c:11:b4:7c:a3:e4:8c:e7:9c:a3:
8f:c2:b2:47:e2:a0:48:59:20:24:f9:8b:ab:cd:01:
0b:4b:81:2f:2f:2b:08:d2:f4:3a:06:0f:ac:c5:87:
35:20:e2:48:b7:fd:65:9a:11:a5:03:96:2d:73:96:
43:fc:1d:45:73:b5:e6:e7:a9:1b:a8:ae:7e:b5:1e:
62:f6:e6:53:ad:29:f3:d7:c1:de:31:17:4e:8b:15:
dd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BF:A0:14:42:88:24:FC:EE:71:D7:47:9D:DD:5C:AB:8F:CD:2A:62
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.164.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:70:4d:ca:bb:6d:9e:80:fa:86:af:f8:f7:d1:01:02:c8:83:
f2:28:4d:e2:67:eb:2c:aa:96:a4:5b:4a:8d:c0:8b:bc:c6:3e:
ee:e3:1b:fa:bd:d4:9a:c3:12:f3:f1:aa:b6:2d:a3:83:2e:8c:
a4:20:26:78:7f:70:3e:7b:62:63:27:b1:55:4c:0b:df:60:35:
8f:19:be:cd:0d:0a:f8:34:ef:52:d7:a0:1c:5a:a4:68:e2:de:
cd:f2:c6:f6:0d:6a:9a:97:f4:1f:be:31:f3:94:77:a1:42:b6:
43:48:c0:01:fd:db:85:e0:25:9a:08:dc:06:8e:ba:8d:cd:d9:
a5:b8:26:83:97:bb:c5:c5:e8:ce:4d:59:98:be:46:b8:30:72:
38:f1:6d:04:a9:a1:cb:f1:4a:e2:27:eb:9f:11:24:c4:12:1e:
0a:de:5b:99:11:51:86:a6:27:0d:dd:3d:72:9c:6b:0e:f1:53:
4c:59:57:bf:e2:d0:52:23:6f:4b:c1:78:dd:ff:8b:85:9e:e8:
e2:8c:63:a9:30:ac:c5:45:16:39:ad:f6:63:d0:75:56:f4:0a:
6b:81:95:64:b6:fe:fc:ee:59:59:4f:49:94:96:ef:fc:00:83:
64:45:8e:09:59:ac:72:ce:8d:f6:08:da:37:16:01:c2:be:51:
22:6c:7b:8e
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUKT0IJiCfV0j/xAUWXGwUt8Evr5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNTA5MTQwMDAzMDJaFw0yNjA5MTMwMDA4MDJaMDMxMTAvBgNV
BAMTKEVGQkZBMDE0NDI4ODI0RkNFRTcxRDc0NzlEREQ1Q0FCOEZDRDJBNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrcA0kK7Fdkd/+XSIvpT9zVZFT
CJgMph6ii2EZvcMX6yDrJdtkYDeV8iPIn5nDVHvepyARu2aFPy5hb28bW2OwwlSy
fbbAlV/6Mc/aUpf2Z2AyPCibsbm3rBAaClODoK9StB2HizMAntpD6Groa9+tLlB2
AvlEXfReCSZDJNSwrnc5WADFUoSvzVzD5O9OMAdZkTDcjsG2GwSCwmB+Ez3mx9S7
Ar8Y4hVhnBG0fKPkjOeco4/CskfioEhZICT5i6vNAQtLgS8vKwjS9DoGD6zFhzUg
4ki3/WWaEaUDli1zlkP8HUVztebnqRuorn61HmL25lOtKfPXwd4xF06LFd0VAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU77+gFEKIJPzucddHnd1cq4/NKmIwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzODM1MmUzMjM5MmUzMTM2
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5HaQw
DQYJKoZIhvcNAQELBQADggEBAA9wTcq7bZ6A+oav+PfRAQLIg/IoTeJn6yyqlqRb
So3Ai7zGPu7jG/q91JrDEvPxqrYto4MujKQgJnh/cD57YmMnsVVMC99gNY8Zvs0N
Cvg071LXoBxapGji3s3yxvYNapqX9B++MfOUd6FCtkNIwAH924XgJZoI3AaOuo3N
2aW4JoOXu8XF6M5NWZi+RrgwcjjxbQSpocvxSuIn658RJMQSHgreW5kRUYamJw3d
PXKcaw7xU0xZV7/i0FIjb0vBeN3/i4We6OKMY6kwrMVFFjmt9mPQdVb0CmuBlWS2
/vzuWVlPSZSW7/wAg2RFjglZrHLOjfYI2jcWAcK+USJse44=
-----END CERTIFICATE-----
Generated at Thu Sep 18 05:02:14 2025 by rpki-client