Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34302e302f32342d3234203d3e20313335333931.roa
File: 3134312e39382e34302e302f32342d3234203d3e20313335333931.roa (raw, json)
Hash identifier: KIrJ+OxXjbpHnzzrfeXUxWbfPUX2jRDJASLLdltH2j8=
Subject key identifier: 05:98:05:71:24:D1:0C:F2:50:3C:DC:9D:C4:9D:22:9D:46:F4:27:FD
Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Certificate serial: 25172889D7AFB7284BB8106D625D05EB56ED2610
Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34302e302f32342d3234203d3e20313335333931.roa
Signing time: Tue 09 Sep 2025 06:29:28 +0000
ROA not before: Tue 09 Sep 2025 06:24:28 +0000
ROA not after: Tue 08 Sep 2026 06:29:28 +0000
asID: 135391
IP address blocks: 141.98.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 19:28:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:17:28:89:d7:af:b7:28:4b:b8:10:6d:62:5d:05:eb:56:ed:26:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Validity
Not Before: Sep 9 06:24:28 2025 GMT
Not After : Sep 8 06:29:28 2026 GMT
Subject: CN=0598057124D10CF2503CDC9DC49D229D46F427FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ea:f2:55:54:47:7b:ce:72:bf:b1:98:b6:6c:
44:ca:ba:19:32:0d:25:b3:ad:91:24:81:2f:fe:11:
32:c8:1a:38:ce:80:a9:d4:54:a3:11:12:34:93:8c:
b2:4f:6f:70:29:5b:09:ed:a5:d5:5e:ca:b4:36:6b:
e2:10:45:7a:b6:7f:ab:57:b1:7b:fd:0e:fd:1f:66:
42:70:1d:74:2f:40:ca:6b:bc:6b:fd:2e:3f:17:a5:
f4:53:e5:03:6f:b6:f7:7d:cb:a2:47:bb:10:0d:60:
20:25:33:d7:0b:1d:de:7c:da:dd:43:10:62:89:05:
cc:80:09:a7:f6:09:1c:83:29:59:5b:26:e5:5b:ac:
74:1b:aa:a4:68:e2:d4:2c:14:a5:a2:a9:6b:9e:49:
3b:f6:81:2d:32:be:1a:93:74:f7:92:75:e2:41:73:
63:fb:47:0b:98:b0:24:bd:d9:f1:6d:2b:f8:1d:85:
59:46:4e:35:fd:eb:a7:76:10:29:9c:eb:ac:05:69:
11:7f:05:40:52:ae:fc:7c:a2:d5:8b:ac:68:91:99:
02:d9:93:31:37:00:0c:1f:7d:9b:76:c8:e9:b4:3d:
87:79:24:fd:2c:09:01:06:25:c9:ab:9b:5e:18:67:
67:23:2e:19:03:5a:e1:9a:86:d1:8d:fb:4d:50:56:
48:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:98:05:71:24:D1:0C:F2:50:3C:DC:9D:C4:9D:22:9D:46:F4:27:FD
X509v3 Authority Key Identifier:
keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34302e302f32342d3234203d3e20313335333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.40.0/24
Signature Algorithm: sha256WithRSAEncryption
92:40:7e:e9:4d:12:68:f4:c9:d2:5e:47:00:88:52:2b:71:24:
5d:57:bd:9d:47:25:c7:03:8e:0a:4a:ba:81:b9:7a:c8:50:12:
9d:60:be:21:9c:ed:7f:84:f7:9a:cc:e5:f2:c3:be:c7:6e:c0:
d7:eb:c9:4c:6a:42:13:28:53:a1:81:4c:85:70:fc:00:e0:e2:
bf:f7:c0:a7:4c:2d:47:94:2e:9b:62:b9:25:94:bc:0b:b1:a3:
1a:9a:ec:1e:07:8f:f9:fc:f5:b1:c9:bb:ad:ec:d8:d4:00:68:
ed:d5:05:5d:aa:0f:14:89:72:b2:48:20:a9:4d:be:41:d2:28:
9d:d8:33:2a:37:e5:55:aa:88:83:8f:57:fc:a9:18:35:37:60:
89:7f:9f:d0:4e:5e:eb:b8:d0:59:65:20:0c:10:0c:8b:cb:cc:
22:55:df:4a:45:72:9a:08:84:af:39:18:2a:be:46:04:60:0b:
55:8b:db:f1:4e:b0:35:78:4a:72:e3:8e:1c:2f:d7:98:55:7c:
01:fc:70:1c:30:76:0c:11:43:2e:c6:68:33:6a:df:08:43:17:
a8:c3:5b:dd:58:9b:a5:a0:4e:28:d1:59:34:4e:72:39:59:b1:
aa:3a:ce:16:4e:9f:4f:6a:c8:e3:bc:ba:0c:6b:c2:a9:2b:ba:
ce:00:2f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:07:06 2025 by rpki-client