Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/3138352e3139302e3233302e302f32332d3233203d3e20383334.roa
File: 3138352e3139302e3233302e302f32332d3233203d3e20383334.roa (raw, json)
Hash identifier: eLnp9xbWzQy8+riuHENjho7TBbXl2Hx1/6Vkaczbghg=
Subject key identifier: C6:2E:6E:88:63:2A:FC:E2:D3:66:F9:C5:DD:B6:82:D4:03:F2:B5:B7
Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724
Certificate serial: 0218A3A13117F37B80B54857738B500FE020D855
Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/3138352e3139302e3233302e302f32332d3233203d3e20383334.roa
Signing time: Fri 29 Aug 2025 08:14:01 +0000
ROA not before: Fri 29 Aug 2025 08:09:01 +0000
ROA not after: Fri 28 Aug 2026 08:14:01 +0000
asID: 834
IP address blocks: 185.190.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:18:a3:a1:31:17:f3:7b:80:b5:48:57:73:8b:50:0f:e0:20:d8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724
Validity
Not Before: Aug 29 08:09:01 2025 GMT
Not After : Aug 28 08:14:01 2026 GMT
Subject: CN=C62E6E88632AFCE2D366F9C5DDB682D403F2B5B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ff:a8:0e:88:bd:65:b3:2d:90:f7:36:ee:4d:
80:af:81:7c:2e:d7:d6:bd:34:ac:b7:bd:93:e8:76:
d4:57:8a:84:ba:58:db:45:5f:6e:e1:e3:18:47:71:
81:34:8e:90:57:1b:9f:95:bf:4c:22:65:aa:2c:cd:
0a:a2:ba:8b:d2:ad:94:f2:81:b9:9a:7e:bc:ba:db:
c4:40:e9:8a:76:ca:17:1f:91:47:a7:41:43:8b:55:
00:53:8c:d9:99:a2:72:51:a3:c8:f5:22:82:b3:38:
80:eb:ec:60:c6:e5:ba:96:f7:99:d3:26:cc:b5:51:
54:ef:b1:8c:8a:5a:bc:43:9a:11:da:4a:be:9d:54:
ac:24:aa:9c:ff:a9:a2:8d:c4:33:69:a3:05:ce:35:
24:d0:d2:93:25:ef:88:12:b4:82:fb:88:79:1e:c9:
4d:86:97:19:a0:fa:2e:3e:ac:50:99:4d:06:14:dd:
c9:5d:b4:2d:8f:0b:56:ce:55:7a:cc:c8:d9:90:e5:
08:cb:3b:47:0d:64:6e:7a:59:b5:29:13:fc:5f:73:
aa:ba:5f:24:df:8a:a2:64:9a:c7:22:e7:a4:26:6d:
3e:86:19:54:50:d7:f8:e7:a5:a7:c8:0b:c8:09:69:
36:75:93:7e:39:38:6f:97:16:be:f9:f7:d3:c4:a3:
a5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2E:6E:88:63:2A:FC:E2:D3:66:F9:C5:DD:B6:82:D4:03:F2:B5:B7
X509v3 Authority Key Identifier:
keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/3138352e3139302e3233302e302f32332d3233203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.230.0/23
Signature Algorithm: sha256WithRSAEncryption
60:3a:f6:ca:fa:c6:7c:ad:55:50:c4:43:b7:95:c1:d1:d9:f8:
2b:04:28:c5:09:17:1d:22:22:15:89:2f:96:b0:6f:ab:7e:8a:
69:2c:39:93:a8:21:0f:d1:f4:8d:ae:a0:89:77:2e:20:fb:78:
d6:9a:07:57:39:aa:1d:ea:ed:92:b3:47:65:10:07:85:a0:2a:
85:42:64:dd:b6:25:de:fd:13:2d:21:d1:ad:26:e5:e1:01:67:
03:17:99:ed:7f:31:0a:9f:41:d7:ad:94:7f:b0:0b:f8:81:be:
37:f4:d5:e0:df:79:76:59:e4:9d:63:8e:98:3e:cd:f6:7a:2e:
ac:40:0b:5d:9a:ef:4f:46:c2:61:41:c0:99:a8:68:52:a5:66:
bd:56:a6:37:66:a8:ea:61:5a:f3:b0:73:7f:5a:11:bc:0c:a6:
cf:10:79:c7:30:12:35:83:8d:5e:46:aa:99:85:90:4e:aa:ec:
c2:ff:2c:4a:93:7c:61:57:15:c3:94:42:0a:31:20:a1:65:51:
2d:34:53:86:73:76:8a:7d:1f:bd:80:3e:1a:77:d4:ff:e6:8a:
a3:79:50:aa:64:d4:33:e4:5b:8c:4a:38:4e:ec:7d:61:6c:b8:
26:5a:36:b7:05:6f:2e:f1:70:a9:8a:eb:25:ab:90:96:37:8c:
b0:d8:4a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:10:55 2025 by rpki-client