Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/3138352e36392e322e302f32342d3234203d3e203539373136.roa
File: 3138352e36392e322e302f32342d3234203d3e203539373136.roa (raw, json)
Hash identifier: C4vtZUJ4sSvWQ2xt2gUpLOR/9kh093F6GFa+cSWJX6U=
Subject key identifier: 76:CA:F7:DC:0C:92:D5:61:83:9B:95:59:F6:21:38:D4:E6:7A:A0:27
Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724
Certificate serial: 4726A0923CECE15DFE173DFE3CEAC149564AB00E
Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/3138352e36392e322e302f32342d3234203d3e203539373136.roa
Signing time: Fri 29 Aug 2025 08:14:01 +0000
ROA not before: Fri 29 Aug 2025 08:09:01 +0000
ROA not after: Fri 28 Aug 2026 08:14:01 +0000
asID: 59716
IP address blocks: 185.69.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:26:a0:92:3c:ec:e1:5d:fe:17:3d:fe:3c:ea:c1:49:56:4a:b0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724
Validity
Not Before: Aug 29 08:09:01 2025 GMT
Not After : Aug 28 08:14:01 2026 GMT
Subject: CN=76CAF7DC0C92D561839B9559F62138D4E67AA027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:88:cf:36:7c:42:0f:2a:d4:9d:24:7b:fd:b2:
82:c0:13:e4:a3:ec:e3:4e:77:b5:88:ec:66:8d:0c:
5d:f9:cd:9d:c6:a9:b1:25:38:f4:4b:5d:fc:4a:64:
d7:ec:ed:97:b5:ad:ec:9e:f7:6c:4e:fc:83:04:73:
eb:35:90:0c:92:d2:fb:3f:10:7f:44:fc:14:c8:54:
4e:40:90:76:90:61:6a:31:98:e2:94:17:10:7c:f0:
7f:c4:4b:aa:8c:c1:49:3c:0e:dd:07:ee:63:13:ac:
7d:62:e2:89:2d:6c:bb:b3:ad:d1:52:64:5a:93:94:
2d:3e:54:ec:25:85:5d:a8:fc:2a:08:e8:8d:d3:d8:
d9:bd:37:63:61:f2:91:b1:4b:5a:9f:66:e9:d2:51:
3a:91:52:32:db:e2:b5:ea:a0:69:08:38:a3:77:4a:
84:8e:ed:a4:92:85:55:8d:79:0f:c6:7d:46:83:76:
c2:6f:7d:6f:f6:5f:12:56:f0:22:62:51:60:7f:54:
09:8f:6c:c1:13:e6:9c:99:35:6e:40:02:cb:8c:c6:
6c:fa:6a:b5:c0:53:8a:08:ff:b1:16:74:ea:21:2f:
4c:d2:96:d5:cd:99:a6:a9:0c:4f:48:e0:49:69:a7:
41:e4:57:57:7b:98:c7:02:39:fc:87:64:87:95:d3:
5c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CA:F7:DC:0C:92:D5:61:83:9B:95:59:F6:21:38:D4:E6:7A:A0:27
X509v3 Authority Key Identifier:
keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/3138352e36392e322e302f32342d3234203d3e203539373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.2.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:be:5f:d3:6b:01:a9:f8:86:30:0d:0a:0e:46:33:57:94:6b:
db:09:58:5c:5b:1c:72:7c:7a:e9:19:b1:79:09:3c:9f:e0:c3:
e7:04:a5:78:86:b6:77:77:8f:15:76:46:83:c0:70:ef:66:b1:
3c:48:a3:0f:55:14:53:d7:7b:79:3b:09:a9:e7:2b:01:fa:f0:
3a:bd:5d:c6:12:bd:b1:2c:cd:31:32:69:a0:9e:29:2b:97:15:
c5:d5:b1:34:34:a6:f3:bf:33:ef:7f:5d:05:6c:4b:a1:ba:f5:
2e:d6:e0:9b:1d:fa:95:11:cf:3e:96:5a:0e:c1:b5:b0:1d:fd:
3d:6e:7e:87:89:ad:c6:42:ac:e1:7c:c8:00:64:54:39:71:ae:
a9:4f:06:6a:3c:23:df:49:0a:ef:f7:ff:3a:59:1c:1f:19:4f:
6d:13:6d:41:e8:ab:ef:13:9a:9a:d1:55:ac:9f:3a:1c:b8:c9:
54:3a:c8:17:3e:44:a7:9f:c1:60:f8:1e:2d:e9:94:8a:82:49:
c0:fa:9a:5b:90:cc:ac:a1:bb:91:96:cf:e0:e0:12:06:20:9d:
78:be:f5:1a:f1:7a:47:8d:86:ab:d7:a1:68:72:5c:39:75:f6:
1b:b1:03:1f:33:91:e5:21:e1:fb:ad:90:62:d0:a8:1e:f2:6a:
83:a4:e8:40
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIURyagkjzs4V3+Fz3+POrBSVZKsA4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhkNjVkNGEyMmRmNzA1YmVlZDdiMzQzMmZiZTQ4YTM1
NjU5NzcyNDAeFw0yNTA4MjkwODA5MDFaFw0yNjA4MjgwODE0MDFaMDMxMTAvBgNV
BAMTKDc2Q0FGN0RDMEM5MkQ1NjE4MzlCOTU1OUY2MjEzOEQ0RTY3QUEwMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwiM82fEIPKtSdJHv9soLAE+Sj
7ONOd7WI7GaNDF35zZ3GqbElOPRLXfxKZNfs7Ze1reye92xO/IMEc+s1kAyS0vs/
EH9E/BTIVE5AkHaQYWoxmOKUFxB88H/ES6qMwUk8Dt0H7mMTrH1i4oktbLuzrdFS
ZFqTlC0+VOwlhV2o/CoI6I3T2Nm9N2Nh8pGxS1qfZunSUTqRUjLb4rXqoGkIOKN3
SoSO7aSShVWNeQ/GfUaDdsJvfW/2XxJW8CJiUWB/VAmPbMET5pyZNW5AAsuMxmz6
arXAU4oI/7EWdOohL0zSltXNmaapDE9I4Elpp0HkV1d7mMcCOfyHZIeV01zbAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUdsr33AyS1WGDm5VZ9iE41OZ6oCcwHwYDVR0j
BBgwFoAUeNZdSiLfcFvu17NDL75Io1ZZdyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNWFkMTUtYWYwYi00NWNkLWI4ODMtMWEwNThmYTBl
YmExLzAvNzhENjVENEEyMkRGNzA1QkVFRDdCMzQzMkZCRTQ4QTM1NjU5NzcyNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VOWmRTaUxmY0Z2dTE3TkRMNzVJbzFa
WmR5US5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNWFkMTUt
YWYwYi00NWNkLWI4ODMtMWEwNThmYTBlYmExLzAvMzEzODM1MmUzNjM5MmUzMjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzkzNzMxMzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5RQIw
DQYJKoZIhvcNAQELBQADggEBAF2+X9NrAan4hjANCg5GM1eUa9sJWFxbHHJ8eukZ
sXkJPJ/gw+cEpXiGtnd3jxV2RoPAcO9msTxIow9VFFPXe3k7CannKwH68Dq9XcYS
vbEszTEyaaCeKSuXFcXVsTQ0pvO/M+9/XQVsS6G69S7W4Jsd+pURzz6WWg7BtbAd
/T1ufoeJrcZCrOF8yABkVDlxrqlPBmo8I99JCu/3/zpZHB8ZT20TbUHoq+8TmprR
VayfOhy4yVQ6yBc+RKefwWD4Hi3plIqCScD6mluQzKyhu5GWz+DgEgYgnXi+9Rrx
ekeNhqvXoWhyXDl19huxAx8zkeUh4futkGLQqB7yaoOk6EA=
-----END CERTIFICATE-----
Generated at Mon Sep 8 06:08:29 2025 by rpki-client