Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3137362e302f32312d3234203d3e20333937363330.roa
File: 38302e38332e3137362e302f32312d3234203d3e20333937363330.roa (raw, json)
Hash identifier: lzbMeQ40oA7sEOOFDRInjFc7wOpVvTaJSxNIUb9X6IE=
Subject key identifier: 55:1F:E1:13:BD:6C:61:43:4A:0D:36:12:CF:4D:8E:76:4C:C2:54:0E
Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724
Certificate serial: 56DA6759F53C3C6A8DED143D2D4EE01EEFB4421B
Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3137362e302f32312d3234203d3e20333937363330.roa
Signing time: Fri 29 Aug 2025 08:15:49 +0000
ROA not before: Fri 29 Aug 2025 08:10:49 +0000
ROA not after: Fri 28 Aug 2026 08:15:49 +0000
asID: 397630
IP address blocks: 80.83.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:da:67:59:f5:3c:3c:6a:8d:ed:14:3d:2d:4e:e0:1e:ef:b4:42:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724
Validity
Not Before: Aug 29 08:10:49 2025 GMT
Not After : Aug 28 08:15:49 2026 GMT
Subject: CN=551FE113BD6C61434A0D3612CF4D8E764CC2540E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:da:9b:e2:09:07:de:b4:7f:56:88:2d:36:
88:9e:89:aa:c8:5b:36:ec:33:3b:24:1f:88:8d:db:
7e:32:a8:91:5c:24:a9:d7:62:8d:9a:3b:04:dc:4c:
85:d3:f2:65:31:c5:f4:7f:91:a2:47:18:c3:fb:c3:
28:84:f2:74:42:f6:ad:a4:c8:9c:e0:d1:31:50:50:
a8:17:87:3f:63:1a:fc:1a:e7:e9:61:cc:bb:25:e1:
86:76:25:d1:96:cb:df:0a:c7:e0:ac:75:1f:00:9c:
0c:d1:4e:f4:9f:e9:2c:c1:72:81:7f:62:72:54:0b:
56:14:3b:bf:eb:ce:5b:3b:34:9d:c5:19:50:f5:22:
14:e6:3f:67:0e:74:16:3a:39:79:1e:ba:71:15:03:
9d:45:eb:6c:5d:67:ef:95:fa:02:87:ac:01:c4:d4:
2a:f6:b1:17:f5:78:fd:08:94:40:f2:0e:b3:74:c1:
fe:4e:ab:5a:f4:35:9e:db:2d:e7:f0:ef:2f:2e:5a:
95:d0:4e:e6:70:4b:de:c9:cf:85:36:85:7c:bb:a4:
ca:bf:ef:0d:40:c3:18:6c:70:6e:37:88:ef:39:ad:
70:f6:ec:fa:71:ff:ca:82:be:35:53:47:71:ad:ca:
04:6a:ac:5f:78:66:04:9b:a3:74:26:e4:58:a6:ad:
97:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1F:E1:13:BD:6C:61:43:4A:0D:36:12:CF:4D:8E:76:4C:C2:54:0E
X509v3 Authority Key Identifier:
keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3137362e302f32312d3234203d3e20333937363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.176.0/21
Signature Algorithm: sha256WithRSAEncryption
8b:60:07:84:5d:fe:65:ef:bd:ac:0a:6a:d7:8a:5b:d1:ed:5f:
c2:0a:0f:e2:7c:8b:5e:23:26:3b:db:06:b6:41:12:c8:f3:dc:
68:ff:fc:b5:ef:65:eb:99:c8:92:22:69:95:e7:78:8e:c8:3b:
3f:27:cb:f9:df:49:a7:4b:08:57:7b:3f:96:6f:94:1d:bd:5f:
69:2e:4a:59:a6:cd:3a:f4:bb:f2:fc:14:43:3f:6b:21:95:6a:
76:3c:e0:f0:3f:ef:11:b3:0b:aa:b3:95:49:2f:c9:fb:dd:3b:
fb:30:38:d6:27:a7:40:76:46:fb:9b:3f:f2:df:5f:24:77:8f:
f5:4f:ad:24:d4:ed:90:f5:a6:e0:f0:ff:3c:28:76:35:5b:3d:
48:2d:e3:74:9b:a4:f3:f7:e0:4b:cd:1c:d0:ca:2e:f7:26:ab:
a3:66:fc:e0:a4:14:97:6e:fb:f9:5d:93:67:75:8a:d9:a1:d8:
e6:36:eb:f7:26:62:03:ad:c9:13:9f:a6:d5:67:0d:35:77:06:
8f:8c:29:ff:01:1a:e0:99:0c:1d:c2:c4:d0:58:2a:99:15:f6:
8a:16:02:9b:86:fb:8c:5c:7a:3e:77:11:f2:b8:2f:48:ba:6c:
5b:74:72:f1:06:6d:ff:15:0a:92:35:68:40:4b:73:61:46:30:
f1:db:bd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:42:26 2025 by rpki-client