Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3137362e302f32312d3234203d3e203534323532.roa
File: 38302e38332e3137362e302f32312d3234203d3e203534323532.roa (raw, json)
Hash identifier: cGbqfORPlckzvUVkRHuYFIgJ0jb5Y6OjErmTZnACBgY=
Subject key identifier: 90:7D:A4:76:F8:2A:AF:D0:57:E4:80:E1:3D:0C:8B:55:49:3D:78:14
Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724
Certificate serial: 361411F85074FC1D066AEA849AE204E9101644D7
Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3137362e302f32312d3234203d3e203534323532.roa
Signing time: Fri 29 Aug 2025 08:16:05 +0000
ROA not before: Fri 29 Aug 2025 08:11:05 +0000
ROA not after: Fri 28 Aug 2026 08:16:05 +0000
asID: 54252
IP address blocks: 80.83.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:14:11:f8:50:74:fc:1d:06:6a:ea:84:9a:e2:04:e9:10:16:44:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724
Validity
Not Before: Aug 29 08:11:05 2025 GMT
Not After : Aug 28 08:16:05 2026 GMT
Subject: CN=907DA476F82AAFD057E480E13D0C8B55493D7814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b5:1d:e1:55:a6:1c:cd:65:69:0b:ab:fd:89:
0f:c6:58:1b:40:1a:26:12:a5:f7:5a:93:30:e5:fd:
7c:22:d0:21:30:40:00:42:53:2f:04:53:d1:d4:ab:
77:37:bf:f8:28:a4:15:24:dd:83:da:55:1c:ac:e4:
cb:70:db:1c:02:09:66:c6:a2:2c:c9:05:e7:f6:a7:
31:39:a9:9b:a0:ad:54:39:47:c9:aa:9a:de:80:26:
a6:70:4e:c9:e2:19:cd:dc:ba:bd:32:0a:2d:41:5e:
10:8a:41:0e:3b:11:ae:e6:f6:0f:ac:02:bd:c3:f9:
62:81:ad:26:de:9e:a1:68:6e:ba:f6:9b:41:a4:af:
a9:2b:f1:8b:8a:be:2f:71:68:63:9e:67:86:83:8d:
11:8d:f7:20:c6:c0:8b:08:cf:4c:21:49:79:bd:56:
a1:81:04:7e:02:c5:31:b5:4e:67:89:cf:b9:c6:35:
4d:c6:9f:c2:49:a7:61:f9:6f:31:29:16:72:1f:31:
f7:01:e9:50:4d:ef:77:ba:c0:83:9f:9b:65:00:fb:
c3:69:8f:62:3d:1c:51:3f:e8:9d:6a:68:4f:45:c4:
e4:95:3d:10:e7:ae:2e:86:27:71:ce:89:ba:79:29:
9c:19:ec:8f:8b:71:ae:e8:92:27:18:05:69:38:d2:
b5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7D:A4:76:F8:2A:AF:D0:57:E4:80:E1:3D:0C:8B:55:49:3D:78:14
X509v3 Authority Key Identifier:
keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3137362e302f32312d3234203d3e203534323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.176.0/21
Signature Algorithm: sha256WithRSAEncryption
93:69:8c:a1:55:0e:6d:2c:c6:d8:1c:d5:5c:c9:b2:0f:35:c7:
8c:ce:12:70:e0:39:a8:1e:4b:b6:58:4f:b9:50:70:8b:ce:ff:
27:70:a1:e1:a7:1c:a2:17:fc:10:9f:ea:ca:33:6d:a0:ee:69:
71:b7:64:ee:a2:61:48:c3:ba:60:69:d1:ee:59:a1:97:26:06:
31:39:5d:17:a7:31:5c:91:33:64:38:e6:43:68:1d:cd:a7:32:
55:0a:2d:fd:4d:ec:e7:c9:d5:2b:ad:bd:2f:3d:8b:f1:5a:28:
4f:78:e4:b8:7f:d7:87:40:57:c5:83:be:1e:5f:43:94:93:97:
de:b2:8d:40:ca:25:7e:1b:93:05:35:d5:19:d7:51:37:b6:6e:
57:54:40:c2:99:f7:dd:5a:a0:97:3c:ea:a4:85:0d:87:93:91:
24:b4:9a:84:e7:b1:8b:f0:0b:07:26:d0:b7:b9:f5:8e:5f:35:
18:a0:03:b5:1a:39:01:56:21:58:92:19:c6:ff:fc:08:b2:8e:
37:a1:f2:68:32:4f:71:66:1d:fe:fb:97:72:bc:7e:a5:b2:9b:
29:8e:49:63:d9:5c:ea:98:5e:b8:fa:b3:10:f6:1c:c6:a7:19:
40:91:86:e3:6b:af:d1:9b:89:e8:01:ff:93:b3:9d:ac:f2:84:
a9:55:9a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:08:19 2025 by rpki-client