Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3137362e302f32312d3234203d3e203634323637.roa
File: 38302e38332e3137362e302f32312d3234203d3e203634323637.roa (raw, json)
Hash identifier: 3WAeirep28tPwJsqlgDcTH3CQnOLwnyzBRbZOE/IkCM=
Subject key identifier: 3F:E1:E1:70:A0:78:D8:70:40:BB:03:E0:B3:29:69:8A:37:19:64:B9
Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724
Certificate serial: 361665B85D433A8BCF7D9986BB7A7FD05200CF39
Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3137362e302f32312d3234203d3e203634323637.roa
Signing time: Fri 29 Aug 2025 08:15:32 +0000
ROA not before: Fri 29 Aug 2025 08:10:32 +0000
ROA not after: Fri 28 Aug 2026 08:15:32 +0000
asID: 64267
IP address blocks: 80.83.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:16:65:b8:5d:43:3a:8b:cf:7d:99:86:bb:7a:7f:d0:52:00:cf:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724
Validity
Not Before: Aug 29 08:10:32 2025 GMT
Not After : Aug 28 08:15:32 2026 GMT
Subject: CN=3FE1E170A078D87040BB03E0B329698A371964B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:fe:a0:67:58:d4:4f:e3:77:46:3b:2d:2a:
3b:2b:70:54:db:0b:f7:fa:d7:5c:65:d6:cc:df:a5:
2a:61:df:d6:3c:9f:37:58:1b:6d:a2:d0:b7:ce:c2:
f2:20:22:bf:dc:fa:e7:b3:55:33:0f:a8:82:45:55:
c1:af:f3:65:5c:28:fe:e9:9d:6e:ec:14:5a:0f:2a:
d3:b8:2a:c1:b5:a3:1e:c3:0e:11:9a:60:4e:25:af:
fa:eb:fa:13:5f:db:a4:4d:cd:1d:c0:0a:b5:26:00:
8b:2d:68:b7:e3:de:0c:8f:8c:c8:e7:53:51:4d:34:
a5:ca:39:0c:57:d9:de:3c:d2:d1:ac:58:86:ee:7b:
02:81:54:e4:91:36:2e:bb:b9:46:57:36:f3:78:aa:
bb:b0:d4:cc:0c:97:81:87:f4:81:60:ae:c1:03:9a:
a8:8c:ac:c5:e0:0d:72:eb:1f:10:57:df:c2:41:70:
76:41:a6:7a:61:08:18:81:7f:04:41:d2:81:de:e3:
f2:75:ba:a6:4b:22:e8:2b:be:7f:fd:66:c9:48:e0:
da:54:00:3c:6b:8f:88:e5:7c:ef:77:0e:60:db:74:
90:88:a3:ce:fb:22:03:9f:01:76:80:6a:d4:26:29:
60:4c:90:0f:d8:a6:a6:3f:20:51:d5:22:87:a2:4d:
70:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E1:E1:70:A0:78:D8:70:40:BB:03:E0:B3:29:69:8A:37:19:64:B9
X509v3 Authority Key Identifier:
keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3137362e302f32312d3234203d3e203634323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.176.0/21
Signature Algorithm: sha256WithRSAEncryption
ab:9b:1b:99:e1:e6:7a:8e:d8:e3:1a:62:08:43:98:38:83:d6:
9a:c2:02:ae:8d:5b:a6:99:1c:57:c9:5e:1a:df:5a:15:e8:22:
54:7b:d1:c9:be:d9:ba:3a:0e:0e:8a:e3:09:35:c7:63:99:03:
b4:c7:92:9a:49:a9:45:43:a7:e5:b6:4a:6f:98:99:38:ae:fe:
97:3b:9f:86:73:00:c1:19:8c:f7:56:18:bb:1e:2c:24:6e:84:
6a:49:7d:ec:5d:ed:81:73:71:80:51:f7:81:1f:84:aa:f7:67:
22:fa:fb:fe:be:87:82:53:3d:53:cc:af:e8:cd:73:9d:ef:2e:
82:53:71:e3:fd:1b:3b:51:7e:f1:c4:a9:af:88:c9:fa:05:0c:
10:d2:36:78:9b:63:f7:ac:1c:7a:4d:26:b7:2f:1f:58:3a:3d:
4d:2d:37:f5:2b:0a:10:b0:79:70:a6:c1:8a:d9:55:18:f9:8c:
e9:1e:88:94:66:dc:6f:2b:4d:54:96:f6:93:6d:57:9d:00:bc:
0f:e6:19:7b:ab:64:95:39:0a:47:2d:7d:77:44:7d:f4:df:ab:
d6:6f:ab:0f:45:af:1d:75:9a:53:5e:c0:33:68:ce:3e:b5:2c:
81:32:f5:93:dc:e4:11:2d:eb:a0:9a:bf:9b:91:91:3d:4a:ae:
58:ba:ef:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:35:34 2025 by rpki-client