Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3137362e302f32342d3234203d3e203634323637.roa
File: 38302e38332e3137362e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier: v3n4nfSKnrSsBmSb59CV+A3GpZ3GskjMlySxQ1bPC6A=
Subject key identifier: 7D:C7:86:BE:74:E0:E2:4F:10:A5:EA:DC:D7:EF:36:99:EF:E5:57:20
Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724
Certificate serial: 5722A55CA02C5D50261D9483A94FB8D901CD4DDD
Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3137362e302f32342d3234203d3e203634323637.roa
Signing time: Fri 29 Aug 2025 08:14:01 +0000
ROA not before: Fri 29 Aug 2025 08:09:01 +0000
ROA not after: Fri 28 Aug 2026 08:14:01 +0000
asID: 64267
IP address blocks: 80.83.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:22:a5:5c:a0:2c:5d:50:26:1d:94:83:a9:4f:b8:d9:01:cd:4d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724
Validity
Not Before: Aug 29 08:09:01 2025 GMT
Not After : Aug 28 08:14:01 2026 GMT
Subject: CN=7DC786BE74E0E24F10A5EADCD7EF3699EFE55720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:92:09:eb:d3:07:c6:d6:84:d6:3c:7c:8c:30:
c6:3a:7e:d8:32:5e:09:b1:97:2e:1d:80:81:5d:31:
24:8d:8a:ee:83:3e:dc:68:8f:07:09:46:07:2a:52:
fa:3a:67:33:07:d3:12:91:11:98:83:8f:0a:2c:0a:
77:8c:48:50:c1:25:69:39:fc:29:92:13:d5:d9:48:
b9:ca:19:1d:a9:69:f7:72:44:c0:00:85:26:13:47:
57:29:64:ae:79:d9:29:ac:3a:59:c9:5f:d6:ef:9a:
14:57:1d:b7:72:25:bc:68:e0:2a:a8:02:d6:8b:0b:
77:f0:03:6d:ae:a0:9f:98:2b:d4:52:4d:95:5c:3a:
bd:9a:60:41:78:1c:9b:66:d5:20:01:16:57:dd:67:
01:a3:20:e1:7c:53:0f:57:4d:f7:eb:93:a8:a5:00:
29:22:6d:c3:2d:71:f9:61:37:fd:b2:6c:a1:eb:78:
2c:5b:a6:ae:f9:dd:46:71:51:12:9c:56:69:ad:4e:
5b:ab:3c:b5:05:68:cd:4c:48:71:d9:04:47:07:ac:
89:1a:65:28:37:3d:f8:e3:9d:f5:51:58:b2:66:59:
49:b1:03:65:0e:a2:fa:5a:d3:f4:23:df:c5:ff:85:
0e:fe:39:d8:8f:a9:b6:68:cc:3b:6a:0d:14:03:ed:
b6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C7:86:BE:74:E0:E2:4F:10:A5:EA:DC:D7:EF:36:99:EF:E5:57:20
X509v3 Authority Key Identifier:
keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3137362e302f32342d3234203d3e203634323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.176.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f8:88:71:ce:a9:32:a6:2f:1a:3a:b7:d6:06:fb:02:51:1a:
5e:29:34:ae:b0:22:ac:92:e8:8e:45:c3:31:25:93:54:be:7c:
a6:55:45:b9:41:e5:a9:53:66:90:73:e2:42:56:29:14:27:e4:
ab:2b:a6:7b:59:b0:4b:25:1e:15:19:d5:13:aa:c0:d6:00:54:
f9:a7:34:85:b7:d3:00:78:4a:f4:9b:f0:0d:cf:83:c3:99:4f:
15:27:2d:72:0a:80:c9:88:50:c0:e7:6b:37:79:ec:ec:6b:7e:
13:74:46:a3:2c:6b:a7:97:28:45:24:26:ea:6d:4e:cd:94:6e:
0c:7d:b5:dc:25:07:b0:2f:0a:88:6f:39:0f:18:33:91:9f:0c:
65:04:98:15:94:91:a4:e8:de:04:61:89:27:3f:cf:03:d4:33:
1a:4b:da:4a:3f:36:c6:10:26:02:27:41:6e:17:08:d7:b3:ae:
7b:54:48:63:51:33:0b:3e:4c:14:65:1c:bf:51:a9:cc:ff:3e:
4d:c3:fa:db:01:20:59:05:10:44:68:f7:7e:fe:5e:02:3a:ec:
56:4b:91:b4:42:54:8c:31:df:2a:a5:17:76:3b:f6:ec:48:f1:
59:c3:87:f4:54:19:41:66:24:0a:67:d3:07:d3:d2:57:e4:ae:
72:dc:51:59
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUVyKlXKAsXVAmHZSDqU+42QHNTd0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhkNjVkNGEyMmRmNzA1YmVlZDdiMzQzMmZiZTQ4YTM1
NjU5NzcyNDAeFw0yNTA4MjkwODA5MDFaFw0yNjA4MjgwODE0MDFaMDMxMTAvBgNV
BAMTKDdEQzc4NkJFNzRFMEUyNEYxMEE1RUFEQ0Q3RUYzNjk5RUZFNTU3MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1kgnr0wfG1oTWPHyMMMY6ftgy
Xgmxly4dgIFdMSSNiu6DPtxojwcJRgcqUvo6ZzMH0xKREZiDjwosCneMSFDBJWk5
/CmSE9XZSLnKGR2pafdyRMAAhSYTR1cpZK552SmsOlnJX9bvmhRXHbdyJbxo4Cqo
AtaLC3fwA22uoJ+YK9RSTZVcOr2aYEF4HJtm1SABFlfdZwGjIOF8Uw9XTffrk6il
ACkibcMtcflhN/2ybKHreCxbpq753UZxURKcVmmtTlurPLUFaM1MSHHZBEcHrIka
ZSg3PfjjnfVRWLJmWUmxA2UOovpa0/Qj38X/hQ7+OdiPqbZozDtqDRQD7bYfAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUfceGvnTg4k8Qperc1+82me/lVyAwHwYDVR0j
BBgwFoAUeNZdSiLfcFvu17NDL75Io1ZZdyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNWFkMTUtYWYwYi00NWNkLWI4ODMtMWEwNThmYTBl
YmExLzAvNzhENjVENEEyMkRGNzA1QkVFRDdCMzQzMkZCRTQ4QTM1NjU5NzcyNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VOWmRTaUxmY0Z2dTE3TkRMNzVJbzFa
WmR5US5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNWFkMTUt
YWYwYi00NWNkLWI4ODMtMWEwNThmYTBlYmExLzAvMzgzMDJlMzgzMzJlMzEzNzM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzNDMyMzYzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBT
sDANBgkqhkiG9w0BAQsFAAOCAQEAC/iIcc6pMqYvGjq31gb7AlEaXik0rrAirJLo
jkXDMSWTVL58plVFuUHlqVNmkHPiQlYpFCfkqyume1mwSyUeFRnVE6rA1gBU+ac0
hbfTAHhK9JvwDc+Dw5lPFSctcgqAyYhQwOdrN3ns7Gt+E3RGoyxrp5coRSQm6m1O
zZRuDH213CUHsC8KiG85DxgzkZ8MZQSYFZSRpOjeBGGJJz/PA9QzGkvaSj82xhAm
AidBbhcI17Oue1RIY1EzCz5MFGUcv1GpzP8+TcP62wEgWQUQRGj3fv5eAjrsVkuR
tEJUjDHfKqUXdjv27EjxWcOH9FQZQWYkCmfTB9PSV+SuctxRWQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:35:23 2025 by rpki-client