Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3137372e302f32342d3234203d3e20333937363330.roa
File: 38302e38332e3137372e302f32342d3234203d3e20333937363330.roa (raw, json)
Hash identifier: IULD9A1A9OLRGiO7kYBX30v1RwiyWnnOiGlSb6QpZ5M=
Subject key identifier: 7C:53:69:F6:A9:82:2B:DE:62:23:16:A2:DE:2C:29:D4:9B:AB:A5:D8
Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724
Certificate serial: 238C51C2CD1F03275FD2EBBB395605F3D56E94C3
Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3137372e302f32342d3234203d3e20333937363330.roa
Signing time: Fri 29 Aug 2025 08:14:02 +0000
ROA not before: Fri 29 Aug 2025 08:09:02 +0000
ROA not after: Fri 28 Aug 2026 08:14:02 +0000
asID: 397630
IP address blocks: 80.83.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:8c:51:c2:cd:1f:03:27:5f:d2:eb:bb:39:56:05:f3:d5:6e:94:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724
Validity
Not Before: Aug 29 08:09:02 2025 GMT
Not After : Aug 28 08:14:02 2026 GMT
Subject: CN=7C5369F6A9822BDE622316A2DE2C29D49BABA5D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8f:7c:cf:a1:0f:2f:b5:81:33:79:ae:6c:93:
e0:de:ee:a5:eb:63:e4:87:a4:ee:f6:aa:fe:5a:35:
41:b2:26:96:05:f1:96:43:6e:51:12:b2:81:64:be:
83:f7:42:83:42:6b:33:13:e0:35:21:e0:1b:f2:a1:
76:dc:b7:1c:2f:62:2e:9a:95:57:a1:ee:ab:4b:5c:
c9:27:f0:6a:f8:42:a6:87:4d:0f:7e:68:aa:18:9a:
10:19:05:24:51:80:d5:6c:e3:df:cf:c6:df:b4:a3:
83:67:6e:96:bd:8d:91:cf:bb:7e:7c:79:5c:be:f6:
0c:de:11:af:1d:c5:69:c1:fa:b1:7c:f6:10:e1:7e:
b6:15:ef:8f:73:48:27:51:0d:e9:8d:50:7f:af:99:
1f:45:26:5f:5d:0f:35:a7:41:17:cb:c4:3f:ac:67:
3d:1d:de:36:a2:57:30:72:b6:68:a3:d4:30:ee:1f:
c8:01:9d:73:b1:1d:4c:4a:ae:92:c4:be:e2:bd:3a:
95:21:18:bb:d3:de:f2:21:11:53:ee:c2:40:36:c9:
88:1e:6b:ba:c5:2d:da:c8:f8:72:25:fc:f6:3e:41:
58:36:eb:58:48:4a:e1:83:5b:2a:d4:31:96:2a:5b:
25:17:82:ee:1c:c5:fe:46:34:42:83:55:51:4f:08:
95:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:53:69:F6:A9:82:2B:DE:62:23:16:A2:DE:2C:29:D4:9B:AB:A5:D8
X509v3 Authority Key Identifier:
keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3137372e302f32342d3234203d3e20333937363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.177.0/24
Signature Algorithm: sha256WithRSAEncryption
09:e0:d1:c1:85:69:9c:8e:e8:ca:8c:b7:a9:53:55:43:f4:6c:
f5:1d:b5:08:3b:a7:a1:dc:28:55:a2:4b:18:60:87:15:49:db:
14:d0:35:a0:9e:f9:ee:c1:3e:cf:e5:9b:2b:33:4c:dd:93:65:
71:3b:86:dd:7a:7c:88:50:f3:56:2d:fe:75:88:6a:96:e8:ea:
3b:8d:a3:8b:e7:08:8c:6e:03:79:aa:3f:7c:42:a6:aa:50:3a:
93:f1:2b:46:e0:36:8c:1e:65:7d:13:c3:d2:10:c6:aa:ed:6c:
87:0f:cc:8a:73:5e:18:9c:fb:c8:ec:fc:8a:d0:22:9c:52:68:
48:0c:34:56:6d:cc:34:14:64:de:f2:57:71:b3:58:24:ef:a0:
b2:a0:3d:68:91:95:99:09:b2:70:ba:d7:87:30:99:3c:b2:f4:
54:f0:98:ce:8a:c4:24:1f:71:1c:05:e8:37:38:04:b8:b6:ca:
ab:2a:15:fa:7e:1a:ca:ca:45:d4:28:f2:0f:4b:e2:08:ef:c7:
c9:85:10:26:33:4e:86:f1:81:7b:b1:32:98:da:2c:07:72:3e:
89:23:6a:94:b2:f9:4c:60:08:8a:6d:e0:85:6f:b8:5f:c6:aa:
6b:12:50:81:d7:7b:1c:49:26:ef:2d:f5:d2:be:39:15:99:ef:
e2:4a:5c:cb
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUI4xRws0fAydf0uu7OVYF89VulMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhkNjVkNGEyMmRmNzA1YmVlZDdiMzQzMmZiZTQ4YTM1
NjU5NzcyNDAeFw0yNTA4MjkwODA5MDJaFw0yNjA4MjgwODE0MDJaMDMxMTAvBgNV
BAMTKDdDNTM2OUY2QTk4MjJCREU2MjIzMTZBMkRFMkMyOUQ0OUJBQkE1RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmj3zPoQ8vtYEzea5sk+De7qXr
Y+SHpO72qv5aNUGyJpYF8ZZDblESsoFkvoP3QoNCazMT4DUh4BvyoXbctxwvYi6a
lVeh7qtLXMkn8Gr4QqaHTQ9+aKoYmhAZBSRRgNVs49/Pxt+0o4Nnbpa9jZHPu358
eVy+9gzeEa8dxWnB+rF89hDhfrYV749zSCdRDemNUH+vmR9FJl9dDzWnQRfLxD+s
Zz0d3jaiVzBytmij1DDuH8gBnXOxHUxKrpLEvuK9OpUhGLvT3vIhEVPuwkA2yYge
a7rFLdrI+HIl/PY+QVg261hISuGDWyrUMZYqWyUXgu4cxf5GNEKDVVFPCJWTAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUfFNp9qmCK95iIxai3iwp1JurpdgwHwYDVR0j
BBgwFoAUeNZdSiLfcFvu17NDL75Io1ZZdyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNWFkMTUtYWYwYi00NWNkLWI4ODMtMWEwNThmYTBl
YmExLzAvNzhENjVENEEyMkRGNzA1QkVFRDdCMzQzMkZCRTQ4QTM1NjU5NzcyNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VOWmRTaUxmY0Z2dTE3TkRMNzVJbzFa
WmR5US5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNWFkMTUt
YWYwYi00NWNkLWI4ODMtMWEwNThmYTBlYmExLzAvMzgzMDJlMzgzMzJlMzEzNzM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM3MzYzMzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
UFOxMA0GCSqGSIb3DQEBCwUAA4IBAQAJ4NHBhWmcjujKjLepU1VD9Gz1HbUIO6eh
3ChVoksYYIcVSdsU0DWgnvnuwT7P5ZsrM0zdk2VxO4bdenyIUPNWLf51iGqW6Oo7
jaOL5wiMbgN5qj98QqaqUDqT8StG4DaMHmV9E8PSEMaq7WyHD8yKc14YnPvI7PyK
0CKcUmhIDDRWbcw0FGTe8ldxs1gk76CyoD1okZWZCbJwuteHMJk8svRU8JjOisQk
H3EcBeg3OAS4tsqrKhX6fhrKykXUKPIPS+II78fJhRAmM06G8YF7sTKY2iwHcj6J
I2qUsvlMYAiKbeCFb7hfxqprElCB13scSSbvLfXSvjkVme/iSlzL
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:42:16 2025 by rpki-client