Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3137392e302f32342d3234203d3e203534323532.roa
File: 38302e38332e3137392e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier: IifstHokg8yc+JHn2I7TbwUV5xXrQGC/LeARAmW57vM=
Subject key identifier: 1C:CF:A8:DF:EC:2C:C3:59:73:74:8A:5A:76:7E:50:50:96:F6:14:D2
Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724
Certificate serial: 4F9F049FD2FC6C63C087088F7F9771E9564C854E
Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3137392e302f32342d3234203d3e203534323532.roa
Signing time: Fri 29 Aug 2025 08:14:01 +0000
ROA not before: Fri 29 Aug 2025 08:09:01 +0000
ROA not after: Fri 28 Aug 2026 08:14:01 +0000
asID: 54252
IP address blocks: 80.83.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:9f:04:9f:d2:fc:6c:63:c0:87:08:8f:7f:97:71:e9:56:4c:85:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724
Validity
Not Before: Aug 29 08:09:01 2025 GMT
Not After : Aug 28 08:14:01 2026 GMT
Subject: CN=1CCFA8DFEC2CC35973748A5A767E505096F614D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:03:39:29:37:d5:bf:c3:3b:4d:c7:cb:5f:49:
fa:b2:cb:fd:2d:fe:e4:9c:28:db:dc:6a:4d:6a:a4:
52:11:90:56:eb:89:3d:63:ea:56:89:97:dd:39:e1:
3f:48:5a:a1:0d:c6:3c:75:80:4b:e1:2e:c9:bc:e0:
56:b5:fe:07:cf:b6:8f:75:b8:85:8d:46:f8:4e:20:
03:56:27:60:3f:cb:13:a2:8c:07:d4:a8:8c:20:96:
9a:f5:d5:7b:51:93:ba:27:20:5f:3a:b4:3b:3b:b5:
5d:35:0c:d1:5e:5e:97:e0:eb:de:fb:92:48:18:4e:
92:53:ef:12:1b:1d:4a:58:e5:d5:73:10:e7:ca:21:
c8:57:97:b7:85:88:4c:8c:e7:af:1f:d5:80:76:4b:
48:36:e5:9a:05:d4:55:3e:e6:99:a2:3d:ea:36:e7:
a5:24:19:db:a1:9a:2c:21:de:da:82:f7:ec:ad:6b:
fc:03:c6:1a:92:ca:53:d6:3d:d6:ca:93:ad:5b:b9:
4c:ff:21:aa:0b:a3:56:c2:1d:5a:84:39:60:de:46:
50:a1:e0:2f:18:77:64:ce:94:23:84:86:9f:37:a6:
2f:de:f2:d1:76:c8:b4:90:29:a1:01:8a:af:ca:a0:
d5:6c:69:ff:e0:05:5f:31:30:42:81:80:9a:25:d9:
65:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CF:A8:DF:EC:2C:C3:59:73:74:8A:5A:76:7E:50:50:96:F6:14:D2
X509v3 Authority Key Identifier:
keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3137392e302f32342d3234203d3e203534323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.179.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:6d:89:c0:e6:f2:4e:8a:9e:88:7a:31:0e:f1:51:b8:45:c1:
99:33:51:32:08:6d:75:e5:99:39:8b:36:98:9c:5a:6c:e5:46:
19:ff:9f:bf:f1:3c:a4:39:0a:af:11:25:d9:41:2c:d1:b7:86:
5e:25:d9:dd:17:3f:3b:e8:7b:8e:9b:61:7d:9b:51:c0:1b:fb:
29:7b:4a:0e:0e:15:5e:5f:e5:d7:2e:48:26:ed:05:57:e9:71:
51:0f:f9:e5:b8:38:51:2a:ab:82:2d:6e:fd:d5:67:0c:11:49:
01:6b:a0:7e:56:84:a5:a1:01:1a:9d:30:2c:37:58:ee:cc:b4:
7a:6e:64:17:d0:03:30:17:b9:10:c8:8f:4d:f6:40:83:39:f6:
2d:3a:a7:7e:fd:62:ff:b6:b0:72:80:4d:7d:5f:43:04:12:42:
c4:0e:56:44:e0:bb:db:93:c5:6e:64:13:8d:73:a2:4b:4b:5c:
c5:4e:29:44:c6:bd:e4:5f:aa:9b:71:ab:e6:93:c7:6c:1e:0a:
6d:3b:a1:e5:6d:41:f3:9c:84:e5:16:57:e4:90:de:24:99:00:
19:a4:4d:5c:b3:6e:1c:c0:32:8e:8f:7a:46:eb:4b:4a:fe:93:
82:42:5c:ad:4b:f5:dc:56:19:f3:d6:75:ed:0d:fe:89:08:ff:
97:d4:3c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:11:49 2025 by rpki-client