Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3138302e302f32342d3234203d3e203634323637.roa
File: 38302e38332e3138302e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier: bBpw+0NCEjXjwR1dg1ZSItWny3Lzs9YL7JgG2Kj4ta4=
Subject key identifier: 0F:74:A3:19:26:52:BD:4D:07:E8:DF:C2:34:FB:73:C8:BC:8D:5D:7B
Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724
Certificate serial: 3CC4DDF696C8BD7DE5BAB22CA8E7F44DD899CB0B
Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3138302e302f32342d3234203d3e203634323637.roa
Signing time: Fri 29 Aug 2025 08:14:01 +0000
ROA not before: Fri 29 Aug 2025 08:09:01 +0000
ROA not after: Fri 28 Aug 2026 08:14:01 +0000
asID: 64267
IP address blocks: 80.83.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:c4:dd:f6:96:c8:bd:7d:e5:ba:b2:2c:a8:e7:f4:4d:d8:99:cb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724
Validity
Not Before: Aug 29 08:09:01 2025 GMT
Not After : Aug 28 08:14:01 2026 GMT
Subject: CN=0F74A3192652BD4D07E8DFC234FB73C8BC8D5D7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:8d:e8:95:43:22:f0:05:8b:08:40:19:6c:
00:91:11:04:92:02:46:f9:6e:cc:32:84:ee:bb:b5:
c4:9e:c8:55:b5:c1:41:1d:2f:7a:1f:0d:ee:65:3b:
ec:c9:9c:23:92:21:aa:35:13:bb:39:77:af:ee:82:
61:85:e2:08:2d:f3:6b:ea:39:92:42:db:3b:12:8c:
b5:5e:2a:73:b6:67:0d:2f:f4:2f:28:ca:ea:1f:2b:
b7:1d:2d:88:c7:80:71:b3:e4:a0:17:e8:53:94:10:
cb:54:a2:c0:0a:d9:99:09:36:84:67:cc:8c:79:f5:
e2:c8:92:d7:8d:0d:a4:43:2c:a8:14:71:d7:78:86:
bd:82:63:dc:9c:58:1c:34:0a:07:08:3f:4f:53:ec:
0f:5a:c4:e8:78:5c:4e:36:3f:fc:f8:46:f5:39:db:
65:b0:d9:f3:26:6f:31:f8:cc:19:2a:69:76:27:9d:
7c:91:68:fb:56:c0:ac:71:16:d6:4c:8d:ef:38:38:
f9:9a:74:e3:de:b7:fa:21:ab:af:52:2e:22:b0:c8:
b8:99:42:ae:e2:cf:68:6c:1e:22:a5:df:9a:0a:08:
cb:8a:16:28:f7:98:f8:52:f4:f0:1a:a2:56:25:b8:
b7:c3:f7:14:f2:c2:14:60:3c:b4:d4:82:af:e0:4f:
b4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:74:A3:19:26:52:BD:4D:07:E8:DF:C2:34:FB:73:C8:BC:8D:5D:7B
X509v3 Authority Key Identifier:
keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3138302e302f32342d3234203d3e203634323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.180.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:91:e9:b0:30:37:a6:d2:28:93:ce:bf:55:17:3b:bf:79:1f:
6c:94:a4:a4:96:0a:ce:04:5f:8f:a4:26:b2:1e:be:1f:69:24:
42:5f:9c:0a:89:1d:55:62:c4:10:e0:a0:f1:cf:f9:17:e1:16:
e7:b7:55:ff:67:65:e4:91:c0:4b:b9:10:10:1e:26:12:f7:9d:
40:86:7b:65:d2:f2:e4:20:44:57:a8:85:b0:61:8b:89:9a:50:
13:d0:7a:c5:73:fd:a6:f1:e7:49:6f:ba:cc:6e:a9:34:d8:53:
11:2e:fb:0a:3b:66:f3:d8:82:d7:72:34:25:a2:0e:d3:40:02:
da:35:b5:96:58:5a:d1:d9:65:51:d9:88:01:40:7f:65:55:86:
24:3b:76:cb:4b:33:fb:a1:54:04:a1:1e:5b:55:63:cf:9b:5a:
45:17:16:97:89:fc:b1:22:c7:31:51:ad:a5:a7:89:f4:dd:29:
38:aa:22:bb:93:71:b5:cd:04:58:a8:3a:b5:fe:3e:c7:58:5c:
0f:de:80:ce:c7:09:e5:32:cb:df:c6:54:3a:ec:c9:5c:63:bb:
70:ba:8d:db:be:58:74:2b:b7:9e:f4:89:a8:25:d6:d1:a2:36:
df:b8:e4:a1:47:c0:98:d1:ab:fd:cf:8e:b2:67:8f:15:9b:a8:
68:c1:83:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:35:20 2025 by rpki-client