Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3138322e302f32342d3234203d3e203534323532.roa
File: 38302e38332e3138322e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier: uJ+F2P5ZdoZfqsSv0nRxSsKltv8AKa6/74Lp77euWBg=
Subject key identifier: 8E:7D:2D:36:F4:BE:6B:E3:DA:95:2D:87:59:2C:5E:95:04:D1:1E:52
Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724
Certificate serial: 1DEDD7EAD4A2FCE69CB563BEC3152491A0D3C0AA
Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3138322e302f32342d3234203d3e203534323532.roa
Signing time: Fri 29 Aug 2025 08:14:01 +0000
ROA not before: Fri 29 Aug 2025 08:09:01 +0000
ROA not after: Fri 28 Aug 2026 08:14:01 +0000
asID: 54252
IP address blocks: 80.83.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ed:d7:ea:d4:a2:fc:e6:9c:b5:63:be:c3:15:24:91:a0:d3:c0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724
Validity
Not Before: Aug 29 08:09:01 2025 GMT
Not After : Aug 28 08:14:01 2026 GMT
Subject: CN=8E7D2D36F4BE6BE3DA952D87592C5E9504D11E52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:4d:11:29:4c:1d:b8:f7:ae:7f:ac:f1:af:
2a:49:04:06:4f:6e:a6:92:ed:78:ef:28:36:72:24:
40:50:f9:e1:c2:6c:f5:e9:d4:24:ce:df:34:e4:ac:
d6:75:7b:8a:23:57:c2:a0:89:95:58:8b:8a:82:6d:
33:c2:6f:1b:7b:7c:b4:58:50:67:e9:81:77:5a:95:
3d:a0:fe:77:d3:1d:3f:97:30:c5:cd:f2:03:d8:0c:
6b:38:a9:77:af:9e:6d:45:8c:f7:d5:a9:c6:45:25:
f8:d8:88:91:4a:a0:ed:7b:e9:d3:02:cb:46:8a:92:
59:e5:97:a9:c7:d1:9c:3c:f4:e8:8a:0e:dd:d2:67:
98:88:e0:ec:55:91:17:a9:7b:7b:3b:8e:a1:0f:c7:
10:e9:31:2e:3f:65:32:f4:2a:c9:67:66:49:33:c8:
81:36:3d:f5:6d:e4:78:79:1e:18:97:a1:c0:b1:38:
d6:23:52:ad:1a:cd:2f:99:13:5c:f2:48:85:65:66:
e5:65:f8:08:80:76:6e:94:6f:1f:9e:d5:10:a1:17:
db:e5:e0:25:06:d5:20:e6:cf:8d:6b:5d:c0:d5:3f:
fe:8f:26:c7:fb:a7:ae:0b:92:15:9c:92:9f:0a:03:
16:90:68:0a:ea:d9:c1:7f:84:b1:75:18:16:f4:cf:
ec:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7D:2D:36:F4:BE:6B:E3:DA:95:2D:87:59:2C:5E:95:04:D1:1E:52
X509v3 Authority Key Identifier:
keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3138322e302f32342d3234203d3e203534323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.182.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:b6:f4:e0:11:ae:27:56:9e:e0:78:8d:0e:c3:8e:6b:75:a6:
3a:08:5e:2a:1e:72:e5:4b:b7:63:f3:cb:49:39:4d:55:74:49:
ea:33:25:a3:94:32:52:d1:0b:31:6e:cc:d1:34:b6:50:fe:a5:
c7:d2:ee:40:63:2c:2f:2c:a0:ce:c2:67:0a:c2:d6:56:25:c2:
b8:25:0e:8b:c3:fc:91:92:83:e9:54:23:cd:66:a4:d4:9b:a0:
3d:c1:1c:18:8f:37:cb:51:9f:72:de:c9:70:1a:af:ef:2b:c7:
e5:1e:97:6e:0d:fe:12:f5:2d:ae:81:9c:82:d4:6f:66:3b:56:
bb:3d:9f:9c:b6:a6:e4:dc:49:84:54:b3:0f:fb:2a:a1:46:41:
b2:71:c6:e4:7d:5e:6d:0c:67:61:11:4a:41:cd:af:68:05:16:
eb:9e:49:b7:84:7b:8e:2f:e4:89:f5:07:d9:8d:36:d3:6d:5e:
a1:b5:1e:e3:d0:35:05:e9:f6:0a:fd:c6:79:a6:5e:cf:54:af:
c4:82:44:c5:e0:54:10:51:2a:65:f0:fe:65:4a:86:47:75:e2:
d6:c3:c1:09:f9:02:74:ee:a0:08:06:81:4a:ca:6a:c9:84:72:
d6:31:2b:e0:71:db:64:5c:a7:4d:0e:58:17:ee:48:a7:05:63:
95:97:bd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:11:04 2025 by rpki-client