Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3138382e302f32322d3234203d3e203534323532.roa
File: 38302e38332e3138382e302f32322d3234203d3e203534323532.roa (raw, json)
Hash identifier: oxLxEjiJHAfR5sb7doKgFq8fOEt0To+nubINa8ThuEA=
Subject key identifier: 00:5E:D5:A5:95:4B:28:7E:46:9C:74:DE:58:C8:37:09:D9:75:25:DA
Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724
Certificate serial: 3AFA5CEE057BA106C946D668311D12C8D0B6CA22
Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3138382e302f32322d3234203d3e203534323532.roa
Signing time: Fri 29 Aug 2025 08:15:11 +0000
ROA not before: Fri 29 Aug 2025 08:10:11 +0000
ROA not after: Fri 28 Aug 2026 08:15:11 +0000
asID: 54252
IP address blocks: 80.83.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:fa:5c:ee:05:7b:a1:06:c9:46:d6:68:31:1d:12:c8:d0:b6:ca:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724
Validity
Not Before: Aug 29 08:10:11 2025 GMT
Not After : Aug 28 08:15:11 2026 GMT
Subject: CN=005ED5A5954B287E469C74DE58C83709D97525DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:fe:91:0b:51:d9:a9:a2:2f:23:a3:9e:ba:
55:eb:c5:8b:8f:87:e9:16:a0:ef:26:26:23:8a:3b:
5c:b7:43:c7:02:e6:b4:13:9e:1d:14:38:5e:e3:0f:
24:45:56:15:1d:7e:cb:32:7d:f5:7b:c3:83:b1:e1:
95:6c:0d:c3:2e:9f:92:8d:e7:92:39:14:b0:b1:2a:
2a:49:73:d8:f7:6c:a6:fb:8a:9b:cd:0a:6b:5a:af:
c7:69:01:6f:be:39:a0:f5:5d:1d:25:37:b4:fc:53:
04:cb:80:5c:71:1d:76:ce:66:8a:c3:50:fc:5f:44:
de:d5:84:d9:73:d9:00:35:b7:08:c1:9e:50:1b:1a:
77:29:dc:e2:fc:e2:46:59:d2:8f:13:eb:25:7a:fe:
da:f5:29:d1:c4:e0:0b:e5:94:0a:9a:b2:85:c3:15:
81:32:b7:d5:2f:97:cc:56:6c:7c:50:32:b7:fe:fc:
cc:0c:7d:81:82:38:eb:7a:a9:79:9b:6c:c2:b6:a5:
47:bd:6d:5a:63:38:0d:cc:35:c4:9e:e7:51:9e:a0:
39:6e:11:23:08:36:d9:c9:00:55:72:9e:e0:ac:56:
9f:d5:9c:7b:d1:47:89:1d:09:ef:e3:5b:46:74:3f:
c8:90:ec:a0:d1:0d:db:ac:80:83:1e:3c:e6:66:04:
36:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5E:D5:A5:95:4B:28:7E:46:9C:74:DE:58:C8:37:09:D9:75:25:DA
X509v3 Authority Key Identifier:
keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3138382e302f32322d3234203d3e203534323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.188.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:ae:0b:7a:e2:51:c6:b6:4f:51:9b:da:0b:9d:13:2c:89:28:
71:6e:96:c0:dd:7c:91:0d:37:b9:23:a1:4c:66:85:35:82:34:
5f:02:3b:8f:ac:4f:00:a4:19:36:40:ca:3f:5e:2e:aa:db:08:
c4:89:99:9d:1b:dc:1f:08:f1:f3:3b:c3:ea:08:52:f3:b6:62:
24:dc:fd:b0:c4:c5:73:d2:2c:eb:24:be:bb:fd:c5:c7:c6:66:
5f:76:9c:5e:65:4f:f2:a1:30:27:c2:13:b3:d3:49:b2:bb:eb:
dc:1d:64:83:dc:cb:c0:7d:ec:2c:a2:04:86:f7:a7:a6:25:66:
51:bb:31:07:2a:b7:3d:dd:35:21:54:80:35:c0:bd:f1:a1:8a:
13:7f:dc:b5:4c:ee:be:8e:00:3c:69:ec:9f:ea:75:2a:24:26:
7b:3e:00:fa:fc:46:bc:72:e5:0c:77:24:b6:7a:64:c4:9f:c2:
f9:f5:86:43:11:c5:bb:46:bf:69:c2:cb:ae:14:8e:73:56:d3:
6e:1f:82:3d:93:af:97:82:2f:82:ef:3b:6a:54:c8:d3:c8:04:
9b:67:4f:68:70:87:d1:7c:47:f0:24:6d:2c:33:dc:74:62:91:
8e:3e:0d:73:a1:88:9b:d6:cf:a3:51:90:7d:ed:96:13:14:9a:
f2:75:e6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:11:42 2025 by rpki-client