Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3138382e302f32342d3234203d3e203634323637.roa
File: 38302e38332e3138382e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier: Zn2fU/zf/URUjzPX4k5UlzylOiLYtLrcrJVzOaLXmd8=
Subject key identifier: CF:3A:94:12:B8:F9:86:78:6E:7B:4A:BC:71:B3:8F:3B:08:2A:A5:A0
Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724
Certificate serial: 787E7253F9276053B491DB9938A48C7EE8293145
Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3138382e302f32342d3234203d3e203634323637.roa
Signing time: Fri 29 Aug 2025 08:14:02 +0000
ROA not before: Fri 29 Aug 2025 08:09:02 +0000
ROA not after: Fri 28 Aug 2026 08:14:02 +0000
asID: 64267
IP address blocks: 80.83.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:7e:72:53:f9:27:60:53:b4:91:db:99:38:a4:8c:7e:e8:29:31:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724
Validity
Not Before: Aug 29 08:09:02 2025 GMT
Not After : Aug 28 08:14:02 2026 GMT
Subject: CN=CF3A9412B8F986786E7B4ABC71B38F3B082AA5A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:8d:cb:dc:ad:48:5b:f3:c5:bf:6d:5d:07:
29:95:b0:d2:04:02:e7:52:94:86:f7:7e:f6:fd:38:
c3:13:7f:b6:cb:26:c9:7e:b4:8e:43:28:bb:cb:3b:
b0:00:2a:ee:d5:e4:b2:7a:06:71:de:32:06:8a:b9:
39:f9:3f:b3:e8:b5:37:68:a3:51:b5:20:9e:20:00:
8a:d1:e0:78:9e:5a:f5:7f:16:9a:59:f1:3c:b0:f4:
fc:19:56:7f:d4:8f:ad:d7:d0:2c:8c:59:e1:49:65:
93:0a:76:ed:f4:d5:76:d4:e9:8a:c2:e4:f8:36:f3:
32:7e:b9:40:31:c1:8e:a6:ce:0a:28:9f:dd:69:75:
a5:e2:eb:96:bc:7e:99:e8:0c:20:23:9b:7e:86:d5:
b7:41:e2:ff:51:f7:10:ef:ec:b1:87:11:a5:25:c6:
65:d6:4f:79:c6:20:ef:3b:9c:40:54:d7:17:65:de:
f6:3f:7b:8f:61:0d:ff:ba:19:d8:d9:2f:47:69:ba:
7a:b0:52:ba:55:20:5f:6c:9c:7f:85:e8:bf:ea:c6:
71:63:61:1c:36:08:a4:c9:3b:c8:86:cd:38:9e:a6:
d8:76:e7:04:5d:84:48:e3:ff:14:25:f1:3e:2d:29:
80:e3:4e:24:2c:fd:69:42:7b:b7:94:e3:8d:5b:3c:
02:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3A:94:12:B8:F9:86:78:6E:7B:4A:BC:71:B3:8F:3B:08:2A:A5:A0
X509v3 Authority Key Identifier:
keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3138382e302f32342d3234203d3e203634323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.188.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:b9:23:47:c0:bf:37:2b:32:ad:58:68:c8:d6:24:ca:6b:f4:
99:e3:cb:fe:c6:6a:79:9c:e0:56:32:a6:f6:1e:29:3a:c9:65:
88:f2:3a:a1:ea:6a:07:92:b9:e5:06:23:be:0d:0d:37:c8:b6:
62:11:d7:db:00:23:87:93:4a:68:7e:4b:3d:ad:85:53:a4:a7:
03:14:59:d4:10:5c:d7:7c:13:85:3e:31:f1:ae:65:de:5d:35:
88:46:1d:ec:c3:5d:11:f2:6b:71:9f:a6:52:13:ca:da:cd:11:
7d:0c:9c:9b:72:72:d0:4f:09:95:4c:2f:b1:27:b7:3a:15:19:
34:b0:d3:4c:0d:e0:1b:b4:55:d1:d3:e9:dc:23:34:b6:fe:1b:
60:25:2f:65:11:cc:dd:95:79:ed:29:70:df:ac:57:a7:b6:c5:
7b:5c:73:e1:4a:f5:53:fe:d3:d5:2d:ac:7a:cb:47:53:18:ca:
8b:62:b9:56:a2:73:c5:89:c4:1c:87:3e:85:e9:6c:33:7c:22:
c7:3b:b6:12:c3:7e:23:8a:f4:80:99:85:5f:c1:7d:7a:8c:6a:
2f:ce:84:b8:8e:95:40:64:29:ed:50:49:78:f5:f6:02:2f:88:
b0:46:6b:4e:86:be:52:bd:25:61:8b:fb:6b:fb:d5:0a:6e:8e:
80:67:0c:2b
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUeH5yU/knYFO0kduZOKSMfugpMUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhkNjVkNGEyMmRmNzA1YmVlZDdiMzQzMmZiZTQ4YTM1
NjU5NzcyNDAeFw0yNTA4MjkwODA5MDJaFw0yNjA4MjgwODE0MDJaMDMxMTAvBgNV
BAMTKENGM0E5NDEyQjhGOTg2Nzg2RTdCNEFCQzcxQjM4RjNCMDgyQUE1QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Xo3L3K1IW/PFv21dBymVsNIE
AudSlIb3fvb9OMMTf7bLJsl+tI5DKLvLO7AAKu7V5LJ6BnHeMgaKuTn5P7PotTdo
o1G1IJ4gAIrR4HieWvV/FppZ8Tyw9PwZVn/Uj63X0CyMWeFJZZMKdu301XbU6YrC
5Pg28zJ+uUAxwY6mzgoon91pdaXi65a8fpnoDCAjm36G1bdB4v9R9xDv7LGHEaUl
xmXWT3nGIO87nEBU1xdl3vY/e49hDf+6GdjZL0dpunqwUrpVIF9snH+F6L/qxnFj
YRw2CKTJO8iGzTiepth25wRdhEjj/xQl8T4tKYDjTiQs/WlCe7eU441bPAK1AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUzzqUErj5hnhue0q8cbOPOwgqpaAwHwYDVR0j
BBgwFoAUeNZdSiLfcFvu17NDL75Io1ZZdyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNWFkMTUtYWYwYi00NWNkLWI4ODMtMWEwNThmYTBl
YmExLzAvNzhENjVENEEyMkRGNzA1QkVFRDdCMzQzMkZCRTQ4QTM1NjU5NzcyNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VOWmRTaUxmY0Z2dTE3TkRMNzVJbzFa
WmR5US5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNWFkMTUt
YWYwYi00NWNkLWI4ODMtMWEwNThmYTBlYmExLzAvMzgzMDJlMzgzMzJlMzEzODM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzNDMyMzYzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBT
vDANBgkqhkiG9w0BAQsFAAOCAQEAXbkjR8C/NysyrVhoyNYkymv0mePL/sZqeZzg
VjKm9h4pOslliPI6oepqB5K55QYjvg0NN8i2YhHX2wAjh5NKaH5LPa2FU6SnAxRZ
1BBc13wThT4x8a5l3l01iEYd7MNdEfJrcZ+mUhPK2s0RfQycm3Jy0E8JlUwvsSe3
OhUZNLDTTA3gG7RV0dPp3CM0tv4bYCUvZRHM3ZV57Slw36xXp7bFe1xz4Ur1U/7T
1S2sestHUxjKi2K5VqJzxYnEHIc+helsM3wixzu2EsN+I4r0gJmFX8F9eoxqL86E
uI6VQGQp7VBJePX2Ai+IsEZrToa+Ur0lYYv7a/vVCm6OgGcMKw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:42:28 2025 by rpki-client