Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3139302e302f32342d3234203d3e203634323637.roa
File: 38302e38332e3139302e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier: e7OjSlp/jABhHoAxV0NvuSo5CYOdNcptQrwcU0YPf4I=
Subject key identifier: D6:B1:AF:11:66:BA:F8:7E:1A:55:47:F7:A4:60:5A:99:05:D6:97:03
Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724
Certificate serial: 6C789E221C9FE400394E7A388C782618063E6B36
Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3139302e302f32342d3234203d3e203634323637.roa
Signing time: Fri 29 Aug 2025 08:14:02 +0000
ROA not before: Fri 29 Aug 2025 08:09:02 +0000
ROA not after: Fri 28 Aug 2026 08:14:02 +0000
asID: 64267
IP address blocks: 80.83.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:78:9e:22:1c:9f:e4:00:39:4e:7a:38:8c:78:26:18:06:3e:6b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724
Validity
Not Before: Aug 29 08:09:02 2025 GMT
Not After : Aug 28 08:14:02 2026 GMT
Subject: CN=D6B1AF1166BAF87E1A5547F7A4605A9905D69703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bb:ff:35:10:cb:97:a5:6c:c2:cb:77:1c:f1:
0d:c7:14:b7:56:f1:7b:91:eb:e2:d2:d0:2b:47:ed:
58:b6:37:5a:0b:ca:4d:0b:f6:ce:97:c6:81:4e:92:
37:71:0d:04:57:60:2c:ac:44:6c:f7:18:30:2e:8d:
6f:65:da:35:f2:98:0e:6c:ab:89:7e:93:34:a1:54:
25:96:86:15:ac:3f:26:2c:ba:fb:44:39:3c:d5:ee:
2e:e4:64:34:25:91:1e:3e:7d:c8:88:3f:5c:39:db:
df:f9:bb:60:2a:c5:6f:cc:6f:3e:0b:15:07:43:6a:
e6:3d:1d:b5:02:c5:d1:4a:2c:f1:6c:54:08:27:de:
06:fa:37:ff:97:34:7f:56:6d:e0:c3:e9:d3:32:0e:
e7:2a:f7:0b:a1:5d:8d:85:a1:44:96:55:de:83:a6:
b5:61:f2:97:ec:ad:27:fc:7d:9e:d4:76:07:c1:84:
77:bf:63:cf:ac:d5:aa:a3:ee:be:02:fd:32:8e:ff:
cb:49:ef:43:08:16:80:57:99:0a:5d:5a:94:c5:0e:
53:d5:63:c6:ef:d9:1f:50:67:3a:7c:2c:5b:5f:a7:
84:9f:1c:36:3e:04:ad:de:c5:61:43:7c:02:79:81:
b9:cf:4d:36:3b:de:a5:45:60:72:04:5b:89:ec:8e:
95:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B1:AF:11:66:BA:F8:7E:1A:55:47:F7:A4:60:5A:99:05:D6:97:03
X509v3 Authority Key Identifier:
keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/38302e38332e3139302e302f32342d3234203d3e203634323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.190.0/24
Signature Algorithm: sha256WithRSAEncryption
28:e0:96:8c:7c:72:05:65:52:11:a1:5c:16:10:2b:2d:66:f5:
e9:93:95:c7:ee:25:48:fc:07:1d:9d:17:e7:f6:73:96:72:1b:
b7:03:11:28:d3:2e:e2:e9:b1:47:87:0e:c7:93:60:b8:ce:72:
9d:b5:c9:e0:96:ae:1b:fb:d6:82:b6:a5:dc:42:c9:4b:cf:84:
2f:ac:49:7a:a6:e1:00:d5:f6:ef:19:bb:37:2c:d5:fb:fb:4e:
79:a7:15:e8:47:88:0c:6d:67:a2:c9:8b:d2:26:5e:6d:fa:6c:
dc:97:b9:39:8e:41:19:e2:1f:ad:39:fe:ec:4b:c6:5f:79:f8:
0c:f2:02:e9:6f:fe:33:4a:1e:b3:24:8b:9a:21:c3:2d:cd:85:
36:f3:18:ab:19:d3:79:ec:30:7e:32:32:c7:48:c5:76:83:27:
c7:43:97:e5:57:8f:f9:5f:e3:0b:91:12:6d:57:9a:fc:3f:36:
95:ff:4f:89:57:11:21:5c:92:44:e7:aa:3e:95:2d:b6:29:aa:
cb:e3:66:2a:1a:33:c8:29:f5:a3:bf:7a:98:2f:dd:4f:9b:0b:
47:8f:3d:f0:4b:f7:bd:78:25:5b:73:39:11:f7:fc:e9:45:89:
7f:24:60:c4:b0:d1:ad:e5:ec:93:fd:08:6d:bd:34:7e:61:1c:
d8:ab:06:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:42:19 2025 by rpki-client