Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e2039333034.roa
File: 3231322e3130332e34362e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: ZiA8Cde6s2TKghms5u18G3ZVs8EUkbF+SgM6k/613IM=
Subject key identifier: 79:50:98:F4:B1:31:F8:26:A3:C5:5E:8E:88:A8:B1:02:FF:5F:37:01
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 487C5304F8A72922A94512C785FD7A1DB248E549
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e2039333034.roa
Signing time: Sat 30 Aug 2025 15:28:46 +0000
ROA not before: Sat 30 Aug 2025 15:23:46 +0000
ROA not after: Sat 29 Aug 2026 15:28:46 +0000
asID: 9304
IP address blocks: 212.103.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 03:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:7c:53:04:f8:a7:29:22:a9:45:12:c7:85:fd:7a:1d:b2:48:e5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Aug 30 15:23:46 2025 GMT
Not After : Aug 29 15:28:46 2026 GMT
Subject: CN=795098F4B131F826A3C55E8E88A8B102FF5F3701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:54:f6:28:b1:ce:96:89:3f:46:2e:c8:70:8a:
64:a5:44:02:19:07:e4:7c:86:17:73:6a:eb:8d:48:
e0:b5:be:ab:be:96:87:3e:63:7b:48:cd:cc:39:08:
c8:ab:19:3a:f1:17:b9:4f:27:e6:87:8b:f6:ed:c7:
c8:bc:77:de:22:b6:99:77:13:94:f5:d6:66:41:da:
d5:b7:ac:3d:86:77:7b:28:95:d4:7b:43:b1:38:50:
6a:22:16:57:49:df:91:38:db:ad:ea:ce:84:00:ea:
f5:68:90:d5:76:3e:51:20:dd:ff:55:52:0a:67:2c:
59:a5:76:4c:01:57:1a:94:40:81:f3:1b:e1:0d:d2:
5e:46:2c:ce:8f:c0:f9:a3:eb:18:40:81:14:45:fb:
a9:54:6a:e2:d8:44:a5:bf:60:f7:64:c7:98:38:ba:
e0:7d:c6:14:68:6a:18:b7:46:5a:ff:91:f8:60:af:
e1:5e:63:93:ea:5b:0e:e9:cb:ab:cd:22:a6:6c:91:
61:7c:ce:56:90:a6:52:90:79:5c:4e:d2:ba:a7:c8:
71:1f:69:07:86:5f:ed:44:34:df:df:83:18:03:21:
90:39:cf:f0:59:b7:70:e1:56:85:99:91:84:7b:22:
4a:1c:02:f9:3e:59:49:ba:ab:50:4c:37:57:81:60:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:50:98:F4:B1:31:F8:26:A3:C5:5E:8E:88:A8:B1:02:FF:5F:37:01
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.46.0/24
Signature Algorithm: sha256WithRSAEncryption
28:db:dc:19:72:43:22:6f:6b:1c:a0:02:43:79:2b:c5:61:ce:
81:05:e1:ec:9e:8e:5a:40:76:75:28:e8:1f:05:6b:3a:79:6f:
fe:cf:f5:a5:a3:5e:c8:96:ff:ec:f1:5f:4b:8e:f9:93:16:7a:
a7:90:6a:72:f0:f2:d1:23:0d:16:b9:05:6a:3d:17:ce:78:2a:
51:63:ad:25:7b:25:2c:9b:48:31:32:a8:ab:c7:3d:c7:11:98:
1f:08:8c:53:da:48:9a:e2:0c:71:5b:87:a1:f5:be:f7:4f:1f:
4d:1d:8c:05:00:e2:ba:87:b3:74:0b:33:c4:ed:2d:d7:87:bb:
b5:fc:ae:e3:47:85:d7:63:f4:34:76:fa:ce:4a:64:ed:86:c9:
01:c8:f3:fb:13:9f:33:18:0c:15:f9:9d:a7:cb:a3:a8:ac:cc:
92:b8:eb:2d:da:6a:6e:6d:12:0a:e2:d8:60:da:fd:ae:5f:d8:
8b:9b:b0:7f:c5:6e:c8:d1:20:f0:22:27:83:6d:5d:b5:75:f7:
d5:91:9c:c0:91:4d:9d:a3:7f:2e:e4:c5:53:1d:50:94:41:38:
82:8b:fb:2a:f3:03:c8:fd:6c:81:b3:ad:ef:9e:f6:ed:a3:6d:
48:fc:39:73:e2:fe:60:af:67:04:26:e1:0a:68:85:ff:59:72:
5e:29:cc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:47:44 2025 by rpki-client