Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/38342e33382e3235342e302f32342d3234203d3e20323134343332.roa
File: 38342e33382e3235342e302f32342d3234203d3e20323134343332.roa (raw, json)
Hash identifier: TnW3zKmNDxY1s+JdH67yvpdfB6A0/qDHS7IbwvxOzo8=
Subject key identifier: B9:2E:FA:25:90:AB:A2:05:49:83:31:84:30:3C:D9:F6:BE:C0:72:A7
Certificate issuer: /CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
Certificate serial: 069553D46BEDADA91167B8F05608D82A5326D37B
Authority key identifier: 05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/38342e33382e3235342e302f32342d3234203d3e20323134343332.roa
Signing time: Mon 25 Aug 2025 12:39:17 +0000
ROA not before: Mon 25 Aug 2025 12:34:17 +0000
ROA not after: Mon 24 Aug 2026 12:39:17 +0000
asID: 214432
IP address blocks: 84.38.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl
rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:95:53:d4:6b:ed:ad:a9:11:67:b8:f0:56:08:d8:2a:53:26:d3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
Validity
Not Before: Aug 25 12:34:17 2025 GMT
Not After : Aug 24 12:39:17 2026 GMT
Subject: CN=B92EFA2590ABA20549833184303CD9F6BEC072A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:47:ce:83:f0:65:e6:14:fd:3b:00:cf:45:
3d:43:e8:24:ce:86:55:22:a2:a2:dc:37:57:20:4f:
36:f4:19:29:ad:6f:91:0c:b9:50:de:9d:e8:11:c3:
4e:b7:ff:60:57:48:14:46:ac:69:f4:68:b6:07:6a:
c8:a5:86:d8:1d:c2:43:ea:a6:8b:d1:6e:59:8c:f8:
b4:3e:4d:8b:82:17:bc:d3:fc:06:52:18:3b:fd:0f:
20:c1:56:00:f6:3f:68:3e:a6:72:a3:4e:dc:05:d1:
c6:b7:76:a7:bd:71:73:f7:71:85:71:37:ee:6c:ca:
1b:33:32:4e:ae:83:4c:6f:05:c9:74:5b:b4:50:1e:
99:50:a5:e5:8b:e8:0d:d5:8a:0f:51:68:df:06:f0:
48:b0:3a:28:5b:e3:e3:a9:c8:53:98:e7:d1:fb:0e:
b3:b7:63:a4:65:b1:ca:7f:41:c3:14:52:ef:23:f9:
1f:92:92:b9:f9:2f:ea:cd:70:1e:61:78:e7:f5:2d:
54:85:8c:79:c4:35:dc:88:05:fd:cc:c6:92:ac:6c:
6e:4f:4d:8a:24:ff:ee:69:76:17:e5:bd:de:c9:a0:
17:97:eb:1e:94:33:2c:b3:20:5a:62:8a:5b:3b:3e:
d8:34:89:7b:da:ac:c1:2c:71:2b:19:7d:6a:b1:d8:
bd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2E:FA:25:90:AB:A2:05:49:83:31:84:30:3C:D9:F6:BE:C0:72:A7
X509v3 Authority Key Identifier:
keyid:05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/38342e33382e3235342e302f32342d3234203d3e20323134343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:e5:cd:56:10:32:66:c0:3b:38:7a:8f:29:1f:d1:37:4f:2a:
b7:cd:23:83:19:98:20:61:78:97:b4:fb:1e:4f:cc:3a:25:62:
41:da:2c:d6:5c:1f:15:68:f0:05:25:a3:09:08:50:9e:8f:92:
b1:cf:6e:c0:ab:d0:a1:f6:30:50:1f:30:b7:6e:dc:17:26:9a:
eb:f7:d7:e2:44:47:5f:e2:97:4d:0e:ef:6b:a7:61:d3:a0:a8:
26:d9:02:54:f3:2d:05:cd:03:48:f3:80:81:9b:5e:d3:d4:54:
d5:fb:12:03:98:0e:58:e1:37:97:54:90:03:16:c6:c1:0a:28:
44:9f:3a:a3:1f:ce:99:f7:e2:4a:c9:ca:38:1b:a7:7d:66:c6:
9c:83:2a:85:f0:ac:dd:3c:f7:9c:8f:55:31:99:af:c5:8d:c6:
5e:4d:62:94:f3:f3:a7:7f:5f:38:90:f4:63:a9:59:f4:d5:e3:
af:6d:d1:25:41:30:65:77:f9:d8:cd:77:b2:f1:b7:66:b9:45:
71:25:01:68:77:ac:e8:03:11:7b:b1:69:0d:00:e9:9f:81:f3:
01:75:e0:2c:e6:80:3d:4f:32:e9:3a:39:2b:b6:03:83:c2:a3:
41:b4:fa:e7:48:93:c9:ca:91:f9:25:f5:30:ea:c5:6d:a0:93:
a3:d0:fd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 02:29:55 2025 by rpki-client