Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132332e302f32342d3234203d3e20383334.roa
File: 3231332e3135372e3132332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: C0JcuikvC/Uy3ECFh8uVklkN/jsNd0lTBctoOoL3Cvc=
Subject key identifier: 77:9C:E1:76:55:0D:9E:23:8A:CA:8E:BF:58:96:18:58:85:2F:60:F1
Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27
Certificate serial: 191D632D6618B30F735D6305339B83D5894CE103
Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132332e302f32342d3234203d3e20383334.roa
Signing time: Thu 30 Oct 2025 15:21:41 +0000
ROA not before: Thu 30 Oct 2025 15:16:41 +0000
ROA not after: Thu 29 Oct 2026 15:21:41 +0000
asID: 834
IP address blocks: 213.157.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 16:13:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:1d:63:2d:66:18:b3:0f:73:5d:63:05:33:9b:83:d5:89:4c:e1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27
Validity
Not Before: Oct 30 15:16:41 2025 GMT
Not After : Oct 29 15:21:41 2026 GMT
Subject: CN=779CE176550D9E238ACA8EBF58961858852F60F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:11:05:f5:8d:9f:db:6f:c9:7a:e8:46:10:16:
3a:3d:d0:d9:a2:a9:53:20:1b:38:9e:d2:a6:41:95:
b9:8e:8d:2a:94:03:e1:02:40:8f:16:bd:b0:d3:7e:
32:be:b5:ba:d7:7f:a3:ca:88:0e:89:87:a8:df:a1:
8e:7c:55:b6:d8:ca:1a:ca:23:f2:9d:6d:27:88:d2:
72:61:f7:0d:a7:c0:ea:53:39:6d:ae:7c:7c:16:13:
ac:f2:2b:80:b3:ae:85:16:85:b3:13:c3:e1:11:41:
10:68:17:91:98:11:43:9d:7b:ad:14:32:0f:c0:27:
47:8a:1e:ac:1f:c5:35:f1:1e:73:f9:4b:9f:00:8b:
7c:c4:4c:45:d0:cd:d1:b5:c5:a5:b5:89:24:d6:94:
dd:cc:1f:16:05:8f:a3:6d:05:87:b1:49:dd:0d:f7:
5c:c4:7e:c8:bf:43:46:96:02:1d:b0:6f:28:d8:95:
46:1f:01:b5:7f:7b:7d:9a:4c:9e:48:87:1d:d2:95:
70:e6:81:17:8b:37:5d:87:4b:ea:2c:35:23:ab:10:
7a:e5:e8:a1:ae:83:4c:9a:31:e0:5d:a0:84:8c:74:
ce:72:b9:ee:65:4b:1c:ba:b1:81:9c:af:9d:4a:f8:
1a:c6:bd:73:37:4b:bd:0b:52:17:94:96:3d:e6:11:
4d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9C:E1:76:55:0D:9E:23:8A:CA:8E:BF:58:96:18:58:85:2F:60:F1
X509v3 Authority Key Identifier:
keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.157.123.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b1:8d:24:d5:d2:df:d8:9d:22:9a:ac:e6:d1:9c:a4:45:86:
fc:15:c9:1b:34:12:8c:3a:27:38:94:5c:60:0b:43:fc:97:f3:
03:b0:31:98:eb:17:1c:c3:d7:b9:83:9c:04:73:89:c7:dd:a1:
fc:a4:8c:86:30:8f:c8:f3:6e:04:1f:bd:86:0f:82:2c:3b:05:
a5:24:11:6d:32:44:a5:0f:bd:5b:34:bb:ac:b8:76:57:ce:38:
56:21:92:72:ef:ad:db:34:c5:ee:48:91:95:75:19:d4:7a:69:
7b:bb:38:b4:81:81:32:5a:82:66:3c:97:14:b6:ba:44:07:57:
1f:85:53:98:ea:c6:3b:e3:44:0c:4e:b6:79:fe:ea:c3:9c:9b:
53:a8:5e:5d:48:64:6c:07:19:fc:6a:91:73:4d:3f:db:93:24:
d2:ab:55:56:1a:c3:5b:bc:16:f5:c3:4a:f7:c0:3e:70:18:3d:
00:db:b4:39:d3:24:6c:7c:0f:1e:ef:76:b2:d3:02:6e:47:6d:
c9:52:b0:ea:33:44:12:91:ae:15:6e:a1:40:c0:e4:b8:50:d4:
84:e1:26:0a:de:a2:98:bb:e3:dd:17:64:19:33:0f:b3:0d:56:
b2:4f:de:41:11:a8:cb:7f:79:14:37:d5:e9:15:4e:c3:58:6f:
9b:78:e4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 05:34:45 2025 by rpki-client