Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132332e302f32342d3234203d3e2039333034.roa
File: 3231332e3135372e3132332e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: vxjXWaCdelX3l/Dq0oCF9svJSK3Gm/FVltSuWwTdg0M=
Subject key identifier: F5:C0:95:C2:1A:32:83:85:19:6A:48:34:1D:09:B4:10:42:F6:A3:2F
Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27
Certificate serial: 35AD7A647FF45251A5E0BE6979D9185D51C003DC
Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132332e302f32342d3234203d3e2039333034.roa
Signing time: Sat 30 Aug 2025 15:28:42 +0000
ROA not before: Sat 30 Aug 2025 15:23:42 +0000
ROA not after: Sat 29 Aug 2026 15:28:42 +0000
asID: 9304
IP address blocks: 213.157.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 21:04:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ad:7a:64:7f:f4:52:51:a5:e0:be:69:79:d9:18:5d:51:c0:03:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27
Validity
Not Before: Aug 30 15:23:42 2025 GMT
Not After : Aug 29 15:28:42 2026 GMT
Subject: CN=F5C095C21A328385196A48341D09B41042F6A32F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2b:e8:cb:c5:af:be:17:cd:b7:20:07:97:2c:
f3:75:fa:2f:58:22:7c:cb:d8:90:7e:1e:7c:f5:68:
a8:5b:f9:cc:9c:be:0b:e6:63:b7:18:b8:a4:88:21:
09:ab:17:02:a2:c7:64:a3:2b:1b:4e:84:6c:34:36:
eb:cf:c0:50:e6:9d:6d:3b:29:e6:71:09:b5:60:08:
6c:03:b4:0b:38:8a:ea:ae:77:fc:17:fc:0e:6e:e1:
58:de:38:02:9e:73:48:9a:2e:e7:ea:fe:1f:92:31:
ff:95:78:3f:1c:6a:15:e5:55:fe:42:7d:95:5b:d2:
1f:35:be:00:a7:4e:1a:9a:3d:5f:75:3e:3f:c9:0c:
5c:f7:25:9e:72:f9:f5:7d:0e:57:0b:70:ff:ca:bb:
fc:55:96:48:58:39:d2:92:77:34:b0:4c:52:9a:5f:
ab:b7:21:88:e0:bb:e7:48:8d:5b:6d:82:96:0c:50:
34:b4:6e:a1:73:f9:44:51:e2:1a:da:fb:b5:86:19:
9d:60:13:f9:a0:48:9c:e4:f7:2a:a7:6e:67:81:1b:
a6:63:34:7f:a2:c4:d8:9c:10:8e:74:43:76:e7:24:
64:b8:99:a5:b2:05:a5:0d:d8:c3:f0:a7:61:94:98:
e6:66:17:19:f5:6c:04:9f:98:98:65:aa:fe:71:3f:
a3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C0:95:C2:1A:32:83:85:19:6A:48:34:1D:09:B4:10:42:F6:A3:2F
X509v3 Authority Key Identifier:
keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132332e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.157.123.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:09:bd:48:c6:81:24:64:11:50:c5:38:44:59:d8:cc:6b:8b:
6c:f4:ef:bc:75:f0:da:6d:46:05:2d:56:6f:63:95:95:c1:7a:
0c:3a:35:64:68:92:42:56:5b:c5:f5:ba:54:63:29:d7:b6:15:
e2:4e:1b:fa:1c:18:d2:79:2d:6a:77:8e:3c:bf:f6:12:8b:88:
8b:00:53:bd:fe:71:ee:35:2e:db:44:57:78:2e:32:8c:83:b7:
85:46:46:68:e1:2b:ab:51:f9:13:b8:37:01:16:f5:41:a3:72:
0f:a3:9e:09:25:e4:94:13:df:f3:87:b2:91:c7:ec:05:40:0d:
96:cf:88:0b:18:d1:3a:bf:a8:b3:07:33:94:8e:fe:1d:6c:b0:
fa:34:4e:e9:79:61:f2:f5:a0:95:30:9c:57:54:2a:b9:f3:39:
47:0d:80:6a:14:7c:cb:61:5b:00:cb:11:71:7f:95:62:65:56:
0a:40:3c:7d:cd:35:86:b0:c6:a1:45:a5:bf:a3:50:8c:54:58:
e7:0a:43:2a:71:09:f8:8c:b3:9d:5a:30:87:78:73:c4:14:44:
46:31:02:10:97:6a:f3:4f:66:9a:75:82:f3:ed:e8:4b:0c:44:
c3:97:ae:8b:e6:da:c3:2f:b5:70:be:fe:c1:4c:d6:68:0e:3c:
0e:d6:01:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:47:43 2025 by rpki-client