Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/38352e3230392e3232332e302f32342d3234203d3e20323133363232.roa
File: 38352e3230392e3232332e302f32342d3234203d3e20323133363232.roa (raw, json)
Hash identifier: Wrcoz6SheHc8SWiw4gi6kfFa7qGHg848P563Ho6mwi0=
Subject key identifier: 76:79:3D:DF:9E:B8:AF:5D:C5:87:CE:06:D2:6C:E1:70:9E:12:46:02
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 6B2E67C5CA26F0C082DA2CE2C7FF559D9DC306FE
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/38352e3230392e3232332e302f32342d3234203d3e20323133363232.roa
Signing time: Wed 05 Nov 2025 16:18:26 +0000
ROA not before: Wed 05 Nov 2025 16:13:26 +0000
ROA not after: Wed 04 Nov 2026 16:18:26 +0000
asID: 213622
IP address blocks: 85.209.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:2e:67:c5:ca:26:f0:c0:82:da:2c:e2:c7:ff:55:9d:9d:c3:06:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Nov 5 16:13:26 2025 GMT
Not After : Nov 4 16:18:26 2026 GMT
Subject: CN=76793DDF9EB8AF5DC587CE06D26CE1709E124602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:e7:7f:49:1a:54:25:88:35:97:7b:ab:48:
6e:71:08:ac:20:c1:72:f1:87:a2:13:e9:ab:1f:83:
24:64:d0:79:b9:d6:84:1f:f6:04:41:94:f6:7e:5d:
92:65:b3:7b:51:a2:eb:91:d8:9c:9b:0e:7a:7f:18:
7d:85:6f:e3:f9:27:44:f1:38:3c:ef:8d:5a:0b:c3:
5e:1d:6c:80:17:a1:8a:fd:a9:21:75:f9:a7:7e:84:
51:99:33:77:86:7b:71:68:c3:28:20:0b:d2:49:ba:
0f:b9:00:49:50:8b:fb:3f:7b:1e:a3:a2:68:0f:b2:
d9:85:54:dc:65:f7:6d:40:da:6f:78:af:21:51:af:
2a:c5:66:db:4c:bf:15:bb:fb:bb:46:72:96:c3:5d:
ac:a2:e3:41:e4:c7:b6:ee:1d:ec:46:b8:25:d8:c0:
a5:99:9f:56:62:c6:a6:96:6f:70:4a:43:38:32:5f:
aa:79:d7:14:6a:e1:04:c1:06:95:37:76:5a:f1:22:
e5:26:89:74:a2:62:30:ef:ac:81:8e:3b:e6:dc:99:
a2:78:80:74:05:19:e7:24:c4:97:ed:34:57:ac:d9:
ca:5f:8f:4b:ac:9d:63:f5:e7:35:92:0d:52:09:98:
e5:bd:96:bc:96:2e:1f:92:c4:6b:f0:5b:b9:6e:36:
c7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:79:3D:DF:9E:B8:AF:5D:C5:87:CE:06:D2:6C:E1:70:9E:12:46:02
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/38352e3230392e3232332e302f32342d3234203d3e20323133363232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.223.0/24
Signature Algorithm: sha256WithRSAEncryption
92:f3:51:1a:59:e0:27:bb:f1:c0:0b:b9:88:01:6b:15:c9:69:
ef:9f:fd:2a:fb:8c:aa:6f:b3:bd:a7:b6:1c:9e:4e:a9:8b:2c:
b9:38:58:2a:c5:e2:f3:cb:3f:a7:e4:67:41:d6:0f:7d:d8:8f:
91:cf:69:98:34:71:d7:07:ff:0d:ae:a4:45:31:a5:aa:86:a9:
f6:fa:91:57:88:7c:ff:55:21:50:7e:79:cb:16:f9:8e:1f:dc:
cb:51:e6:7d:b4:a3:f7:b7:73:5a:9d:71:ca:40:12:7a:e7:96:
d1:9b:c0:9e:1d:12:8d:9d:54:5f:97:b0:9d:48:8e:12:19:cd:
28:42:a3:d8:aa:50:41:87:f6:09:2e:3f:12:50:d1:84:a0:b9:
e9:70:d5:5e:78:31:b8:44:6e:1a:16:e3:0a:e7:e4:60:9b:d0:
b7:c4:ea:f6:af:9e:8a:b3:8c:bf:fe:dc:d0:09:96:45:37:cc:
a4:9f:e6:4b:6b:e1:37:40:bd:8d:55:ce:88:1c:85:4e:11:f5:
de:3d:9d:d5:d0:2d:7a:ed:d6:dd:56:92:ea:7f:a7:05:0a:f4:
bc:bc:6f:1a:28:5b:47:85:8b:19:ae:06:f6:0f:ee:7f:55:cf:
f7:db:0b:54:da:8a:c7:36:41:77:8d:82:d8:7b:24:14:2c:e8:
66:8f:65:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 21:20:21 2025 by rpki-client