Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/323030313a3637633a316237303a3a2f34382d3438203d3e2032343838.roa
File: 323030313a3637633a316237303a3a2f34382d3438203d3e2032343838.roa (raw, json)
Hash identifier: nLc6b+BJhcWqteWvSt4lz7/51CfameMyZ399v4d2P0c=
Subject key identifier: 87:C2:AC:EC:34:A1:CC:27:21:25:2F:FA:EB:6C:9B:A9:ED:56:61:B2
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 65F4E1CFFF8C70FE66C105ED32F47C24A025A433
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/323030313a3637633a316237303a3a2f34382d3438203d3e2032343838.roa
Signing time: Tue 26 Aug 2025 07:36:40 +0000
ROA not before: Tue 26 Aug 2025 07:31:40 +0000
ROA not after: Tue 25 Aug 2026 07:36:40 +0000
asID: 2488
IP address blocks: 2001:67c:1b70::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 15:34:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:f4:e1:cf:ff:8c:70:fe:66:c1:05:ed:32:f4:7c:24:a0:25:a4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Aug 26 07:31:40 2025 GMT
Not After : Aug 25 07:36:40 2026 GMT
Subject: CN=87C2ACEC34A1CC2721252FFAEB6C9BA9ED5661B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:ff:4c:90:ab:c6:cd:6e:c9:13:8d:08:f7:
1f:2c:95:05:8d:86:5f:54:12:67:48:fd:6c:ab:04:
1d:8a:9a:71:31:88:f5:c2:9d:b2:69:39:7d:6a:85:
70:7d:b4:f2:42:1c:b9:16:ae:0c:6c:c3:df:90:81:
d7:b3:35:66:38:a8:f1:54:85:5b:f8:80:07:9b:40:
57:90:01:8a:31:24:69:79:b6:b7:05:a2:f8:e2:f2:
1d:9c:ad:1b:8f:19:1c:d8:5b:7c:50:39:d0:1c:90:
42:5e:3b:c5:28:3d:5a:64:65:7f:48:39:f0:28:86:
ee:db:e0:c9:22:8b:ee:2b:a2:5d:c9:72:5f:80:c5:
1b:98:b4:ff:46:ce:ac:2c:9f:d8:cf:96:ce:f1:bc:
7d:b1:97:5f:f0:5a:26:72:47:69:a5:70:69:eb:28:
5f:d8:20:27:2f:ae:e1:7a:a0:51:f4:06:81:bb:37:
46:f6:95:12:a5:89:0d:eb:ec:5b:bb:cc:72:eb:fc:
60:85:23:f6:5e:07:33:43:20:17:98:7d:9e:3d:4f:
aa:9e:86:12:36:4c:c2:05:f5:b6:19:18:b8:22:1f:
e2:d0:09:68:6d:53:7b:80:cf:0d:54:ba:24:c1:5b:
cb:55:ac:a1:7b:1b:56:77:f3:6e:7d:b1:9c:52:ca:
75:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C2:AC:EC:34:A1:CC:27:21:25:2F:FA:EB:6C:9B:A9:ED:56:61:B2
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/323030313a3637633a316237303a3a2f34382d3438203d3e2032343838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1b70::/48
Signature Algorithm: sha256WithRSAEncryption
84:67:3b:99:2d:cd:1a:19:e5:52:90:4f:12:7e:0c:3d:49:0c:
87:d5:a2:58:c9:cf:42:da:9d:98:62:57:63:59:72:da:7f:ea:
3b:c1:46:34:d2:38:45:eb:5f:f8:f3:7f:6f:08:a3:6f:24:d1:
20:aa:89:31:04:f2:ea:b0:84:73:33:af:14:ed:09:01:3f:be:
be:46:ad:dd:a4:31:54:98:28:47:7d:9f:e4:da:d4:f1:d1:aa:
ee:a5:f5:e1:76:be:27:f8:38:b7:99:72:cc:28:3a:0c:94:8b:
12:1f:c9:17:e6:4f:61:51:29:58:99:2b:ed:7e:bd:e4:83:63:
a7:ba:6b:0e:aa:04:f8:3a:8f:88:fc:ec:39:12:26:e2:3d:a3:
27:e0:34:3c:e2:f1:76:02:0a:29:06:7b:ad:4b:ea:5a:b0:b9:
b4:28:52:66:2e:ed:7b:9f:21:da:2a:b3:16:6e:3b:ad:be:a0:
f5:48:d4:26:b7:1a:33:4e:f8:47:b6:3c:08:48:ba:1f:2f:b5:
6a:74:55:78:3e:55:36:81:f0:21:d1:30:e6:76:31:52:47:d2:
15:e3:88:b5:3f:2b:d0:b8:41:2c:d1:c0:0b:a4:a1:1f:40:bb:
2e:09:7c:70:fc:32:0b:7a:f5:ac:31:65:16:05:a1:00:a8:bc:
da:85:b3:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:20:07 2025 by rpki-client