Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3139342e3131372e36392e302f32342d3234203d3e20323135323438.roa
File: 3139342e3131372e36392e302f32342d3234203d3e20323135323438.roa (raw, json)
Hash identifier: EqbKHazBpNo/bx4pclFyuqidomfYzdI+MjCRoDSagrM=
Subject key identifier: 9A:5D:6F:C4:0D:9C:A7:CD:5E:0F:E9:A3:6E:90:7B:1C:A4:0E:1C:94
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 19351CF78E93A8183D48DE0E839373CC5D1BC33A
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3139342e3131372e36392e302f32342d3234203d3e20323135323438.roa
Signing time: Mon 13 Oct 2025 17:26:52 +0000
ROA not before: Mon 13 Oct 2025 17:21:52 +0000
ROA not after: Mon 12 Oct 2026 17:26:52 +0000
asID: 215248
IP address blocks: 194.117.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Oct 2025 08:40:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:35:1c:f7:8e:93:a8:18:3d:48:de:0e:83:93:73:cc:5d:1b:c3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Oct 13 17:21:52 2025 GMT
Not After : Oct 12 17:26:52 2026 GMT
Subject: CN=9A5D6FC40D9CA7CD5E0FE9A36E907B1CA40E1C94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cd:b0:39:19:48:79:5c:28:dc:28:c7:72:2b:
ab:44:c4:15:0d:55:78:a2:a8:be:b8:1f:96:9b:42:
69:3a:68:4e:29:3a:e7:59:40:53:98:9f:30:35:61:
6b:e0:1f:9b:97:d4:f2:00:74:39:b8:79:12:43:ba:
88:c8:3f:21:31:a1:c3:d0:98:a3:0c:d9:18:10:d9:
e6:5f:70:07:8d:68:b8:8e:14:e7:79:ad:cd:a6:be:
84:9d:ff:0e:b0:cd:bf:46:33:ee:d7:6e:2e:94:56:
05:b4:62:06:ec:09:6a:32:f1:ad:72:23:3a:23:e6:
08:15:b5:92:83:80:74:b3:90:46:f8:5e:58:03:cd:
2f:28:ff:45:36:c6:fd:58:a6:9b:e3:55:c1:17:f1:
d5:11:b4:07:1b:05:1d:2b:3f:0e:8f:be:64:20:e0:
ed:59:99:ff:5e:51:52:e4:b2:4a:d8:0e:64:6f:49:
8a:87:69:bb:c6:bc:f8:d3:ea:48:69:fa:b0:db:7d:
3e:89:03:ec:4b:2b:23:aa:a1:68:d9:e1:53:61:2b:
df:ad:33:11:e7:9d:f2:48:d0:c8:5d:7e:b4:c1:cb:
31:96:15:b4:0f:80:08:43:f9:1a:12:d4:35:da:dc:
96:53:d8:53:97:b7:6f:8f:ad:99:cf:7e:41:58:01:
43:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5D:6F:C4:0D:9C:A7:CD:5E:0F:E9:A3:6E:90:7B:1C:A4:0E:1C:94
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3139342e3131372e36392e302f32342d3234203d3e20323135323438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.69.0/24
Signature Algorithm: sha256WithRSAEncryption
14:59:a4:c7:b3:d5:88:c7:20:82:60:f6:d4:1f:46:47:5b:f2:
17:a7:27:bd:a9:e3:d1:5d:f0:30:08:0d:2c:fb:8d:e9:5f:c8:
82:22:b4:7e:88:eb:dd:6d:48:1e:c2:fa:28:df:12:d9:a4:c3:
e3:08:a4:04:04:80:6a:75:aa:6a:ea:c0:15:fa:26:46:8e:3d:
b3:ac:0f:75:15:fc:2c:e6:c9:60:ac:c4:42:47:ea:c1:04:92:
07:72:fb:a3:15:fb:c2:b9:62:56:09:7a:63:18:fb:b3:05:8c:
06:0f:cd:c0:59:78:50:c3:d8:f0:79:8e:ae:31:39:b4:d6:0a:
cd:10:19:a4:46:1e:8d:41:5e:b9:81:4e:3a:2a:41:11:c6:50:
b1:e3:ad:25:78:14:36:7f:b5:0a:c5:d6:f5:40:1b:5c:a1:8c:
80:73:59:87:57:e0:3c:55:cb:a5:01:99:af:1b:be:d8:d5:ad:
04:cc:39:e3:bb:e9:51:36:e3:af:10:19:6f:80:22:f2:5d:d7:
73:bc:61:db:a6:e8:35:44:72:a6:65:75:76:d5:7a:b7:fb:c9:
74:69:6c:e1:99:9d:4c:32:85:d8:0f:07:92:63:77:08:51:e5:
5a:24:c8:ca:e7:b8:93:a5:5b:7b:5f:a3:a4:31:36:cd:b7:4d:
2d:4c:18:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 20:09:59 2025 by rpki-client