Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232372e302f32342d3234203d3e203533333536.roa
File: 3138352e31332e3232372e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier: fyjNZl2BnH5gWmJXj7IkwC9hLUY6iDMpaWQ6H8Zs07M=
Subject key identifier: 4E:72:57:F7:5D:61:DD:7E:AD:56:83:31:26:63:39:4D:5B:79:82:E5
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 4453DD2B6630D1CB8673B8428D17F0AD78A95227
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232372e302f32342d3234203d3e203533333536.roa
Signing time: Tue 27 May 2025 13:43:44 +0000
ROA not before: Tue 27 May 2025 13:38:44 +0000
ROA not after: Tue 26 May 2026 13:43:44 +0000
asID: 53356
IP address blocks: 185.13.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 04:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:53:dd:2b:66:30:d1:cb:86:73:b8:42:8d:17:f0:ad:78:a9:52:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: May 27 13:38:44 2025 GMT
Not After : May 26 13:43:44 2026 GMT
Subject: CN=4E7257F75D61DD7EAD5683312663394D5B7982E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cb:cb:6b:73:be:a5:cc:40:26:e9:05:1a:bd:
14:1c:de:a4:d8:92:2e:6c:33:da:59:e5:7d:ee:06:
4b:33:25:9e:19:1c:c3:5b:14:1b:22:dc:93:58:0e:
06:8f:9c:f5:33:db:b9:ed:d8:b3:21:71:a1:f8:45:
4f:af:fd:f2:76:99:6a:7d:f9:35:d1:d8:b7:82:39:
73:25:be:b3:b8:96:c5:63:cb:bb:69:0d:2d:36:ea:
cf:37:40:08:63:d4:ab:8a:11:58:69:c3:29:46:c8:
6e:9b:fe:12:ac:37:9f:4a:fc:5a:39:73:b3:4e:30:
53:d9:1b:08:29:ff:96:19:d7:8b:52:a7:6f:e2:f4:
80:e2:73:cf:dc:50:5f:51:f9:95:07:69:ff:bd:66:
d1:ce:35:75:d6:e2:48:dc:98:1a:86:01:07:07:33:
03:ce:99:98:bc:6b:88:72:ef:ed:4a:27:c1:4e:d0:
0d:9f:bc:6d:66:0b:f6:cd:d1:24:33:83:81:1e:9d:
e4:4b:34:8a:8d:d9:c7:4c:1a:36:a3:a7:b4:f9:6b:
e0:88:01:83:09:0b:2a:08:3b:1d:d7:13:65:c9:2d:
77:da:6d:21:13:61:17:1c:0e:5e:0f:61:21:18:41:
f5:c3:ab:29:d2:37:c4:72:e1:ef:65:95:f7:14:18:
6a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:72:57:F7:5D:61:DD:7E:AD:56:83:31:26:63:39:4D:5B:79:82:E5
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232372e302f32342d3234203d3e203533333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.227.0/24
Signature Algorithm: sha256WithRSAEncryption
30:40:4a:2e:66:34:14:a2:0d:5f:39:68:36:d9:50:ed:d6:b6:
ae:c3:ad:03:36:06:7b:d8:95:5a:08:08:25:7e:74:28:15:ba:
57:26:67:6c:d3:6e:9a:d5:8a:b8:92:d1:eb:46:6e:c8:dc:0a:
26:92:8d:dd:fb:d8:3b:97:77:57:e4:a4:8f:a4:98:f2:aa:89:
9e:6e:bf:4e:9e:a2:79:25:51:ae:c1:b5:05:d4:4a:4f:f0:7d:
73:74:e5:8f:a5:50:de:b0:b9:e0:63:07:aa:05:41:f4:11:f3:
42:50:84:72:a0:87:d8:a1:b9:e9:a4:2d:a6:b0:6a:80:c7:f7:
40:8f:6d:a6:63:12:f0:58:9d:f2:50:58:a2:05:e9:1d:6a:59:
e4:86:e2:65:13:7d:2f:28:3f:dc:91:a7:f1:d0:50:ca:4e:9d:
5c:fa:36:ff:e4:7d:bc:28:93:39:8a:55:20:83:dd:65:75:28:
ad:af:4b:9c:40:a2:76:db:91:9a:79:8c:7d:4e:a9:61:78:28:
69:e1:7d:7c:8e:08:61:c5:6d:f0:b8:83:7e:48:fb:1a:77:60:
02:b7:bd:7d:1b:90:b4:21:0d:bf:8c:32:43:5a:9c:70:d3:c4:
be:29:27:5f:4c:60:f0:aa:ba:e8:73:7b:a9:0f:20:13:6b:72:
98:10:a4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:32:50 2025 by rpki-client