Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa
File: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (raw, json)
Hash identifier: r2VWTeXnfDWuim8gDU2ktI3y2NGYwT6ofTi2l1VlIzk=
Subject key identifier: E2:E5:0E:E9:A2:48:1B:D3:94:26:A9:A7:B7:14:E2:93:15:10:D3:A3
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 61CA8BFA9F8DF1E69DC7478A1A1BEA11EE2BA835
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa
Signing time: Tue 02 Sep 2025 08:54:58 +0000
ROA not before: Tue 02 Sep 2025 08:49:58 +0000
ROA not after: Tue 01 Sep 2026 08:54:58 +0000
asID: 134677
IP address blocks: 146.19.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:ca:8b:fa:9f:8d:f1:e6:9d:c7:47:8a:1a:1b:ea:11:ee:2b:a8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Sep 2 08:49:58 2025 GMT
Not After : Sep 1 08:54:58 2026 GMT
Subject: CN=E2E50EE9A2481BD39426A9A7B714E2931510D3A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:6f:18:3f:7f:d3:62:97:62:3d:d8:27:bc:
74:37:d4:0c:08:b3:10:58:d6:01:78:e4:e6:ae:af:
c5:ca:4e:07:18:5d:c0:d5:37:e0:77:60:08:86:64:
97:f7:9b:04:74:c1:ed:50:ea:47:e1:f6:33:c4:6e:
a4:56:39:26:69:9d:73:21:dc:3e:ef:51:c2:a1:33:
2e:0a:24:87:9c:d7:b0:f4:f4:d5:8d:db:66:09:dd:
45:7d:1f:b7:b0:7a:76:6b:69:2f:6a:f4:ed:ed:22:
41:68:3d:0d:07:46:9f:52:f7:52:2c:b4:0b:3d:1c:
3b:02:97:94:c5:13:c5:9a:b0:bb:39:7d:00:85:99:
34:33:77:cc:cf:de:14:14:fb:3e:f1:43:59:f5:a5:
26:e8:4b:04:dc:39:ed:88:cd:dc:e2:15:c9:a1:cc:
0f:eb:37:90:b0:a7:4f:8a:7e:ff:de:fc:6f:8e:ec:
6e:ac:04:97:51:ad:b8:21:db:ae:9a:3b:d4:36:81:
0e:c5:aa:7a:b6:5a:58:e1:ae:99:6e:16:e5:66:33:
c7:1a:ea:9a:81:60:70:24:0c:3b:60:4e:34:48:ad:
9c:48:51:16:ee:69:c0:ca:02:12:53:56:ac:b9:0a:
fd:a8:e1:1c:00:d2:9d:e1:2f:27:00:78:8e:00:aa:
35:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E5:0E:E9:A2:48:1B:D3:94:26:A9:A7:B7:14:E2:93:15:10:D3:A3
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.216.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:ae:79:c9:c8:02:d9:d6:97:28:7a:02:a8:0f:d3:72:3f:98:
cb:70:7b:45:71:8d:ca:c5:d5:57:dd:71:15:26:fa:04:05:9a:
8f:84:70:c4:22:64:4b:a1:46:08:5a:de:7d:e0:4e:74:15:45:
64:78:01:1e:3d:f3:59:75:34:89:0b:40:fe:a9:1e:65:34:09:
15:3d:36:4c:1f:9b:06:d2:32:b5:cf:f5:ba:75:50:f1:70:ba:
bf:68:0d:e1:a5:3b:fc:e7:bf:bd:99:94:e2:03:c0:46:5b:b4:
9d:40:de:e6:bc:d2:29:35:1f:97:14:b9:e6:a5:43:3d:9e:d3:
c5:33:2f:bc:f5:8c:61:c2:43:c6:81:39:7d:25:af:71:8e:d4:
30:f2:91:01:24:4f:e9:84:8d:a2:c2:76:4d:43:c4:74:a6:a1:
c8:af:aa:db:3f:c4:50:d3:eb:65:97:3f:ce:b7:cb:6d:e0:a1:
e4:39:01:a3:8b:f6:1f:f8:cf:a0:4d:eb:65:d0:ae:b5:db:8b:
64:3b:48:25:c6:6b:dd:60:29:f7:c2:cb:40:ff:b6:c0:45:c7:
4c:ac:48:e7:1c:29:1d:3d:ad:51:45:88:96:e5:50:30:c9:b8:
eb:77:0d:79:8d:bd:9d:9d:7e:99:91:a7:11:38:3a:80:af:05:
aa:8b:34:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 15:29:10 2025 by rpki-client