Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa
File: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (raw, json)
Hash identifier: IiLsd5rWyRAEtPC2BRNztBwgXOWFkCLAq6FHsMnhQxg=
Subject key identifier: 8A:36:18:5F:60:FB:10:8A:FB:EA:46:C3:D8:21:9B:2F:65:F1:E7:B9
Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial: 5B0076B0E5D51B8AF1549AB409ECE5458E849719
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa
Signing time: Tue 27 May 2025 15:50:37 +0000
ROA not before: Tue 27 May 2025 15:45:37 +0000
ROA not after: Tue 26 May 2026 15:50:37 +0000
asID: 200198
IP address blocks: 2a11:5701:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:00:76:b0:e5:d5:1b:8a:f1:54:9a:b4:09:ec:e5:45:8e:84:97:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
Validity
Not Before: May 27 15:45:37 2025 GMT
Not After : May 26 15:50:37 2026 GMT
Subject: CN=8A36185F60FB108AFBEA46C3D8219B2F65F1E7B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:58:4b:be:e8:e1:e4:aa:ee:d5:01:aa:19:
b6:40:0b:49:a2:f4:60:95:20:f0:85:6f:63:f3:31:
da:34:ec:d3:16:52:1d:18:9c:66:4a:b0:ef:5d:80:
b3:95:34:5d:cb:7a:db:40:77:70:6b:13:6c:4b:ed:
a9:6f:56:70:cb:9e:e6:f8:c8:d0:6b:7f:bf:58:0c:
f1:82:ba:26:ff:58:69:9f:2c:ff:a9:f1:16:51:a9:
97:69:a3:ea:f7:87:34:b8:20:43:10:02:84:f6:fd:
dd:5c:94:84:0a:41:16:81:0a:82:17:35:26:05:7b:
4c:5c:c2:ff:b6:9d:80:83:f9:3e:04:74:60:a4:d3:
7f:b8:49:6a:d6:77:05:3f:09:3d:46:e3:be:a1:35:
65:c9:9d:cb:56:94:4e:0a:29:68:49:e3:77:98:69:
0a:eb:f7:33:e3:14:54:21:06:69:6e:08:4a:ec:b3:
2a:e2:1c:24:82:a1:1c:92:e2:03:34:e9:36:77:80:
9e:30:c6:03:4f:35:2b:1c:bb:42:25:5e:a0:da:6f:
39:99:c6:48:b4:e0:23:ae:ef:63:eb:83:b8:af:e4:
1d:51:f1:db:87:72:8b:b5:a1:bb:90:04:27:3e:0d:
10:97:c8:61:c3:38:f5:de:7d:44:03:ae:c9:63:23:
ba:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:36:18:5F:60:FB:10:8A:FB:EA:46:C3:D8:21:9B:2F:65:F1:E7:B9
X509v3 Authority Key Identifier:
keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5701:10::/44
Signature Algorithm: sha256WithRSAEncryption
16:fb:47:89:41:9c:51:c6:fb:12:5e:af:32:72:5e:47:57:e6:
f2:46:e1:f8:a4:cb:13:16:84:1e:61:d7:00:c0:d4:30:f7:46:
58:a6:d8:8e:02:0e:a4:21:78:af:d9:e8:b8:65:92:64:89:00:
b8:1b:65:3b:fe:e8:2a:77:ab:f3:08:6f:27:ba:36:8f:33:1c:
93:65:93:88:ab:93:f9:7f:cb:70:9d:fc:26:6c:19:05:78:4b:
ee:8f:27:3f:3c:ed:ed:7c:00:3c:bf:f2:56:cc:1b:b9:be:79:
82:08:54:55:6a:d8:96:5f:95:14:c5:c8:1f:ee:60:30:d7:5d:
41:6e:04:80:9f:1a:88:4a:9d:31:7a:c8:5b:20:d3:d3:7a:3b:
81:a2:ad:79:22:e0:ca:aa:64:0e:23:68:d2:44:8e:4d:ee:5f:
94:ee:c5:01:65:05:ed:8e:04:d9:e1:af:dd:08:de:1c:05:c8:
e7:35:4c:f0:9e:7d:54:95:e5:7d:e1:32:ec:9c:1a:7c:8b:20:
de:14:aa:3e:22:4e:d1:34:ef:9a:a5:0b:08:5a:8c:f3:72:29:
4e:bb:c0:15:22:14:08:67:e9:35:27:01:34:10:ba:32:73:48:
d5:85:48:eb:37:f3:d2:f3:c8:41:0a:45:19:ce:16:fa:18:f5:
4e:13:4c:9b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUWwB2sOXVG4rxVJq0CezlRY6ElxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz
ODI0ZTZiODAeFw0yNTA1MjcxNTQ1MzdaFw0yNjA1MjYxNTUwMzdaMDMxMTAvBgNV
BAMTKDhBMzYxODVGNjBGQjEwOEFGQkVBNDZDM0Q4MjE5QjJGNjVGMUU3QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCMFhLvujh5Kru1QGqGbZAC0mi
9GCVIPCFb2PzMdo07NMWUh0YnGZKsO9dgLOVNF3LettAd3BrE2xL7alvVnDLnub4
yNBrf79YDPGCuib/WGmfLP+p8RZRqZdpo+r3hzS4IEMQAoT2/d1clIQKQRaBCoIX
NSYFe0xcwv+2nYCD+T4EdGCk03+4SWrWdwU/CT1G476hNWXJnctWlE4KKWhJ43eY
aQrr9zPjFFQhBmluCErssyriHCSCoRyS4gM06TZ3gJ4wxgNPNSscu0IlXqDabzmZ
xki04COu72Prg7iv5B1R8duHcou1obuQBCc+DRCXyGHDOPXefUQDrsljI7pzAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUijYYX2D7EIr76kbD2CGbL2Xx57kwHwYDVR0j
BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh
NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn
azVyZy5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUt
NGIxYS00NmVhLTljOTUtNGFmMTI5NjRhNDlkLzAvMzI2MTMxMzEzYTM1MzczMDMx
M2EzMTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIzMDMwMzEzOTM4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcEKhFXAQAQMA0GCSqGSIb3DQEBCwUAA4IBAQAW+0eJQZxRxvsSXq8ycl5H
V+byRuH4pMsTFoQeYdcAwNQw90ZYptiOAg6kIXiv2ei4ZZJkiQC4G2U7/ugqd6vz
CG8nujaPMxyTZZOIq5P5f8twnfwmbBkFeEvujyc/PO3tfAA8v/JWzBu5vnmCCFRV
atiWX5UUxcgf7mAw111BbgSAnxqISp0xeshbINPTejuBoq15IuDKqmQOI2jSRI5N
7l+U7sUBZQXtjgTZ4a/dCN4cBcjnNUzwnn1UleV94TLsnBp8iyDeFKo+Ik7RNO+a
pQsIWozzcilOu8AVIhQIZ+k1JwE0ELoyc0jVhUjrN/PS88hBCkUZzhb6GPVOE0yb
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:33:47 2025 by rpki-client