Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/3139342e3135332e3135382e302f32362d3236203d3e203438323830.roa
File: 3139342e3135332e3135382e302f32362d3236203d3e203438323830.roa (raw, json)
Hash identifier: vANCAIBQUmiZCdG8mosZNJVFV3jH6SOLvVTY393OKek=
Subject key identifier: ED:8D:DE:0D:0E:C3:B7:37:9E:6E:AD:65:1B:74:25:96:D0:EB:3E:EB
Certificate issuer: /CN=e7585b5cd477d90075cdb63109f57279766c2976
Certificate serial: 52160CBACE12042C45AFE42EC83CE4E4D8671344
Authority key identifier: E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/3139342e3135332e3135382e302f32362d3236203d3e203438323830.roa
Signing time: Mon 10 Nov 2025 10:27:53 +0000
ROA not before: Mon 10 Nov 2025 10:22:53 +0000
ROA not after: Mon 09 Nov 2026 10:27:53 +0000
asID: 48280
IP address blocks: 194.153.158.0/26 maxlen: 26
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl
rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft
rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:16:0c:ba:ce:12:04:2c:45:af:e4:2e:c8:3c:e4:e4:d8:67:13:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7585b5cd477d90075cdb63109f57279766c2976
Validity
Not Before: Nov 10 10:22:53 2025 GMT
Not After : Nov 9 10:27:53 2026 GMT
Subject: CN=ED8DDE0D0EC3B7379E6EAD651B742596D0EB3EEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:bb:a7:9c:61:bf:74:b9:c5:3c:fa:47:27:
9e:18:86:b3:10:67:b2:73:62:25:65:11:75:98:14:
b0:f8:0a:a2:38:a0:8e:0a:85:20:d2:fa:64:60:fb:
0d:1e:03:c2:2f:e3:7a:1e:2e:98:74:42:27:30:29:
ba:76:35:cf:bd:99:ce:cc:ae:c2:22:4d:85:82:a2:
20:ad:6b:f4:28:a3:cd:8b:52:4f:c4:55:18:a3:d2:
e4:1e:06:f7:b4:92:41:06:b0:2f:57:69:16:0e:5e:
5d:ac:e1:6f:f5:76:e1:5e:f2:dc:37:3a:d8:d0:c9:
85:55:3b:9d:69:18:dd:0f:eb:00:24:13:ae:5c:d9:
eb:eb:13:24:0b:4d:8e:b4:62:fa:ec:f6:e0:7c:71:
81:1c:1d:20:7b:67:7d:51:5a:cb:f9:57:d1:c0:ed:
a1:c1:ba:d7:5f:75:2f:f4:1e:6e:ec:33:b7:db:b3:
e4:5c:5a:df:e1:ce:d6:db:8d:c1:1b:a3:22:5f:7d:
b5:df:28:eb:33:d7:2b:94:bc:1f:4b:68:e6:34:72:
fe:d2:f7:f2:d6:4e:78:d6:8f:d7:23:1a:db:0b:13:
74:9d:8e:c6:16:e5:fd:ac:92:f4:5e:b1:4f:15:3d:
9c:3f:9b:70:ba:18:53:e8:f5:69:b9:28:4a:08:69:
2d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8D:DE:0D:0E:C3:B7:37:9E:6E:AD:65:1B:74:25:96:D0:EB:3E:EB
X509v3 Authority Key Identifier:
keyid:E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/3139342e3135332e3135382e302f32362d3236203d3e203438323830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.158.0/26
Signature Algorithm: sha256WithRSAEncryption
3d:7d:92:49:77:54:a6:4c:b7:99:e5:16:8b:50:03:ee:7e:fd:
a5:9a:4e:58:29:7f:8f:88:99:d0:78:1d:de:02:59:3d:0f:db:
25:7e:5f:ad:a1:ff:7e:40:1f:1d:77:65:1d:69:32:cc:53:91:
bb:5e:a0:aa:11:e0:73:96:c0:ca:f3:fe:ef:60:b8:df:55:94:
a0:68:00:7a:d6:c5:a0:a0:e0:fb:90:62:ac:20:71:ff:d3:b2:
e9:b1:ee:64:a1:d0:39:7f:68:9a:eb:e5:32:d3:93:e2:4b:1f:
35:5b:e0:44:89:57:e4:79:ae:86:6e:46:52:99:76:5a:90:99:
22:16:4a:6a:07:0b:1a:e0:d7:45:45:61:9b:93:6f:7e:79:be:
c4:90:c4:ef:cc:87:2c:b1:8d:ba:8c:b0:02:08:06:e9:e4:f0:
e8:04:84:a7:97:05:44:70:29:45:10:24:92:78:0f:55:52:9c:
21:d0:1e:f1:f9:6a:27:a3:4b:64:9c:12:0c:42:2e:4a:d6:b8:
39:92:d9:a7:0a:5d:98:fa:9f:a4:2f:fa:1a:c8:f7:6b:2e:d2:
7e:c9:88:bf:3c:98:5f:22:3a:46:8c:13:39:fd:09:ea:7a:a5:
37:97:e6:c8:65:7c:30:e7:61:48:33:f4:b0:d1:46:f1:83:b4:
15:e6:b1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:54:53 2025 by rpki-client