Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/323030313a3766383a38393a3a2f34382d3634203d3e203438323830.roa
File: 323030313a3766383a38393a3a2f34382d3634203d3e203438323830.roa (raw, json)
Hash identifier: toWECki1z50+cTDXuuD0ix4TCBXmtlZ4RV70JAsHdxg=
Subject key identifier: A7:1D:A6:D3:98:ED:A7:84:C3:69:49:33:7E:D7:59:26:9E:62:CF:C3
Certificate issuer: /CN=e7585b5cd477d90075cdb63109f57279766c2976
Certificate serial: 3FFF1CD4C471ED25F2A62ECB123CFA28ED4A4F41
Authority key identifier: E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/323030313a3766383a38393a3a2f34382d3634203d3e203438323830.roa
Signing time: Mon 10 Nov 2025 10:28:12 +0000
ROA not before: Mon 10 Nov 2025 10:23:12 +0000
ROA not after: Mon 09 Nov 2026 10:28:12 +0000
asID: 48280
IP address blocks: 2001:7f8:89::/48 maxlen: 64
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl
rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft
rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ff:1c:d4:c4:71:ed:25:f2:a6:2e:cb:12:3c:fa:28:ed:4a:4f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7585b5cd477d90075cdb63109f57279766c2976
Validity
Not Before: Nov 10 10:23:12 2025 GMT
Not After : Nov 9 10:28:12 2026 GMT
Subject: CN=A71DA6D398EDA784C36949337ED759269E62CFC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:1b:63:ab:67:cd:7b:09:b6:b9:c4:0f:ef:
f2:76:b0:db:3f:4d:6b:79:2e:d0:d3:e3:30:ee:44:
53:b6:36:5b:f8:d1:64:b5:e8:88:8a:61:98:35:b4:
91:58:ff:0b:02:6b:4f:e7:68:01:90:20:5b:71:e1:
06:36:53:fd:db:5f:bd:55:96:c2:83:77:22:3d:f6:
14:be:b8:6e:c2:32:ea:92:1d:7c:88:ed:e4:24:33:
e3:0b:b1:9b:d1:df:bb:06:48:2c:8e:96:3d:05:ab:
18:c5:b8:a3:b8:76:af:48:dc:5e:9d:18:ad:ef:88:
c2:14:7b:2a:dc:96:19:3a:4f:21:92:26:a4:8d:b7:
47:56:82:53:37:7c:b4:c4:89:1f:42:38:c4:12:40:
6f:b8:45:e1:14:a8:1f:54:49:34:ed:8a:eb:8a:f0:
50:04:a9:73:69:4a:e6:c4:9a:75:01:d6:78:63:73:
6c:d2:db:ff:56:ee:8f:0e:4d:e1:a9:67:df:3d:2c:
2f:f9:18:b0:4c:a0:d4:2c:aa:2b:bd:1a:ed:1c:6f:
be:08:cb:82:f0:42:de:06:0c:83:9c:32:c3:aa:06:
46:d6:8b:95:5d:e1:b4:83:7a:d3:82:40:76:d1:a1:
c3:e2:51:f6:9c:8f:2a:20:1c:8f:93:73:03:90:a6:
8c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1D:A6:D3:98:ED:A7:84:C3:69:49:33:7E:D7:59:26:9E:62:CF:C3
X509v3 Authority Key Identifier:
keyid:E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/323030313a3766383a38393a3a2f34382d3634203d3e203438323830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:7f8:89::/48
Signature Algorithm: sha256WithRSAEncryption
94:c2:0d:bc:72:70:c8:e9:31:43:0c:ad:f0:59:32:8a:e3:96:
3d:28:08:ae:8b:14:e3:8c:42:15:b5:42:1c:a4:04:77:72:47:
cf:dd:0d:22:66:d0:b6:a9:ce:b2:38:69:eb:39:ff:3a:23:11:
15:51:34:d2:89:6b:60:73:44:c8:7d:9b:d8:7f:8a:3d:93:60:
21:37:ac:e0:c5:6b:2a:c2:28:71:ae:6c:43:83:6c:e3:74:8f:
7b:34:88:a5:51:1d:49:66:12:6e:ad:c9:a3:64:ef:fa:41:f5:
2e:4b:dd:e5:4f:a2:73:cc:57:9e:63:09:2e:91:f5:f9:2c:ca:
ea:b2:40:37:ca:ac:ac:3c:d9:5a:1e:13:84:43:47:c8:7b:d1:
ce:9b:41:82:8c:a6:14:9a:53:9a:ac:f5:d8:15:f6:96:91:99:
82:9a:bb:b9:5b:18:24:49:0e:b7:5c:68:b2:f2:d7:f6:64:9f:
bc:ca:96:26:47:7d:88:64:5c:63:51:5e:3e:dc:31:ae:f7:bd:
56:57:97:0f:a0:ef:fc:ba:05:10:72:ef:c9:8b:00:4a:08:e6:
93:e8:17:71:69:5d:f5:47:9d:b4:b9:73:35:38:60:88:67:90:
45:c4:ad:c9:37:57:fc:75:ba:8c:3f:f5:0f:62:f3:0d:2f:f5:
fb:d6:0f:a1
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUP/8c1MRx7SXypi7LEjz6KO1KT0EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTc1ODViNWNkNDc3ZDkwMDc1Y2RiNjMxMDlmNTcyNzk3
NjZjMjk3NjAeFw0yNTExMTAxMDIzMTJaFw0yNjExMDkxMDI4MTJaMDMxMTAvBgNV
BAMTKEE3MURBNkQzOThFREE3ODRDMzY5NDkzMzdFRDc1OTI2OUU2MkNGQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Fhtjq2fNewm2ucQP7/J2sNs/
TWt5LtDT4zDuRFO2Nlv40WS16IiKYZg1tJFY/wsCa0/naAGQIFtx4QY2U/3bX71V
lsKDdyI99hS+uG7CMuqSHXyI7eQkM+MLsZvR37sGSCyOlj0FqxjFuKO4dq9I3F6d
GK3viMIUeyrclhk6TyGSJqSNt0dWglM3fLTEiR9COMQSQG+4ReEUqB9USTTtiuuK
8FAEqXNpSubEmnUB1nhjc2zS2/9W7o8OTeGpZ989LC/5GLBMoNQsqiu9Gu0cb74I
y4LwQt4GDIOcMsOqBkbWi5Vd4bSDetOCQHbRocPiUfacjyogHI+TcwOQpoyRAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUpx2m05jtp4TDaUkzftdZJp5iz8MwHwYDVR0j
BBgwFoAU51hbXNR32QB1zbYxCfVyeXZsKXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1
YjQ5LzEvRTc1ODVCNUNENDc3RDkwMDc1Q0RCNjMxMDlGNTcyNzk3NjZDMjk3Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxaGJYTlIzMlFCMXpiWXhDZlZ5ZVha
c0tYWS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTMwZGU4NGIt
NDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1YjQ5LzEvMzIzMDMwMzEzYTM3NjYzODNh
MzgzOTNhM2EyZjM0MzgyZDM2MzQyMDNkM2UyMDM0MzgzMjM4MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAgAQf4AIkwDQYJKoZIhvcNAQELBQADggEBAJTCDbxycMjpMUMMrfBZMorjlj0o
CK6LFOOMQhW1QhykBHdyR8/dDSJm0LapzrI4aes5/zojERVRNNKJa2BzRMh9m9h/
ij2TYCE3rODFayrCKHGubEODbON0j3s0iKVRHUlmEm6tyaNk7/pB9S5L3eVPonPM
V55jCS6R9fksyuqyQDfKrKw82VoeE4RDR8h70c6bQYKMphSaU5qs9dgV9paRmYKa
u7lbGCRJDrdcaLLy1/Zkn7zKliZHfYhkXGNRXj7cMa73vVZXlw+g7/y6BRBy78mL
AEoI5pPoF3FpXfVHnbS5czU4YIhnkEXErck3V/x1uow/9Q9i8w0v9fvWD6E=
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:54:57 2025 by rpki-client