Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3139342e39392e3135362e302f32342d3234203d3e203232343237.roa
File: 3139342e39392e3135362e302f32342d3234203d3e203232343237.roa (raw, json)
Hash identifier: rIB6LZlyDY4ccd8aiBOUspQRAkgz2Qkx5QliZapGW3w=
Subject key identifier: 3A:CD:E3:49:15:A9:17:4A:5E:30:63:93:2D:7B:9C:75:4F:2F:C5:C1
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 0595F95CA980BD35C0D34AFC991A0A2C9BD4EEA3
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3139342e39392e3135362e302f32342d3234203d3e203232343237.roa
Signing time: Fri 23 May 2025 12:37:23 +0000
ROA not before: Fri 23 May 2025 12:32:23 +0000
ROA not after: Fri 22 May 2026 12:37:23 +0000
asID: 22427
IP address blocks: 194.99.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:23:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:95:f9:5c:a9:80:bd:35:c0:d3:4a:fc:99:1a:0a:2c:9b:d4:ee:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: May 23 12:32:23 2025 GMT
Not After : May 22 12:37:23 2026 GMT
Subject: CN=3ACDE34915A9174A5E3063932D7B9C754F2FC5C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:cd:a3:ea:6c:d3:16:41:15:24:c8:2d:fd:
84:3a:36:98:49:c2:96:fc:09:2a:bd:42:cc:90:7f:
5e:ba:7c:38:b0:70:28:05:49:5f:f7:ff:53:95:68:
1a:0c:fb:5f:fa:96:47:5d:e2:7a:d7:17:5c:fa:04:
fa:b3:a0:9f:b7:2a:f6:56:dd:89:90:0a:f4:59:09:
a1:a8:7c:c0:b8:e0:a6:a1:8a:78:4f:8e:0f:b7:3c:
13:3a:cc:63:1e:17:ad:86:29:08:7e:3b:18:e7:c2:
c6:8e:b5:33:9c:6d:d5:c7:cc:6a:53:53:d2:be:bd:
92:92:10:19:b5:ff:77:ea:9f:5d:a8:7b:af:56:2c:
b9:87:60:62:aa:70:3c:ff:69:82:ff:ec:31:22:80:
ad:ba:bc:54:e8:18:36:28:f9:d7:a4:79:63:e5:00:
19:97:e6:9d:39:9e:32:2b:92:83:86:31:29:4d:bd:
a0:c0:4d:46:66:73:3f:06:c3:c3:86:43:77:dd:01:
8d:6b:cf:90:37:a5:d0:11:e7:ce:0e:c6:ac:7a:4c:
4b:e1:51:5d:5c:31:f8:c2:ba:dd:d5:8e:52:d6:3b:
13:ce:15:8f:a3:b8:13:78:75:c8:93:05:a3:b0:3a:
08:07:2f:e8:cd:ba:c8:8f:20:db:2c:b0:38:2f:22:
ce:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CD:E3:49:15:A9:17:4A:5E:30:63:93:2D:7B:9C:75:4F:2F:C5:C1
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3139342e39392e3135362e302f32342d3234203d3e203232343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.99.156.0/24
Signature Algorithm: sha256WithRSAEncryption
96:11:8a:42:81:f4:61:db:50:be:c0:eb:bf:40:45:c3:15:0c:
79:b3:ad:45:1d:a6:b7:04:d1:ea:8e:01:f9:9b:cb:36:70:5d:
f9:dd:04:d9:40:8e:04:2c:78:5a:ae:a6:09:7b:82:cc:19:9f:
23:f7:42:37:68:ce:20:fb:5d:1b:1e:a1:dd:25:b1:2f:bd:c1:
63:a4:69:20:44:25:84:0e:e7:b2:cd:6e:35:cb:4d:4a:c6:fb:
f0:08:43:d2:a4:70:24:b5:bd:7a:05:50:ff:65:82:6f:7a:d1:
f7:f5:0d:b5:19:64:14:63:23:18:73:e9:c3:5b:50:ad:93:06:
55:46:fc:b6:3e:12:1a:c3:9d:cf:dc:f6:46:6a:d2:d7:cb:ef:
5e:5d:cd:a1:8e:9b:ec:de:f3:54:65:a3:63:0d:2a:46:5e:d7:
89:79:56:5f:00:b2:22:d4:8a:02:21:a1:03:e1:d4:7c:85:9c:
6c:0f:8e:d2:86:7a:81:06:54:86:c0:bc:1b:74:b0:5f:d8:b5:
be:c3:05:e4:e8:3e:2b:ed:0b:f9:5c:fd:9e:e6:05:71:5d:2b:
c6:32:e0:6a:3a:43:25:f0:6e:7c:a1:c3:25:e6:45:78:08:fd:
f0:6d:ce:3c:ca:fd:19:0a:e5:ac:0c:18:5e:78:95:bc:2a:ca:
32:18:6c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:54:21 2025 by rpki-client