Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36322e302f32342d3234203d3e203236353438.roa
File: 39322e3131382e36322e302f32342d3234203d3e203236353438.roa (raw, json)
Hash identifier: Uk6YQ1uzWAyq5di5z8TSr4otrLulW5Js9IwP2E31R74=
Subject key identifier: 7C:BC:CD:C3:5F:08:D9:F3:6D:58:21:FA:2F:26:DF:E4:34:9B:43:4E
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 11CC2ADE4550B963B9C261FDA59F1B2688425D5B
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36322e302f32342d3234203d3e203236353438.roa
Signing time: Thu 03 Jul 2025 20:21:17 +0000
ROA not before: Thu 03 Jul 2025 20:16:17 +0000
ROA not after: Thu 02 Jul 2026 20:21:17 +0000
asID: 26548
IP address blocks: 92.118.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 20:11:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:cc:2a:de:45:50:b9:63:b9:c2:61:fd:a5:9f:1b:26:88:42:5d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jul 3 20:16:17 2025 GMT
Not After : Jul 2 20:21:17 2026 GMT
Subject: CN=7CBCCDC35F08D9F36D5821FA2F26DFE4349B434E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6f:cc:3e:45:09:e6:69:a7:4d:41:10:f1:1b:
9a:f1:3e:b5:1d:0a:8d:48:93:85:ac:83:a8:a8:4b:
79:70:7a:62:9a:9a:fb:ac:35:93:28:17:55:16:2f:
0f:03:3b:a0:20:5a:26:f6:0c:ad:a1:33:02:59:9d:
de:2e:91:c2:90:e0:1c:95:b4:ff:ec:c7:9e:b2:56:
59:11:9b:46:47:49:41:cb:06:16:19:8e:bd:39:a7:
f9:f0:46:f8:36:c4:ea:3a:19:78:6e:59:fa:0b:85:
6b:2f:3f:d1:03:46:14:19:c5:6b:2b:70:eb:9b:6a:
0d:e4:4d:2d:65:8c:e3:68:e0:fe:d1:d8:01:ac:cd:
2e:79:be:88:02:74:ce:58:26:d3:10:8c:38:47:de:
ff:75:55:9e:35:44:24:80:2a:7c:e7:04:c8:62:c6:
b7:4e:d6:ae:d0:00:1e:87:82:13:80:a4:d9:68:59:
b5:ea:22:d1:7e:56:3b:f8:22:4b:78:c2:ed:a0:29:
1d:48:ab:82:41:dd:7a:be:dd:77:54:d9:b7:93:50:
8a:0d:bd:24:af:87:69:79:b4:fa:a9:fc:a9:f7:1d:
45:c9:43:c6:3b:89:77:f6:04:0a:96:e6:19:03:fe:
0c:85:2e:6d:8d:9c:7f:34:0b:1f:0d:1e:ad:54:65:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BC:CD:C3:5F:08:D9:F3:6D:58:21:FA:2F:26:DF:E4:34:9B:43:4E
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36322e302f32342d3234203d3e203236353438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.62.0/24
Signature Algorithm: sha256WithRSAEncryption
00:44:7a:5d:72:0e:37:1e:43:ad:5e:41:1e:0b:77:5f:21:fb:
10:d1:a0:d0:17:af:4c:d5:29:95:9b:0d:bd:6e:1a:7f:5c:66:
89:e7:bb:b0:8e:97:42:0b:eb:9f:fe:da:af:d8:c2:d4:21:27:
65:c3:fd:da:35:7f:41:f7:95:07:65:ad:04:45:13:8d:90:6f:
65:ac:6b:a7:41:eb:70:f7:78:8a:f8:5f:9c:af:89:0a:1a:66:
06:97:75:52:16:94:16:80:67:c0:b6:b3:02:ef:89:64:a4:5a:
1d:ea:31:38:0a:d0:a8:ea:b4:95:73:cb:aa:5f:ff:dc:b6:9b:
15:3c:d4:3e:ab:d7:5f:84:1b:70:c4:c8:ac:4a:4d:25:a0:f5:
93:15:7f:1a:10:77:eb:d0:b3:f1:7b:ea:a4:6b:9b:01:f6:40:
89:3e:e4:27:c8:83:ee:f0:6c:a5:a8:11:20:b5:8e:2a:53:d3:
93:89:73:13:1c:ee:eb:99:55:1d:76:b9:8f:10:dc:a7:da:b1:
2d:e6:1b:3f:a0:26:4e:6d:be:2f:2c:77:6e:c5:94:ca:ff:5e:
29:d9:71:d9:ff:c2:55:0c:f6:1f:cf:9b:f0:53:3e:9e:7d:3c:
26:38:b9:35:14:07:73:37:da:93:c3:a0:ba:1d:1b:89:4c:77:
d9:a4:96:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:04:47 2025 by rpki-client