Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132362e302f32342d3234203d3e2039333034.roa
File: 3135322e38392e3132362e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: 37wN2XWakumvrDUk7b6AfFo8wpUzOAcbyV8VBMuZL54=
Subject key identifier: 03:94:91:50:5B:AC:54:DD:F0:4E:32:45:C4:B1:5F:8B:81:FC:28:6D
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 08B694A4705DF3888FBD27DECCDBD2ED330A7CB2
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132362e302f32342d3234203d3e2039333034.roa
Signing time: Tue 03 Jun 2025 08:29:40 +0000
ROA not before: Tue 03 Jun 2025 08:24:40 +0000
ROA not after: Tue 02 Jun 2026 08:29:40 +0000
asID: 9304
IP address blocks: 152.89.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:b6:94:a4:70:5d:f3:88:8f:bd:27:de:cc:db:d2:ed:33:0a:7c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Jun 3 08:24:40 2025 GMT
Not After : Jun 2 08:29:40 2026 GMT
Subject: CN=039491505BAC54DDF04E3245C4B15F8B81FC286D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:f1:22:0a:cc:8c:73:db:0d:ce:1f:01:f2:
e8:1b:41:fa:8d:c8:f5:6e:a0:8d:d3:42:76:23:cf:
1a:ed:be:59:28:e2:79:15:9b:6a:1e:3a:39:a7:98:
15:b9:88:44:53:83:04:50:a7:df:6f:8d:5c:d1:b2:
7a:75:55:fc:84:df:38:51:b6:96:58:6c:ad:b7:30:
00:66:fa:06:a3:2b:e1:6e:e4:1f:c7:1f:3e:bd:9c:
72:19:df:74:9e:e7:f7:f0:aa:a1:67:2b:5a:79:98:
45:60:ef:f0:87:2a:cf:03:b1:f8:22:13:bc:a3:20:
c1:00:dc:62:79:b2:6c:5c:0e:52:a5:fa:ce:a2:a6:
77:2e:43:75:1a:39:cf:68:a0:83:29:13:a0:65:42:
fe:8b:41:50:a1:2a:0a:27:07:d1:99:fb:a6:e7:1d:
fb:ac:80:10:25:38:60:57:7f:b3:ec:b4:93:e1:b3:
7f:6d:a6:c0:d2:ea:4d:6f:6f:29:aa:0e:1e:a2:31:
37:38:de:72:ed:ec:fc:1e:19:f8:b4:15:9f:b4:3a:
57:b9:34:47:c5:f4:46:c1:ee:e2:07:b4:1f:28:ef:
10:7d:cf:5b:f7:92:32:59:d1:51:56:39:b9:93:ad:
67:60:41:91:70:a4:42:8d:fc:69:4e:f2:d6:5c:c3:
07:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:94:91:50:5B:AC:54:DD:F0:4E:32:45:C4:B1:5F:8B:81:FC:28:6D
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132362e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.126.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f9:06:dd:87:dd:7e:4b:3e:59:e7:e5:ec:8f:2b:b4:09:46:
21:1e:28:16:7c:ef:a2:54:ce:59:2a:04:b2:2f:f6:2d:25:a5:
a0:a5:d3:ee:bb:c7:37:f9:cf:49:ee:28:52:88:04:bf:d3:d7:
dc:a6:0c:a3:9c:ce:59:9e:60:c7:1a:75:60:25:24:1e:b3:d4:
e3:d4:63:fc:50:69:27:be:06:53:32:9f:b3:ac:51:87:66:c6:
24:7e:49:97:e5:94:9b:07:43:5f:5d:a1:04:8b:9e:49:8a:78:
1d:2e:c5:2f:d5:f4:ff:27:d5:96:55:b0:b0:65:75:41:e6:da:
31:87:76:8f:65:e4:72:26:c3:62:3c:4b:2b:b6:33:e9:81:a3:
57:ef:63:90:4d:ab:32:26:a4:21:1b:36:82:39:7e:bf:be:d1:
36:49:05:eb:2a:24:8c:d6:3c:0b:81:6a:a4:4f:e9:0b:d7:32:
2e:dc:09:94:33:fd:0c:78:a3:64:92:e2:1f:96:b4:50:8a:56:
fe:15:5e:42:43:a5:71:84:50:b1:e3:ef:e9:ea:bd:fe:52:12:
c5:64:77:98:53:c6:ff:c3:76:59:36:39:71:5b:0d:31:9f:fb:
26:5b:ec:52:22:c4:c7:a5:a3:74:cc:3a:05:7e:22:2c:7c:a1:
51:c2:48:b7
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUCLaUpHBd84iPvSfezNvS7TMKfLIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNTA2MDMwODI0NDBaFw0yNjA2MDIwODI5NDBaMDMxMTAvBgNV
BAMTKDAzOTQ5MTUwNUJBQzU0RERGMDRFMzI0NUM0QjE1RjhCODFGQzI4NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4gvEiCsyMc9sNzh8B8ugbQfqN
yPVuoI3TQnYjzxrtvlko4nkVm2oeOjmnmBW5iERTgwRQp99vjVzRsnp1VfyE3zhR
tpZYbK23MABm+gajK+Fu5B/HHz69nHIZ33Se5/fwqqFnK1p5mEVg7/CHKs8Dsfgi
E7yjIMEA3GJ5smxcDlKl+s6ipncuQ3UaOc9ooIMpE6BlQv6LQVChKgonB9GZ+6bn
HfusgBAlOGBXf7PstJPhs39tpsDS6k1vbymqDh6iMTc43nLt7PweGfi0FZ+0Ole5
NEfF9EbB7uIHtB8o7xB9z1v3kjJZ0VFWObmTrWdgQZFwpEKN/GlO8tZcwwdVAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUA5SRUFusVN3wTjJFxLFfi4H8KG0wHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzNTMyMmUzODM5MmUzMTMy
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTMzMzAzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJhZ
fjANBgkqhkiG9w0BAQsFAAOCAQEAVfkG3Yfdfks+Wefl7I8rtAlGIR4oFnzvolTO
WSoEsi/2LSWloKXT7rvHN/nPSe4oUogEv9PX3KYMo5zOWZ5gxxp1YCUkHrPU49Rj
/FBpJ74GUzKfs6xRh2bGJH5Jl+WUmwdDX12hBIueSYp4HS7FL9X0/yfVllWwsGV1
QebaMYd2j2XkcibDYjxLK7Yz6YGjV+9jkE2rMiakIRs2gjl+v77RNkkF6yokjNY8
C4FqpE/pC9cyLtwJlDP9DHijZJLiH5a0UIpW/hVeQkOlcYRQsePv6eq9/lISxWR3
mFPG/8N2WTY5cVsNMZ/7JlvsUiLEx6WjdMw6BX4iLHyhUcJItw==
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:22:53 2025 by rpki-client