Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3235302e302f32342d3234203d3e20323134343831.roa
File: 37382e33312e3235302e302f32342d3234203d3e20323134343831.roa (raw, json)
Hash identifier: Hdy3BU2mjesZL69ZmAuwSm0wzR04TnUINcf7r8agHn8=
Subject key identifier: 79:83:7C:DF:36:AD:E9:B0:31:85:48:93:65:6B:53:CB:70:01:DC:BE
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 1E8D89BA49120FDA6CF2F98C839342AEFC890A23
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3235302e302f32342d3234203d3e20323134343831.roa
Signing time: Mon 19 May 2025 10:35:04 +0000
ROA not before: Mon 19 May 2025 10:30:04 +0000
ROA not after: Mon 18 May 2026 10:35:04 +0000
asID: 214481
IP address blocks: 78.31.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:8d:89:ba:49:12:0f:da:6c:f2:f9:8c:83:93:42:ae:fc:89:0a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: May 19 10:30:04 2025 GMT
Not After : May 18 10:35:04 2026 GMT
Subject: CN=79837CDF36ADE9B031854893656B53CB7001DCBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9e:de:a4:78:6b:09:6b:12:f9:11:63:a8:3f:
f1:3e:b5:a0:25:29:40:3b:57:dd:a0:0c:f8:39:94:
10:7d:42:ec:c2:60:a9:5d:c4:91:6a:68:53:a2:8a:
8d:c2:de:cf:83:e8:74:46:16:ed:5a:01:5d:f1:d9:
c1:02:28:89:17:b3:57:d5:67:29:ee:af:b3:a9:f6:
f2:67:55:04:12:28:f6:66:d3:c6:ec:94:21:ec:5c:
f9:98:59:cc:e7:dc:66:a8:15:08:b4:e6:bb:80:3b:
be:6e:2d:77:7d:14:90:98:54:16:c1:fc:c2:78:f0:
84:02:be:24:63:7f:cd:ab:14:89:f3:93:8d:bf:04:
8d:bc:ef:c3:d1:38:e1:02:b7:bc:26:e0:f8:57:d9:
fa:93:3f:e4:35:ed:4f:d9:e5:83:19:3d:28:fa:0c:
0d:b8:cc:37:d6:0f:72:b1:1f:f0:5c:e2:db:75:52:
13:8d:f1:fb:37:9d:82:05:f6:c2:91:40:df:6d:95:
39:8c:9b:23:46:05:8e:c5:5f:b6:90:34:bb:c7:73:
ef:2a:cd:06:f8:5c:8c:8d:15:78:b0:c0:f4:ab:74:
f1:af:37:d0:ac:e0:33:27:03:50:01:38:55:df:23:
4d:35:60:cb:16:14:d8:24:70:14:b5:e1:d6:b6:2b:
cb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:83:7C:DF:36:AD:E9:B0:31:85:48:93:65:6B:53:CB:70:01:DC:BE
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3235302e302f32342d3234203d3e20323134343831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.250.0/24
Signature Algorithm: sha256WithRSAEncryption
09:08:88:9f:85:dd:7d:b5:29:da:ff:d4:ab:d7:fa:c6:a7:c9:
1b:1e:c8:41:8a:66:f0:55:aa:a1:54:19:7a:05:10:2a:1b:4f:
f5:6c:85:df:d0:8b:1e:19:59:58:4d:bd:59:99:b5:f8:9c:c4:
5f:d6:d2:24:7a:05:4d:a2:da:eb:46:79:3b:53:0b:2a:d8:bb:
bb:d1:4c:99:ab:1d:99:8a:30:40:02:ee:05:b2:33:b6:52:ab:
40:cb:14:ce:97:18:8c:b6:77:30:71:4c:b5:5e:78:d9:a7:ec:
62:10:e2:48:65:d3:aa:f7:f2:f3:dc:3b:c9:8e:25:65:60:ee:
0f:7b:97:e0:84:0e:17:78:80:7d:5b:6f:18:de:24:d5:00:cd:
b1:d3:0d:0e:9c:c6:05:6f:5c:b7:bf:01:85:f7:11:d9:9c:2c:
ed:27:78:7d:78:52:e4:07:97:8f:23:90:9c:7b:ab:67:de:01:
0e:69:21:a6:93:a9:63:00:75:5f:b1:e7:3e:ce:b0:4d:a1:ee:
12:42:b5:e1:b1:eb:68:a3:ea:8a:8b:a1:65:62:ce:21:43:40:
56:c5:65:54:a0:70:04:34:ab:8d:65:24:ea:cd:66:3e:60:5c:
f4:2a:dc:b2:f8:59:b6:6f:fa:37:72:e3:49:be:70:20:b6:f6:
c1:f8:d7:e3
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUHo2JukkSD9ps8vmMg5NCrvyJCiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNTA1MTkxMDMwMDRaFw0yNjA1MTgxMDM1MDRaMDMxMTAvBgNV
BAMTKDc5ODM3Q0RGMzZBREU5QjAzMTg1NDg5MzY1NkI1M0NCNzAwMURDQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCknt6keGsJaxL5EWOoP/E+taAl
KUA7V92gDPg5lBB9QuzCYKldxJFqaFOiio3C3s+D6HRGFu1aAV3x2cECKIkXs1fV
Zynur7Op9vJnVQQSKPZm08bslCHsXPmYWczn3GaoFQi05ruAO75uLXd9FJCYVBbB
/MJ48IQCviRjf82rFInzk42/BI2878PROOECt7wm4PhX2fqTP+Q17U/Z5YMZPSj6
DA24zDfWD3KxH/Bc4tt1UhON8fs3nYIF9sKRQN9tlTmMmyNGBY7FX7aQNLvHc+8q
zQb4XIyNFXiwwPSrdPGvN9Cs4DMnA1ABOFXfI001YMsWFNgkcBS14da2K8ubAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUeYN83zat6bAxhUiTZWtTy3AB3L4wHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzczODJlMzMzMTJlMzIzNTMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM0MzQzODMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
Th/6MA0GCSqGSIb3DQEBCwUAA4IBAQAJCIifhd19tSna/9Sr1/rGp8kbHshBimbw
VaqhVBl6BRAqG0/1bIXf0IseGVlYTb1ZmbX4nMRf1tIkegVNotrrRnk7Uwsq2Lu7
0UyZqx2ZijBAAu4FsjO2UqtAyxTOlxiMtncwcUy1XnjZp+xiEOJIZdOq9/Lz3DvJ
jiVlYO4Pe5fghA4XeIB9W28Y3iTVAM2x0w0OnMYFb1y3vwGF9xHZnCztJ3h9eFLk
B5ePI5Cce6tn3gEOaSGmk6ljAHVfsec+zrBNoe4SQrXhsetoo+qKi6FlYs4hQ0BW
xWVUoHAENKuNZSTqzWY+YFz0Ktyy+Fm2b/o3cuNJvnAgtvbB+Nfj
-----END CERTIFICATE-----
Generated at Fri Jun 6 13:46:28 2025 by rpki-client