Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3235312e302f32342d3234203d3e2039333034.roa
File: 37382e33312e3235312e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: /IYHkNoliFkn3gjREg/I9sDB0gdPJdrySBds2q2hARI=
Subject key identifier: 70:2C:11:50:12:DD:1E:62:BA:15:5E:0F:3C:72:96:5C:90:AE:9A:6E
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 7F1B38F593958C454548F0C582D6E1631D9608CB
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3235312e302f32342d3234203d3e2039333034.roa
Signing time: Tue 03 Jun 2025 08:29:39 +0000
ROA not before: Tue 03 Jun 2025 08:24:39 +0000
ROA not after: Tue 02 Jun 2026 08:29:39 +0000
asID: 9304
IP address blocks: 78.31.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:1b:38:f5:93:95:8c:45:45:48:f0:c5:82:d6:e1:63:1d:96:08:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Jun 3 08:24:39 2025 GMT
Not After : Jun 2 08:29:39 2026 GMT
Subject: CN=702C115012DD1E62BA155E0F3C72965C90AE9A6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c5:b2:fe:d0:db:87:2d:aa:6d:c9:eb:63:d2:
be:45:2c:35:4c:ee:b2:0c:87:13:29:da:f4:39:4c:
5f:f9:71:df:50:41:f9:17:97:a8:9c:f8:54:3d:92:
1c:b2:48:9f:81:04:b5:29:f1:89:d4:7b:83:f2:f8:
05:f0:d6:a0:41:5d:c7:b7:bb:1f:08:46:8d:5d:d4:
67:5e:02:de:b8:b2:bb:a2:11:e6:a6:09:4e:5e:f6:
c9:a7:5e:29:ff:1f:08:5a:80:25:2d:ba:0d:a7:5c:
dc:08:43:06:1c:c9:02:c0:43:77:e4:6b:72:e2:ec:
39:a6:f4:5a:71:ff:4e:ca:52:e6:46:44:99:6c:6e:
30:c4:62:e7:c0:90:f7:72:3a:c2:00:19:b9:d5:a5:
1e:55:a6:0e:29:87:73:77:3f:d4:3e:db:11:eb:bd:
9e:fa:69:5c:28:43:fc:54:a5:9c:ea:57:8b:d3:d0:
27:cd:2b:7f:5e:4a:9a:65:11:fb:73:a8:71:72:f1:
51:0d:68:6c:d5:81:11:9b:fa:5b:99:a3:8b:01:cf:
5b:18:e5:cd:9c:73:9a:6e:6d:c9:01:68:7f:3a:ff:
95:90:2d:32:5a:c7:d2:ba:ea:c4:af:b4:7d:23:7e:
8e:57:6f:01:f5:fd:5b:54:55:33:c3:06:2a:b7:2b:
b2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2C:11:50:12:DD:1E:62:BA:15:5E:0F:3C:72:96:5C:90:AE:9A:6E
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3235312e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.251.0/24
Signature Algorithm: sha256WithRSAEncryption
19:0a:f1:11:41:11:d8:13:57:b3:d7:15:d1:64:e3:9d:b2:13:
5e:7b:c3:55:67:1d:98:be:b1:31:42:0a:b6:c7:15:cf:b5:89:
2b:58:e7:da:f9:55:7b:e0:66:ae:f1:70:d7:fe:a7:83:fa:6e:
ed:f3:31:62:bc:23:45:2b:d9:48:dc:47:3a:bf:dc:5a:78:1a:
e5:3f:ad:11:7d:e5:a4:72:8d:65:c4:98:ae:89:a7:2c:49:41:
95:d3:37:65:1c:0f:f3:10:f1:e8:f5:66:6b:fb:f2:16:63:d7:
b6:5f:1c:93:89:f4:92:24:08:cc:66:b7:5a:92:06:bd:9e:ef:
9e:ae:dd:51:07:d4:64:8d:be:bf:f5:ad:20:8b:7a:3a:84:78:
c0:f6:0b:38:e7:42:c4:de:29:87:4e:a5:13:6a:6e:c6:f9:34:
4a:67:28:71:6a:0e:a1:fb:f5:eb:03:59:f0:28:66:cf:a5:2c:
d4:d2:41:0a:cf:dc:ab:68:95:da:68:bd:cb:95:ca:16:ad:b4:
45:2f:09:56:4a:e7:ee:8a:29:64:9a:fb:77:24:d8:0b:7a:28:
94:0c:f2:82:38:44:35:86:33:3a:f2:26:f0:85:aa:16:35:71:
58:11:f8:21:02:e4:0f:f1:cb:fd:3f:54:34:9d:9e:20:b0:7d:
9c:dd:26:49
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUfxs49ZOVjEVFSPDFgtbhYx2WCMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNTA2MDMwODI0MzlaFw0yNjA2MDIwODI5MzlaMDMxMTAvBgNV
BAMTKDcwMkMxMTUwMTJERDFFNjJCQTE1NUUwRjNDNzI5NjVDOTBBRTlBNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDxbL+0NuHLaptyetj0r5FLDVM
7rIMhxMp2vQ5TF/5cd9QQfkXl6ic+FQ9khyySJ+BBLUp8YnUe4Py+AXw1qBBXce3
ux8IRo1d1GdeAt64sruiEeamCU5e9smnXin/HwhagCUtug2nXNwIQwYcyQLAQ3fk
a3Li7Dmm9Fpx/07KUuZGRJlsbjDEYufAkPdyOsIAGbnVpR5Vpg4ph3N3P9Q+2xHr
vZ76aVwoQ/xUpZzqV4vT0CfNK39eSpplEftzqHFy8VENaGzVgRGb+luZo4sBz1sY
5c2cc5pubckBaH86/5WQLTJax9K66sSvtH0jfo5XbwH1/VtUVTPDBiq3K7KzAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUcCwRUBLdHmK6FV4PPHKWXJCumm4wHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzczODJlMzMzMTJlMzIzNTMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABOH/sw
DQYJKoZIhvcNAQELBQADggEBABkK8RFBEdgTV7PXFdFk452yE157w1VnHZi+sTFC
CrbHFc+1iStY59r5VXvgZq7xcNf+p4P6bu3zMWK8I0Ur2UjcRzq/3Fp4GuU/rRF9
5aRyjWXEmK6JpyxJQZXTN2UcD/MQ8ej1Zmv78hZj17ZfHJOJ9JIkCMxmt1qSBr2e
756u3VEH1GSNvr/1rSCLejqEeMD2CzjnQsTeKYdOpRNqbsb5NEpnKHFqDqH79esD
WfAoZs+lLNTSQQrP3KtoldpovcuVyhattEUvCVZK5+6KKWSa+3ck2At6KJQM8oI4
RDWGMzryJvCFqhY1cVgR+CEC5A/xy/0/VDSdniCwfZzdJkk=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:19:55 2025 by rpki-client