Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139362e302f32342d3234203d3e203539343332.roa
File: 3137382e3133322e3139362e302f32342d3234203d3e203539343332.roa (raw, json)
Hash identifier: lGI4JnNVf3K/PEpsW+6oRNir8y6Pok8lHu/OSrGIr1U=
Subject key identifier: 29:4E:9E:DF:5A:A8:3F:E4:93:40:E1:39:4C:7B:E2:A4:C7:7B:62:1D
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 4187A850D4A49A3C2AB8120831B554EF0E229E14
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139362e302f32342d3234203d3e203539343332.roa
Signing time: Wed 13 Aug 2025 12:48:28 +0000
ROA not before: Wed 13 Aug 2025 12:43:28 +0000
ROA not after: Wed 12 Aug 2026 12:48:28 +0000
asID: 59432
IP address blocks: 178.132.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:87:a8:50:d4:a4:9a:3c:2a:b8:12:08:31:b5:54:ef:0e:22:9e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Aug 13 12:43:28 2025 GMT
Not After : Aug 12 12:48:28 2026 GMT
Subject: CN=294E9EDF5AA83FE49340E1394C7BE2A4C77B621D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d3:b3:2f:e1:5a:9f:08:0e:bd:1e:ad:dd:24:
49:5f:a4:a9:ae:c9:76:af:11:5d:ae:2d:92:4b:6a:
2f:bc:da:a2:d4:27:87:4b:b2:64:6a:91:07:69:3f:
4c:15:ad:29:03:11:d3:71:21:a0:71:b0:ac:21:76:
c9:17:1b:99:4a:a3:0c:99:d3:e1:5d:a9:07:ed:67:
66:77:40:7c:45:c2:8e:b2:52:db:32:fb:da:ad:3d:
db:9d:49:63:02:e1:4f:69:9e:fe:79:af:94:99:fa:
6b:69:e4:36:39:d0:a0:19:43:b7:1b:88:0d:f5:f1:
c0:8d:2d:1b:24:ba:e9:bc:08:82:78:b3:bf:0c:d1:
dd:a5:4f:7b:5b:16:23:26:a3:89:e7:ac:dc:29:62:
46:9b:3a:3e:49:5b:76:58:0b:e8:09:68:0a:59:cf:
fe:df:52:28:9b:22:8b:aa:91:69:7f:09:23:8b:9d:
ec:c7:22:33:7e:1c:9b:91:45:9b:9b:07:61:39:54:
b6:2b:5c:41:a5:c7:10:7a:b2:61:5a:aa:25:2b:bb:
36:bb:ae:8f:88:be:6f:aa:a9:2f:a5:6d:e2:7e:38:
cc:38:ea:85:c9:d7:51:e0:ac:d3:7b:2b:f8:61:90:
52:d7:23:95:0a:48:5d:86:70:9e:27:e1:aa:7c:0f:
d4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4E:9E:DF:5A:A8:3F:E4:93:40:E1:39:4C:7B:E2:A4:C7:7B:62:1D
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139362e302f32342d3234203d3e203539343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.196.0/24
Signature Algorithm: sha256WithRSAEncryption
51:bc:42:6f:e2:02:90:23:53:50:84:b0:fa:ed:bf:27:a8:5d:
fa:b9:5f:90:0f:3a:29:b2:6f:d5:9c:41:cc:8b:54:a1:98:15:
69:d2:e1:96:1f:eb:7d:d5:f8:7c:c7:97:6a:10:2d:a3:b9:70:
f5:bf:4e:c2:e8:a5:ca:5a:45:53:c1:89:f7:b0:ea:c1:91:47:
19:85:5c:f3:cb:1f:f0:e4:e1:88:92:7f:ca:15:96:18:e9:65:
47:03:2c:75:7e:61:54:48:57:b3:ce:d1:65:36:37:c8:31:66:
30:aa:b9:c8:98:54:8f:95:e3:ee:74:6b:b0:f9:97:4b:18:8f:
10:b9:3c:a0:e3:c3:7a:b3:f5:0a:b1:71:b5:37:7f:93:54:0e:
79:c9:00:90:b3:1f:2a:ac:e9:f4:7e:03:0a:89:99:7c:e3:f9:
1e:e1:80:ab:9c:8f:d6:43:59:66:76:5a:ec:77:3c:94:fd:7d:
21:04:40:f2:58:08:5a:f8:00:67:8e:54:7f:41:b3:64:2e:01:
65:80:ad:4b:84:56:42:d3:1d:49:94:77:70:9b:f0:e4:6c:d2:
ed:72:51:ed:79:38:70:bd:d6:1c:18:23:3f:8b:27:24:ac:14:
54:d3:b5:aa:0b:3b:78:75:12:eb:fe:07:61:74:16:d7:a6:64:
f0:56:bb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:26:53 2025 by rpki-client