Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138342e302f32342d3234203d3e20323133383936.roa
File: 352e3232362e3138342e302f32342d3234203d3e20323133383936.roa (raw, json)
Hash identifier: U3Zw6x4PkdzeEgLvqIYw4y+/XBwfGSTzEu9F3fSuE+4=
Subject key identifier: 79:33:33:FD:86:60:60:9B:F6:FE:62:1F:80:3B:B4:2F:0A:8D:8E:15
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 0F5BA5C57AFECCD35DD57044C7BE5A346A01BE01
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138342e302f32342d3234203d3e20323133383936.roa
Signing time: Wed 07 May 2025 15:05:11 +0000
ROA not before: Wed 07 May 2025 15:00:11 +0000
ROA not after: Wed 06 May 2026 15:05:11 +0000
asID: 213896
IP address blocks: 5.226.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:5b:a5:c5:7a:fe:cc:d3:5d:d5:70:44:c7:be:5a:34:6a:01:be:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: May 7 15:00:11 2025 GMT
Not After : May 6 15:05:11 2026 GMT
Subject: CN=793333FD8660609BF6FE621F803BB42F0A8D8E15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:32:0d:5e:cc:93:f2:d3:83:f7:19:88:ac:2d:
d8:18:e0:59:42:32:95:31:20:3f:ed:f8:9d:74:c0:
c5:6b:19:8a:b2:af:65:9d:60:38:12:82:7b:59:1c:
b3:3f:b3:08:c0:d2:8b:49:e7:09:7d:ee:72:d6:4e:
1b:70:2e:f5:93:ae:d6:d9:c8:ab:44:64:32:58:cd:
fa:26:6d:32:b4:e6:15:6a:81:b5:e8:87:ed:c7:4c:
4c:e1:90:34:38:cb:47:e3:57:49:02:bc:c4:6a:89:
c7:68:f0:ed:4b:3d:f8:f7:bc:e8:6e:f7:c7:cb:75:
ea:4f:b3:30:91:22:d5:82:9a:b0:fa:78:48:15:ad:
e1:47:e2:69:97:d4:0f:b8:db:91:b6:4c:e8:dc:64:
9d:e8:5e:48:59:57:03:05:35:6d:11:82:4a:97:ab:
41:ed:b8:de:f8:89:65:bb:ed:f1:77:7a:29:31:1b:
53:af:f4:08:16:ad:34:d9:a7:dd:8b:4d:c2:6e:64:
65:3f:f1:a0:cc:36:30:0a:68:d7:f2:cb:a3:84:a1:
83:38:af:df:c4:b1:eb:77:71:8b:43:28:8b:71:75:
2d:a0:b7:26:fc:c8:1e:1f:42:e6:bc:b6:85:32:12:
f8:68:1b:3e:9a:33:35:38:4e:bc:55:f6:f9:e8:6b:
e4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:33:33:FD:86:60:60:9B:F6:FE:62:1F:80:3B:B4:2F:0A:8D:8E:15
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138342e302f32342d3234203d3e20323133383936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.184.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:0c:19:43:fa:d0:da:3a:25:3a:cc:bc:a3:63:79:da:4f:da:
5a:a9:21:79:ed:7e:3d:c9:d1:b0:64:e4:d7:23:9b:76:7b:e5:
1d:b0:a7:88:31:dd:1f:55:00:1b:89:a5:ec:38:08:40:53:79:
be:e7:06:b2:fc:ef:95:d1:d1:ef:8a:27:4b:4a:19:67:3d:ea:
9a:c1:de:a9:92:54:dd:e9:96:83:a9:88:3a:55:9d:fc:19:01:
1b:08:35:ac:df:bb:84:ea:77:7c:a2:fe:15:3f:f9:c0:8d:fc:
57:cd:8b:a5:74:41:cc:4c:c0:25:4b:e2:10:e1:5b:f5:79:57:
39:5f:0e:39:f6:53:5e:5f:ab:17:6d:92:6d:7f:b3:3a:08:e6:
4d:30:5e:41:81:1f:af:f5:73:af:a5:4e:78:98:c3:cc:a4:f2:
fa:81:b8:22:b4:bf:d3:28:12:10:49:a2:cf:ed:17:f4:37:79:
06:3a:d7:9a:78:33:cf:02:4a:ec:dd:e1:bd:43:a3:7b:9b:25:
ce:99:72:76:6c:2b:39:8b:f4:10:61:f4:5d:bc:49:9f:3b:07:
41:dd:80:ca:9c:9d:34:0e:1c:88:d6:64:5c:3e:97:16:85:1e:
30:ea:28:d8:b0:82:b6:49:fe:5e:1e:2a:0b:2d:c6:8f:14:fd:
77:f8:40:63
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUD1ulxXr+zNNd1XBEx75aNGoBvgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk
MTZjZWVkMzAeFw0yNTA1MDcxNTAwMTFaFw0yNjA1MDYxNTA1MTFaMDMxMTAvBgNV
BAMTKDc5MzMzM0ZEODY2MDYwOUJGNkZFNjIxRjgwM0JCNDJGMEE4RDhFMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSMg1ezJPy04P3GYisLdgY4FlC
MpUxID/t+J10wMVrGYqyr2WdYDgSgntZHLM/swjA0otJ5wl97nLWThtwLvWTrtbZ
yKtEZDJYzfombTK05hVqgbXoh+3HTEzhkDQ4y0fjV0kCvMRqicdo8O1LPfj3vOhu
98fLdepPszCRItWCmrD6eEgVreFH4mmX1A+425G2TOjcZJ3oXkhZVwMFNW0RgkqX
q0HtuN74iWW77fF3eikxG1Ov9AgWrTTZp92LTcJuZGU/8aDMNjAKaNfyy6OEoYM4
r9/Eset3cYtDKItxdS2gtyb8yB4fQua8toUyEvhoGz6aMzU4TrxV9vnoa+T/AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUeTMz/YZgYJv2/mIfgDu0LwqNjhUwHwYDVR0j
BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0
NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G
czd0TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGNjMDg3Mzct
OTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0NGVkLzAvMzUyZTMyMzIzNjJlMzEzODM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMzMzgzOTM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
BeK4MA0GCSqGSIb3DQEBCwUAA4IBAQBbDBlD+tDaOiU6zLyjY3naT9paqSF57X49
ydGwZOTXI5t2e+UdsKeIMd0fVQAbiaXsOAhAU3m+5way/O+V0dHviidLShlnPeqa
wd6pklTd6ZaDqYg6VZ38GQEbCDWs37uE6nd8ov4VP/nAjfxXzYuldEHMTMAlS+IQ
4Vv1eVc5Xw459lNeX6sXbZJtf7M6COZNMF5BgR+v9XOvpU54mMPMpPL6gbgitL/T
KBIQSaLP7Rf0N3kGOteaeDPPAkrs3eG9Q6N7myXOmXJ2bCs5i/QQYfRdvEmfOwdB
3YDKnJ00DhyI1mRcPpcWhR4w6ijYsIK2Sf5eHioLLcaPFP13+EBj
-----END CERTIFICATE-----
Generated at Sun May 11 16:56:56 2025 by rpki-client