Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131322e302f32342d3234203d3e2039333034.roa
File: 3138352e39312e3131322e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: FBmWoOgHZKzCUczEDst+dylscH3cy9pnsw3RbPeSrfU=
Subject key identifier: BD:9A:F4:E6:0E:82:65:C6:36:CD:4B:7B:58:0A:E4:22:11:E2:16:25
Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9
Certificate serial: 03E9DE9C137B5B75B60DD970DD2133767D075936
Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131322e302f32342d3234203d3e2039333034.roa
Signing time: Mon 18 Aug 2025 16:06:56 +0000
ROA not before: Mon 18 Aug 2025 16:01:56 +0000
ROA not after: Mon 17 Aug 2026 16:06:56 +0000
asID: 9304
IP address blocks: 185.91.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl
rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:e9:de:9c:13:7b:5b:75:b6:0d:d9:70:dd:21:33:76:7d:07:59:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9
Validity
Not Before: Aug 18 16:01:56 2025 GMT
Not After : Aug 17 16:06:56 2026 GMT
Subject: CN=BD9AF4E60E8265C636CD4B7B580AE42211E21625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:eb:78:02:3f:65:9d:71:5a:d9:20:25:3c:
f4:fd:25:ff:50:36:99:25:84:bf:5d:fa:3f:ca:23:
22:fa:31:4d:0d:50:89:4f:74:0d:f4:0e:7f:f4:16:
8b:69:bf:56:a1:5f:48:5a:0d:dc:7c:48:e6:a0:ef:
61:f7:19:93:fb:cb:55:30:36:01:91:24:b4:3d:99:
41:a6:b8:13:09:e2:82:b7:18:c6:80:e6:3b:e4:0c:
e0:05:7d:3c:d2:a2:9a:76:79:27:c9:8f:74:34:95:
6b:2a:73:32:2d:f6:2d:43:3d:04:9c:0a:96:aa:75:
7f:7e:04:f8:1f:8b:14:b4:3d:06:0b:84:b4:46:2a:
28:ef:37:b7:b7:ce:fd:63:3e:32:12:9a:61:c8:aa:
a7:2b:3c:ad:dd:46:16:43:89:90:82:b4:5f:da:bb:
6d:4e:aa:60:ff:cf:38:d9:d9:c1:4b:ad:2d:36:a6:
5f:5c:e3:42:fc:cb:92:cb:d5:43:ce:42:73:9f:88:
a7:39:50:d8:78:43:65:af:a3:41:04:50:5f:80:5f:
02:a7:b5:1c:cd:53:42:f5:f6:31:6a:d9:07:f3:1a:
db:64:6f:c7:d6:4a:39:95:bc:13:ef:16:7a:ab:20:
4c:0b:2c:56:87:18:4b:99:41:ce:55:d2:d5:c4:48:
98:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9A:F4:E6:0E:82:65:C6:36:CD:4B:7B:58:0A:E4:22:11:E2:16:25
X509v3 Authority Key Identifier:
keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131322e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.112.0/24
Signature Algorithm: sha256WithRSAEncryption
88:cb:1a:26:ac:e6:58:58:8e:75:0d:b0:5c:52:70:2b:fe:85:
2a:91:a7:c1:a8:9b:c9:c5:c7:19:e2:96:2c:81:0a:13:a8:67:
f3:58:24:7f:2c:68:f8:01:93:73:e4:65:37:b3:02:4e:ef:e3:
47:ea:a0:da:46:a8:65:b5:48:ca:00:10:5b:a4:f8:5f:33:b5:
db:78:c1:af:d8:84:f6:ae:94:d2:a5:ae:86:2e:fc:d2:54:69:
aa:f4:e9:15:9e:98:a3:66:10:2f:36:ae:f2:5d:51:8f:13:30:
b1:9d:1e:ef:4f:df:68:9a:f3:fc:a8:60:f2:82:73:e9:23:59:
c1:26:98:df:12:b9:18:3f:a4:b5:47:d1:f5:7e:a6:62:5f:8e:
ed:d3:95:97:cb:c2:50:f7:c1:a5:b2:74:84:3f:95:a1:ce:77:
02:0c:f4:1b:dc:a6:29:23:4f:8b:8b:00:0f:94:9b:77:6e:af:
a9:79:c9:c8:d7:a8:9f:21:12:0c:44:55:03:59:12:a1:c3:ee:
40:ee:5b:3e:87:1d:7d:d1:0e:7b:99:07:4f:71:be:78:7a:c3:
57:ab:d1:df:8a:b1:a6:cc:a6:8e:36:c8:15:5d:bb:12:4e:1f:
df:ba:7e:40:f0:7b:6a:ce:92:27:af:97:70:cb:f5:b9:db:6b:
94:a0:7f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:38:26 2025 by rpki-client