Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS3223.roa
File: AS3223.roa (raw, json)
Hash identifier: 2/AP+Cp9YGk+UGPAufZtYl1ut61mYBRZcKu3mKrUvHk=
Subject key identifier: 55:CA:0F:4E:05:95:34:94:42:99:75:8E:47:F1:23:58:5E:D6:AC:92
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6A42FC0206C85AB4817EF85ACE913F6CEFBCBD58
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS3223.roa
Signing time: Tue 05 Aug 2025 10:54:13 +0000
ROA not before: Tue 05 Aug 2025 10:49:13 +0000
ROA not after: Tue 04 Aug 2026 10:54:13 +0000
asID: 3223
IP address blocks: 191.101.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:42:fc:02:06:c8:5a:b4:81:7e:f8:5a:ce:91:3f:6c:ef:bc:bd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 5 10:49:13 2025 GMT
Not After : Aug 4 10:54:13 2026 GMT
Subject: CN=55CA0F4E059534944299758E47F123585ED6AC92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f1:5a:df:e9:24:2f:dd:69:c6:38:2b:0e:01:
3a:89:f9:f3:83:80:b4:ae:b7:0a:58:77:a3:d1:df:
f7:5e:b9:5f:c5:33:93:c8:89:10:ee:d6:c9:2a:cf:
9a:c2:19:30:39:a3:66:9c:26:b6:16:b9:34:71:09:
bc:96:33:27:63:a9:0c:22:be:17:aa:e0:48:63:8a:
42:d6:89:71:b3:cc:65:c4:f1:9b:4a:fb:e0:ac:b6:
a9:0c:7b:5e:48:dc:9b:4f:14:d8:b9:19:06:d3:68:
a0:34:6e:1a:2f:29:68:27:a6:48:c5:28:e1:2d:1c:
67:b6:fc:f4:d6:20:17:34:fe:09:57:ef:27:65:dc:
aa:34:4d:62:94:f3:d1:d0:f4:52:86:3c:c2:4a:84:
8c:11:81:8b:e5:29:bb:b0:d6:e2:bf:45:5e:d5:9f:
2b:e2:b2:9e:07:3a:d5:72:bb:23:21:22:05:a9:e9:
d8:c9:2f:9a:97:19:c0:a2:3d:98:20:2f:c6:31:64:
67:aa:98:4e:e1:80:a1:b3:53:59:16:94:c1:2e:aa:
f9:d8:39:09:02:86:89:15:c1:c6:6d:87:7d:3e:f3:
1b:d1:0e:fe:33:1d:99:c1:a0:41:36:e0:69:42:16:
c7:d6:b7:77:0d:6f:7c:83:a4:33:6a:6e:ed:5a:f7:
15:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CA:0F:4E:05:95:34:94:42:99:75:8E:47:F1:23:58:5E:D6:AC:92
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS3223.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.242.0/24
Signature Algorithm: sha256WithRSAEncryption
07:6a:7a:13:ce:5c:30:8e:2d:d4:f5:90:e7:e3:c5:51:05:14:
89:0e:0b:e1:a8:22:84:ff:c6:94:51:04:35:fd:83:81:bc:6e:
82:e1:fb:9c:b2:dc:fd:45:8f:cc:c2:18:d8:cc:37:25:46:f1:
91:0a:0a:e9:fd:0f:a5:49:2a:6c:0d:c8:d9:7a:2b:af:77:f8:
9d:87:d1:80:1b:6a:e8:7c:cc:74:cf:59:4e:89:e0:96:61:37:
70:2c:0a:cd:d3:79:18:a8:4d:1e:e8:db:1e:36:a3:b0:82:03:
13:2d:87:c8:aa:56:9d:d3:00:e9:84:a8:49:5a:41:65:a0:10:
f9:34:90:d0:08:82:72:da:93:76:8b:51:39:59:db:91:72:7b:
50:ff:9f:1b:37:29:ac:4e:00:9c:bc:d9:4c:56:df:77:6d:f9:
b9:9a:0e:8c:d5:a1:2f:03:26:8c:59:e8:9c:9f:f5:a1:63:10:
c0:60:66:26:53:3f:99:67:87:aa:f9:f2:26:9d:c2:5a:fe:2f:
38:e7:4d:08:11:7a:a5:84:35:f2:4e:9c:37:b5:2f:85:18:04:
47:a7:56:da:f8:ff:fd:3f:8d:5a:f6:21:04:70:bc:23:9e:2a:
5a:ec:e3:9a:7b:d7:13:3e:fa:a7:cc:8a:01:85:40:f7:86:fd:
18:4c:f8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:47 2025 by rpki-client