Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3139382e302f32342d3234203d3e20323030303838.roa
File: 38352e3233372e3139382e302f32342d3234203d3e20323030303838.roa (raw, json)
Hash identifier: 8E6J1zLBCKUGBtQktfv6GcpRKBP5GE1bxg6fHiyblfc=
Subject key identifier: 48:91:77:22:8D:A1:6F:B9:72:53:4D:E0:41:E9:DF:B3:86:15:EC:49
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 7DABE8A118ABF1404D9F2D8EA6C329514C46E9B6
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3139382e302f32342d3234203d3e20323030303838.roa
Signing time: Wed 10 Sep 2025 09:55:01 +0000
ROA not before: Wed 10 Sep 2025 09:50:01 +0000
ROA not after: Wed 09 Sep 2026 09:55:01 +0000
asID: 200088
IP address blocks: 85.237.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ab:e8:a1:18:ab:f1:40:4d:9f:2d:8e:a6:c3:29:51:4c:46:e9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Sep 10 09:50:01 2025 GMT
Not After : Sep 9 09:55:01 2026 GMT
Subject: CN=489177228DA16FB972534DE041E9DFB38615EC49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1e:fb:8e:a4:c4:a5:18:cb:cd:11:74:9c:7e:
b2:3a:95:96:3e:fe:cd:96:91:62:c8:ac:af:3c:00:
e8:63:79:fa:47:9e:74:59:0d:7b:da:12:c5:1b:12:
5f:30:b3:69:94:00:b8:b7:c3:da:c0:c7:8f:68:54:
6d:d3:d9:e5:02:5e:03:17:12:20:0b:4b:51:11:46:
8b:27:1d:4e:bc:7f:85:81:67:26:cd:7b:86:40:18:
6e:f8:78:38:dc:17:ef:05:73:88:94:4c:99:43:4a:
32:39:78:64:a9:ff:6a:50:4b:b2:3a:e8:60:cb:c9:
8b:6b:d5:70:69:1e:04:5c:8a:c9:c1:fc:ac:5d:39:
30:8b:47:0a:11:f4:59:c1:b5:c5:4d:f2:a7:64:d8:
f4:45:38:a3:5b:7a:bd:8f:eb:71:4b:9d:2b:e3:36:
b1:0d:cb:27:41:f5:c8:b8:49:92:6b:41:0b:10:ed:
73:c7:8a:e7:5b:81:1d:26:67:b0:ed:ee:c9:67:37:
78:47:2c:54:10:43:49:8d:a2:08:12:f4:92:ea:39:
e4:c0:a0:46:fe:04:2f:ff:89:e5:69:8a:21:ee:f8:
52:01:b4:46:a4:b2:d5:70:dc:26:bf:6a:5c:a5:9f:
6f:46:21:d5:ee:28:ae:ca:e0:f4:50:c3:26:bb:8b:
98:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:91:77:22:8D:A1:6F:B9:72:53:4D:E0:41:E9:DF:B3:86:15:EC:49
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3139382e302f32342d3234203d3e20323030303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.198.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e0:34:5f:54:f1:dc:80:dd:9d:44:8b:f0:39:f7:4d:5e:c9:
94:83:29:e9:fc:70:b2:26:9d:84:cd:a6:5c:5b:7f:7e:f2:5d:
35:1b:87:6c:56:9d:bb:1a:65:3d:d7:a8:33:2d:e0:c8:3a:ad:
63:1b:54:fa:60:62:f1:76:3c:56:ad:3c:13:ec:6c:77:49:26:
3a:1d:d3:ee:9f:fc:bb:b4:4c:78:fd:e2:85:8c:63:c2:3f:70:
3d:99:cd:bd:86:5e:48:a4:8f:9b:3d:37:94:2c:6f:98:d7:23:
9b:09:79:70:1f:27:03:7f:8b:31:72:02:98:79:f2:bc:ae:c7:
51:71:fb:8d:7b:7e:6b:81:a9:0c:b1:14:e7:0f:a8:a4:25:57:
b2:da:fd:b3:83:82:c7:24:0b:8c:a0:fd:f1:12:45:7c:de:d7:
03:23:e3:1b:49:da:a3:92:0c:99:68:be:f4:e5:e8:c6:12:26:
5a:b5:64:88:34:a9:df:32:43:2f:a9:17:5d:d3:e0:19:a4:5a:
8d:03:1b:11:c3:fd:d7:9c:17:37:ff:df:f3:1a:7b:13:72:15:
e9:b7:57:54:66:3c:4c:a9:fc:6d:eb:e2:d7:37:90:40:b9:46:
5f:cb:ca:d5:48:85:3b:cd:1e:b3:b6:af:26:28:8d:0d:da:97:
1f:2a:ea:0a
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUfavooRir8UBNny2OpsMpUUxG6bYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM5NDNjYzJhN2NkYzM3OGEzNzcwMjU3M2JiNGY4MjEx
NzBiNTMwZDAeFw0yNTA5MTAwOTUwMDFaFw0yNjA5MDkwOTU1MDFaMDMxMTAvBgNV
BAMTKDQ4OTE3NzIyOERBMTZGQjk3MjUzNERFMDQxRTlERkIzODYxNUVDNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlHvuOpMSlGMvNEXScfrI6lZY+
/s2WkWLIrK88AOhjefpHnnRZDXvaEsUbEl8ws2mUALi3w9rAx49oVG3T2eUCXgMX
EiALS1ERRosnHU68f4WBZybNe4ZAGG74eDjcF+8Fc4iUTJlDSjI5eGSp/2pQS7I6
6GDLyYtr1XBpHgRcisnB/KxdOTCLRwoR9FnBtcVN8qdk2PRFOKNber2P63FLnSvj
NrENyydB9ci4SZJrQQsQ7XPHiudbgR0mZ7Dt7slnN3hHLFQQQ0mNoggS9JLqOeTA
oEb+BC//ieVpiiHu+FIBtEakstVw3Ca/alyln29GIdXuKK7K4PRQwya7i5iJAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUSJF3Io2hb7lyU03gQenfs4YV7EkwHwYDVR0j
BBgwFoAU3JQ8wqfNw3ijdwJXO7T4IRcLUw0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYtNjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0
MTAxLzAvREM5NDNDQzJBN0NEQzM3OEEzNzcwMjU3M0JCNEY4MjExNzBCNTMwRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNKUTh3cWZOdzNpamR3SlhPN1Q0SVJj
TFV3MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYt
NjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0MTAxLzAvMzgzNTJlMzIzMzM3MmUzMTM5
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzAzMDM4Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABV7cYwDQYJKoZIhvcNAQELBQADggEBAHDgNF9U8dyA3Z1Ei/A5901eyZSDKen8
cLImnYTNplxbf37yXTUbh2xWnbsaZT3XqDMt4Mg6rWMbVPpgYvF2PFatPBPsbHdJ
Jjod0+6f/Lu0THj94oWMY8I/cD2Zzb2GXkikj5s9N5Qsb5jXI5sJeXAfJwN/izFy
Aph58ryux1Fx+417fmuBqQyxFOcPqKQlV7La/bODgsckC4yg/fESRXze1wMj4xtJ
2qOSDJlovvTl6MYSJlq1ZIg0qd8yQy+pF13T4BmkWo0DGxHD/decFzf/3/MaexNy
Fem3V1RmPEyp/G3r4tc3kEC5Rl/LytVIhTvNHrO2ryYojQ3alx8q6go=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:41:12 2025 by rpki-client