Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3230322e302f32342d3234203d3e20333937363330.roa
File: 38352e3233372e3230322e302f32342d3234203d3e20333937363330.roa (raw, json)
Hash identifier: ggAa1go+vcLGaih/w5GMhGIHiwHEuhxfBm8dFLsUVGU=
Subject key identifier: E0:F3:AC:C3:D5:BB:83:BC:26:5A:9A:DA:24:D0:4A:BF:C8:04:46:9D
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 6A74FDDE9977C3A4D49470F5D787C638CCC8994B
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3230322e302f32342d3234203d3e20333937363330.roa
Signing time: Fri 10 Oct 2025 12:26:08 +0000
ROA not before: Fri 10 Oct 2025 12:21:08 +0000
ROA not after: Fri 09 Oct 2026 12:26:08 +0000
asID: 397630
IP address blocks: 85.237.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:74:fd:de:99:77:c3:a4:d4:94:70:f5:d7:87:c6:38:cc:c8:99:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Oct 10 12:21:08 2025 GMT
Not After : Oct 9 12:26:08 2026 GMT
Subject: CN=E0F3ACC3D5BB83BC265A9ADA24D04ABFC804469D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:77:fa:e4:e1:44:47:32:4b:fc:44:ae:60:
72:70:8d:87:92:c2:e6:fd:8d:d7:7b:3c:11:98:7a:
50:5d:29:c4:89:26:ab:7d:0c:cb:02:97:ac:81:9e:
16:07:59:c3:5b:e4:ac:07:92:f4:97:2e:fe:6c:49:
8d:50:11:12:08:a4:6c:5b:d2:49:83:3a:9b:14:08:
8d:99:e0:0b:61:63:a4:bd:d4:02:09:2b:7f:a0:b3:
c5:e9:8d:ea:6b:29:4a:01:4f:27:28:36:71:10:01:
a8:2c:c4:39:a2:7e:dd:52:92:41:b0:b9:c2:71:e8:
d8:e8:bc:c6:8f:27:c2:5f:6e:f2:44:c7:fb:45:92:
2b:dc:04:96:c5:41:05:0c:1a:6f:a6:5c:33:07:02:
1b:e2:9f:f9:11:62:fa:7a:09:0d:a8:a7:a6:92:be:
c1:77:aa:f1:5d:35:84:28:d7:91:9f:c8:80:91:16:
2e:83:c8:87:d1:6e:c4:19:b8:74:6b:29:c6:e6:43:
51:a8:a0:44:e3:d9:9e:3f:1a:69:19:6e:75:11:cd:
05:ee:c6:7e:d0:42:21:61:c5:d6:4e:12:89:cc:07:
99:c5:e8:20:58:ca:57:ac:37:a2:50:09:3d:68:d7:
ed:73:d9:db:14:60:c3:77:54:97:d4:83:06:5c:16:
15:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F3:AC:C3:D5:BB:83:BC:26:5A:9A:DA:24:D0:4A:BF:C8:04:46:9D
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3230322e302f32342d3234203d3e20333937363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.202.0/24
Signature Algorithm: sha256WithRSAEncryption
33:dc:6b:ce:90:08:ff:25:b4:81:fc:2e:24:fa:37:49:3c:fa:
41:77:5f:60:5a:70:b1:e2:5d:79:ef:20:8e:ce:16:97:94:12:
b9:07:61:dd:a9:4f:9e:98:32:d1:1a:67:7c:f3:0d:b6:19:5b:
35:31:a6:24:43:f2:9c:36:aa:31:e3:15:95:d6:f2:dd:57:f9:
c7:79:99:7e:f0:86:10:2b:67:f0:bd:53:b5:ae:e1:fc:3a:c1:
00:1c:43:09:07:88:0b:7c:77:40:bd:ca:f1:ae:05:bb:b6:9f:
92:ac:2c:38:32:9e:4c:ba:25:e7:5c:67:54:7a:39:21:8e:f6:
b7:ac:fc:51:6b:ba:7e:ae:bc:fa:1e:32:0a:e0:81:8c:2d:2d:
df:9f:f6:42:6b:80:8c:d4:e1:ba:f0:32:3e:c1:3d:54:c6:d4:
d7:ba:84:39:63:2f:ff:d9:b7:5e:99:63:4e:90:93:e6:4c:dd:
76:fa:66:5d:43:9a:c8:64:dc:9a:fe:99:00:80:5c:33:39:4d:
f6:73:09:40:3f:21:b0:3b:f9:cc:80:17:9d:4c:c5:1e:4b:5b:
ee:11:b2:50:aa:d1:42:f6:e5:fe:ff:87:58:27:21:19:08:40:
6e:dc:e4:a7:0c:97:ef:92:4f:bc:e0:5e:91:22:ea:e1:3d:1c:
67:a1:42:23
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUanT93pl3w6TUlHD114fGOMzImUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM5NDNjYzJhN2NkYzM3OGEzNzcwMjU3M2JiNGY4MjEx
NzBiNTMwZDAeFw0yNTEwMTAxMjIxMDhaFw0yNjEwMDkxMjI2MDhaMDMxMTAvBgNV
BAMTKEUwRjNBQ0MzRDVCQjgzQkMyNjVBOUFEQTI0RDA0QUJGQzgwNDQ2OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq0Xf65OFERzJL/ESuYHJwjYeS
wub9jdd7PBGYelBdKcSJJqt9DMsCl6yBnhYHWcNb5KwHkvSXLv5sSY1QERIIpGxb
0kmDOpsUCI2Z4AthY6S91AIJK3+gs8XpjeprKUoBTycoNnEQAagsxDmift1SkkGw
ucJx6NjovMaPJ8JfbvJEx/tFkivcBJbFQQUMGm+mXDMHAhvin/kRYvp6CQ2op6aS
vsF3qvFdNYQo15GfyICRFi6DyIfRbsQZuHRrKcbmQ1GooETj2Z4/GmkZbnURzQXu
xn7QQiFhxdZOEonMB5nF6CBYylesN6JQCT1o1+1z2dsUYMN3VJfUgwZcFhVFAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU4POsw9W7g7wmWpraJNBKv8gERp0wHwYDVR0j
BBgwFoAU3JQ8wqfNw3ijdwJXO7T4IRcLUw0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYtNjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0
MTAxLzAvREM5NDNDQzJBN0NEQzM3OEEzNzcwMjU3M0JCNEY4MjExNzBCNTMwRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNKUTh3cWZOdzNpamR3SlhPN1Q0SVJj
TFV3MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYt
NjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0MTAxLzAvMzgzNTJlMzIzMzM3MmUzMjMw
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM5MzczNjMzMzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABV7cowDQYJKoZIhvcNAQELBQADggEBADPca86QCP8ltIH8LiT6N0k8+kF3X2Ba
cLHiXXnvII7OFpeUErkHYd2pT56YMtEaZ3zzDbYZWzUxpiRD8pw2qjHjFZXW8t1X
+cd5mX7whhArZ/C9U7Wu4fw6wQAcQwkHiAt8d0C9yvGuBbu2n5KsLDgynky6Jedc
Z1R6OSGO9res/FFrun6uvPoeMgrggYwtLd+f9kJrgIzU4brwMj7BPVTG1Ne6hDlj
L//Zt16ZY06Qk+ZM3Xb6Zl1Dmshk3Jr+mQCAXDM5TfZzCUA/IbA7+cyAF51MxR5L
W+4RslCq0UL25f7/h1gnIRkIQG7c5KcMl++ST7zgXpEi6uE9HGehQiM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:50:07 2025 by rpki-client