Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3230372e302f32342d3234203d3e20313938313030.roa
File: 38352e3233372e3230372e302f32342d3234203d3e20313938313030.roa (raw, json)
Hash identifier: rMUf7yGH8Z3cumMw2q0VtMbvWeLut+xc/WpErXXR4YM=
Subject key identifier: 9B:F6:3B:0D:58:6D:2E:BC:3D:3D:5C:C2:4F:AE:B8:C3:C1:0B:FA:25
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 026C19C65B732FD937174D676387AC5A04A9572C
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3230372e302f32342d3234203d3e20313938313030.roa
Signing time: Wed 10 Sep 2025 09:55:01 +0000
ROA not before: Wed 10 Sep 2025 09:50:01 +0000
ROA not after: Wed 09 Sep 2026 09:55:01 +0000
asID: 198100
IP address blocks: 85.237.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:6c:19:c6:5b:73:2f:d9:37:17:4d:67:63:87:ac:5a:04:a9:57:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Sep 10 09:50:01 2025 GMT
Not After : Sep 9 09:55:01 2026 GMT
Subject: CN=9BF63B0D586D2EBC3D3D5CC24FAEB8C3C10BFA25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:42:fb:5b:b8:f9:56:ae:bf:ae:0d:cd:4d:06:
57:0e:73:a2:c4:61:65:70:fa:eb:65:5d:25:51:88:
6d:d5:95:17:2a:69:32:a2:aa:16:4d:6f:23:30:9b:
56:62:ae:86:5d:2e:6a:1c:3a:ae:f7:19:00:f0:96:
13:61:ea:89:e8:59:47:57:ce:89:26:26:b1:76:8b:
4b:ec:b3:f6:e0:81:17:65:ae:4a:3b:06:f0:58:5e:
8c:d5:c3:7a:c8:14:ca:8c:ca:48:86:31:f3:66:68:
b3:f8:d6:03:9b:17:57:c9:53:6a:5d:4c:68:36:28:
68:b9:c4:cf:e2:3d:73:e1:66:83:8f:52:12:23:15:
f3:38:63:c8:c8:d6:e6:ba:54:11:83:fa:4d:83:dd:
dd:95:2e:00:82:9d:03:e8:58:39:db:b8:50:09:9f:
3b:dc:d0:e3:c6:a6:95:79:a9:a5:27:71:fa:f8:a3:
33:af:43:bd:15:cb:59:81:19:df:0a:84:05:bb:74:
46:0a:c6:f6:4b:ee:d0:e2:b5:79:74:b8:9d:c8:06:
71:a6:5d:09:9f:f8:3b:d7:fd:8b:e5:b3:4c:20:5a:
c7:df:39:01:77:f1:57:3e:98:e3:d4:2f:14:18:c2:
ad:00:cc:36:c7:fb:78:6e:aa:d7:cd:82:c3:15:7a:
4d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F6:3B:0D:58:6D:2E:BC:3D:3D:5C:C2:4F:AE:B8:C3:C1:0B:FA:25
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3230372e302f32342d3234203d3e20313938313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.207.0/24
Signature Algorithm: sha256WithRSAEncryption
13:82:5e:f1:1d:f0:f4:1c:07:b3:2f:8d:5f:38:48:1a:bc:80:
ec:16:39:b6:74:d0:a4:9d:e6:56:17:b9:47:13:df:8b:dd:ad:
38:a2:1d:84:b6:e1:ae:f8:fd:5d:0a:3a:a0:9d:0f:81:89:42:
6b:eb:83:8a:38:1c:fd:a6:ee:cd:77:6e:7b:ee:0b:c7:6e:b2:
db:5d:d4:63:6d:d5:a4:61:23:2a:06:0d:db:c0:a9:51:e1:f3:
2a:95:60:72:2b:99:05:59:a4:3a:79:c0:15:a5:69:9f:06:18:
d7:d3:d8:d9:dd:b6:cc:3d:1f:21:b3:62:21:09:80:16:c1:5b:
e9:f7:10:82:5e:26:50:65:03:06:e2:15:9b:08:f6:63:e6:bd:
64:8c:2e:bc:f0:b8:f9:78:38:08:4e:93:19:b6:7c:1b:92:15:
5b:ea:a3:19:c6:ea:c7:92:d7:57:cf:65:92:63:d1:01:44:20:
20:3b:6b:6d:dd:6e:06:b4:e8:69:79:b9:be:07:0c:aa:9f:2e:
db:bf:33:1e:a6:a7:19:49:46:13:cf:4e:9e:53:f3:e3:2f:99:
2b:07:75:01:d3:02:ca:49:37:3d:b5:b3:48:0c:1e:df:54:52:
34:e9:97:90:b7:7c:a3:b5:50:37:02:78:82:a2:8e:99:d1:46:
7d:ea:98:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:44:22 2025 by rpki-client