Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231342e302f32342d3234203d3e203631333137.roa
File: 38352e3233372e3231342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: qFRgHCWTI/XUnmyN36OcRMJvNDIGZg4H/P9SJmdGoYs=
Subject key identifier: 5A:1A:42:1E:5D:0D:C3:42:B0:DE:4F:63:B2:F8:92:07:77:2D:C3:DF
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 6EBD3450D9D42262B15B95C02A8003D1E557E424
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231342e302f32342d3234203d3e203631333137.roa
Signing time: Wed 10 Sep 2025 09:55:02 +0000
ROA not before: Wed 10 Sep 2025 09:50:02 +0000
ROA not after: Wed 09 Sep 2026 09:55:02 +0000
asID: 61317
IP address blocks: 85.237.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:bd:34:50:d9:d4:22:62:b1:5b:95:c0:2a:80:03:d1:e5:57:e4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Sep 10 09:50:02 2025 GMT
Not After : Sep 9 09:55:02 2026 GMT
Subject: CN=5A1A421E5D0DC342B0DE4F63B2F89207772DC3DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:00:bf:3a:f6:98:fb:f9:34:08:e9:92:c7:
91:de:60:4d:2e:ac:8b:bb:e5:4c:8d:5c:1c:f9:67:
ae:89:9f:ab:57:a3:30:1b:5d:82:ee:81:82:e9:7c:
d7:6e:e9:b9:4b:a4:a7:42:4b:0b:8e:a9:73:d5:1b:
75:d2:f0:ad:bf:3d:e4:b9:73:d9:c5:1a:10:77:5e:
0c:a3:d3:69:69:fa:e2:9b:7c:dc:cb:ff:6c:f3:da:
5e:d3:72:6a:4a:19:ac:c6:cf:15:71:19:94:a1:c4:
2a:c4:5b:56:e1:26:08:fc:ec:5e:c0:b6:69:cf:f7:
11:3c:b8:e0:e7:fd:b2:c8:6e:f3:9e:44:48:e4:92:
d7:b0:98:7c:b5:cb:e8:74:74:f9:2b:b9:59:6b:ae:
7b:55:ff:cf:57:7f:3e:15:98:b9:3a:9a:df:f7:10:
d3:75:c6:ba:57:e8:76:68:b9:17:9c:83:4c:55:fa:
8d:73:23:5a:9a:16:68:87:6c:db:09:22:29:de:12:
ad:1f:82:9a:67:ca:a7:70:6d:e3:81:c2:18:fb:24:
91:e3:49:4b:f3:74:43:6e:3b:4b:b9:3f:ab:b7:d4:
d5:1e:68:8a:77:a4:63:e9:d2:78:d5:c8:4f:01:88:
1d:c4:ca:f0:da:42:a8:b7:52:25:03:ed:09:03:5a:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1A:42:1E:5D:0D:C3:42:B0:DE:4F:63:B2:F8:92:07:77:2D:C3:DF
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231342e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.214.0/24
Signature Algorithm: sha256WithRSAEncryption
96:d8:6a:af:98:b9:42:4c:38:7c:80:e9:05:25:64:87:c5:88:
ec:82:52:a4:e0:fa:03:ce:db:c4:fe:cd:cb:52:50:6e:0f:0c:
54:2d:88:b8:42:49:61:a6:54:13:14:39:e6:e9:16:9c:4e:15:
73:e4:d0:eb:68:96:6e:95:98:8b:14:0f:8d:d4:49:e9:d6:b1:
83:ee:db:bf:91:b6:08:20:cb:85:0c:2b:3d:d7:a4:51:95:c6:
53:a1:7f:ed:b2:40:82:3c:88:d8:9e:d6:96:0e:42:e2:84:b5:
5f:9d:ef:31:5d:1b:f7:ea:72:73:1f:1d:e1:5c:2c:90:d5:d7:
d7:34:68:17:fd:9b:cf:d8:62:76:c7:39:7a:5a:91:76:93:01:
22:86:2b:10:ff:51:9d:68:98:17:2e:3e:4c:ac:3c:c2:6c:c6:
95:a2:92:a6:44:4f:92:6b:86:bc:11:a0:2a:90:d5:39:73:6c:
fb:d1:b5:ec:3c:16:51:0a:25:33:75:75:a9:eb:8b:5a:05:f6:
a2:74:0a:8c:f4:4d:43:f5:54:ce:cc:18:93:f3:05:4e:4f:0f:
96:3c:90:c0:a6:ff:d2:a6:ff:98:05:d8:29:82:30:62:c7:7c:
75:fd:ae:a6:c8:e9:a4:4b:ec:14:04:93:ff:b5:3f:b7:c1:68:
e7:0e:d5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:44:24 2025 by rpki-client