Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231372e302f32342d3234203d3e20323136313338.roa
File: 38352e3233372e3231372e302f32342d3234203d3e20323136313338.roa (raw, json)
Hash identifier: C8BLqngwukmawYF6FmzzdDTXOPqZchvFnv+xcXGUXl4=
Subject key identifier: 6D:7A:DD:7B:01:A9:87:96:D3:D4:E6:A3:05:A2:9E:ED:B7:DB:DF:1B
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 78128FAF998A793D4E82325A5A6F600DF700C047
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231372e302f32342d3234203d3e20323136313338.roa
Signing time: Wed 24 Sep 2025 09:44:48 +0000
ROA not before: Wed 24 Sep 2025 09:39:48 +0000
ROA not after: Wed 23 Sep 2026 09:44:48 +0000
asID: 216138
IP address blocks: 85.237.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:12:8f:af:99:8a:79:3d:4e:82:32:5a:5a:6f:60:0d:f7:00:c0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Sep 24 09:39:48 2025 GMT
Not After : Sep 23 09:44:48 2026 GMT
Subject: CN=6D7ADD7B01A98796D3D4E6A305A29EEDB7DBDF1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5b:34:6b:ed:75:a6:37:a3:2f:be:95:3f:01:
b5:55:66:5f:cd:07:4a:67:4e:03:d2:17:8f:86:07:
0c:23:d8:55:64:4f:9a:56:9d:42:a4:ed:18:84:18:
29:b2:8d:bb:7a:23:32:d1:89:d1:2c:86:5b:81:fe:
c0:bb:6e:88:6e:9e:fd:e0:de:25:bf:ed:08:06:ee:
72:a9:3c:91:f8:34:28:93:5c:97:19:79:5f:e9:86:
ae:08:7a:f6:bb:24:35:55:d7:9f:0c:d5:a8:41:79:
d4:73:dd:c2:04:0e:da:0b:0e:6f:0b:42:65:51:b7:
ab:b7:af:a6:6b:89:d7:b9:c8:23:3f:8d:e6:54:87:
02:59:00:09:a1:21:43:1f:04:04:f6:29:1a:9d:90:
e9:7e:d1:f2:37:76:41:db:01:28:b4:ca:b0:c0:29:
54:06:e9:a2:77:15:6d:ec:21:40:d9:29:4b:26:6a:
bd:39:1b:aa:13:4d:95:0f:9c:ff:ff:57:02:23:3f:
b3:86:2a:1c:7c:52:e7:ce:ae:d6:36:b0:90:64:78:
af:5e:bc:28:2c:ea:37:10:18:00:83:ff:9f:0a:e2:
d2:74:25:cd:3b:65:e6:9f:24:2c:df:84:35:c4:a9:
0a:cd:2b:30:92:6f:4f:8a:de:81:cd:a5:98:14:4b:
53:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7A:DD:7B:01:A9:87:96:D3:D4:E6:A3:05:A2:9E:ED:B7:DB:DF:1B
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231372e302f32342d3234203d3e20323136313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.217.0/24
Signature Algorithm: sha256WithRSAEncryption
06:93:f5:e6:92:30:cc:be:25:45:86:79:3f:9d:df:d4:9a:98:
b4:2e:62:c9:a8:f1:47:5d:26:66:65:f4:a3:81:c0:37:b4:21:
fb:a2:50:af:ba:3f:ed:a3:37:cc:c3:d8:01:6d:fe:9f:0f:29:
93:bc:94:c7:7a:b5:76:5b:b2:b3:53:11:73:8a:17:27:ef:cd:
7d:d2:bd:35:ca:44:96:bf:b6:3d:4d:73:82:1e:66:77:39:18:
66:31:3c:e8:79:c2:7f:f3:5e:00:b9:2a:46:91:48:15:f2:6d:
3d:c4:df:20:0a:f3:15:d8:db:82:93:08:0c:6e:5d:27:08:82:
ef:21:7c:cb:bc:da:d4:28:ae:19:9a:f1:b8:69:d8:42:e6:e8:
cb:b8:dd:35:44:16:2e:41:f1:ea:b6:1d:ae:6f:05:d2:2a:03:
72:1b:ce:e7:01:3d:5c:cb:e5:74:38:3c:53:b3:7d:c0:9b:df:
b9:4a:15:18:ee:58:94:9a:2f:3f:13:aa:5f:d9:c4:92:ee:a6:
ef:f3:ae:81:c6:70:95:c3:a7:0e:0b:e4:c3:04:61:89:97:2a:
ce:b9:23:10:84:fe:aa:f0:d5:94:e0:f3:2f:0e:ee:24:8b:e3:
2e:69:51:58:45:27:7b:8a:a7:2d:6b:a6:d5:0e:61:14:89:d8:
cf:19:13:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:40:14 2025 by rpki-client