Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e2039333034.roa
File: 3138382e3136342e3135342e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: Xrl4k2Y1ZQnjBYts0VWEIYeb2G4oTSJ6MhQs1UM8vvM=
Subject key identifier: A5:A6:E2:23:04:6A:DA:ED:29:42:CB:C5:28:00:6C:DD:B6:52:A6:48
Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial: 64C19AF219E6EE37631D6375ED7C07364F587910
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e2039333034.roa
Signing time: Mon 18 Aug 2025 16:06:54 +0000
ROA not before: Mon 18 Aug 2025 16:01:54 +0000
ROA not after: Mon 17 Aug 2026 16:06:54 +0000
asID: 9304
IP address blocks: 188.164.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:c1:9a:f2:19:e6:ee:37:63:1d:63:75:ed:7c:07:36:4f:58:79:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Validity
Not Before: Aug 18 16:01:54 2025 GMT
Not After : Aug 17 16:06:54 2026 GMT
Subject: CN=A5A6E223046ADAED2942CBC528006CDDB652A648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a1:27:a8:d6:08:40:5f:58:6d:95:b2:3b:4c:
28:eb:3d:1d:27:03:44:1a:8a:ff:68:9b:84:de:7f:
db:e3:ac:32:ed:b1:3c:56:43:99:21:bf:a1:83:a7:
0b:68:e1:be:7d:94:ff:8e:0c:ad:1f:fe:37:2a:95:
0f:84:6e:a0:1b:ff:ae:76:e1:ee:6b:18:51:a7:d6:
2f:10:75:dd:28:1c:e5:5d:6d:9a:b7:a2:69:6e:6a:
cc:42:2b:8c:43:bb:f5:a9:7a:2c:dd:16:76:d7:bf:
d2:c3:ae:00:28:5a:09:5c:08:93:d2:b9:5a:1e:67:
8d:0c:e7:5e:21:21:cf:17:70:96:b7:b1:cc:74:16:
5d:95:b8:35:0d:4b:16:13:e9:b3:cc:fd:88:f7:a7:
51:aa:80:b1:09:98:6b:ef:54:d5:01:b0:8f:29:9f:
7d:2d:6b:27:24:ef:17:6d:1a:8c:39:84:de:65:64:
97:3e:55:87:d1:d0:ff:e5:0f:ae:9a:38:7f:98:af:
51:bc:df:82:cc:8f:14:a2:fa:b3:9c:08:4f:8a:b8:
e4:26:e9:05:2b:95:b6:a9:04:5a:25:bb:ce:47:03:
44:24:79:e3:83:57:31:65:94:29:97:da:8f:07:7b:
3b:27:f3:57:69:5f:84:9c:6d:b3:99:77:52:1f:a1:
77:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A6:E2:23:04:6A:DA:ED:29:42:CB:C5:28:00:6C:DD:B6:52:A6:48
X509v3 Authority Key Identifier:
keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.154.0/24
Signature Algorithm: sha256WithRSAEncryption
41:6f:00:cb:0d:2f:67:1d:56:a1:d0:a9:89:c2:68:60:21:a2:
f3:33:bb:92:43:b2:17:9f:c0:ed:8d:dd:c5:fb:46:90:fe:2d:
fb:ae:6f:b7:c0:2b:7b:09:a2:16:b2:fb:66:8d:46:eb:da:80:
a4:39:29:84:91:84:ab:d8:9f:88:28:04:b3:39:4c:43:14:5d:
de:96:40:84:e2:d6:fd:f9:85:59:23:fc:90:aa:e7:21:bf:31:
4d:59:9a:37:b0:fc:5a:07:ba:91:eb:d8:7c:9c:10:2c:bd:f5:
6c:dc:cf:ad:28:6e:06:44:7e:2d:1e:cc:0b:e7:b9:d2:31:df:
7d:cf:fe:d9:e1:91:52:4c:16:47:39:99:3f:16:37:99:05:dd:
50:87:46:27:fe:ab:b4:5e:d2:40:84:70:2b:8d:60:6d:0d:8e:
c4:66:82:1f:2e:0e:bd:c7:1e:d4:f7:8c:23:81:3d:ff:ce:e0:
79:63:a5:43:32:5f:c8:31:af:63:d4:41:79:64:bb:35:3c:af:
27:86:59:5e:69:17:7b:a6:0f:b3:65:4b:2c:1e:b5:2e:81:b7:
0f:ec:ea:c0:e5:e3:7d:05:a8:46:04:53:c1:04:14:14:dc:15:
89:0a:c1:ba:d8:f2:97:aa:ae:18:42:9c:21:a7:5f:25:30:9b:
f9:71:36:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:28 2025 by rpki-client