Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32342d3234203d3e20393834.roa
File: 3138352e3232362e3135342e302f32342d3234203d3e20393834.roa (raw, json)
Hash identifier: OnyMDDjhfbjBWnmH/O9nK3hLulu4nf9Z9u4/z8prRCw=
Subject key identifier: F4:81:A0:F1:5A:F6:94:8B:0C:7F:00:0E:70:41:5A:66:53:C8:63:23
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 6CCE08C747E7B1FFA298BC143E1C8B8315C4796D
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32342d3234203d3e20393834.roa
Signing time: Wed 08 Oct 2025 12:27:02 +0000
ROA not before: Wed 08 Oct 2025 12:22:02 +0000
ROA not after: Wed 07 Oct 2026 12:27:02 +0000
asID: 984
IP address blocks: 185.226.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 12:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ce:08:c7:47:e7:b1:ff:a2:98:bc:14:3e:1c:8b:83:15:c4:79:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Oct 8 12:22:02 2025 GMT
Not After : Oct 7 12:27:02 2026 GMT
Subject: CN=F481A0F15AF6948B0C7F000E70415A6653C86323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:ca:00:e9:83:da:71:3c:d6:e2:d5:64:2e:
60:15:de:3b:51:d6:20:3c:72:05:4d:10:da:1f:a9:
bd:c0:51:65:3c:fe:37:85:2a:21:45:1c:86:7b:6a:
2c:cc:35:82:c3:38:10:d8:eb:71:ae:a9:e1:0a:5e:
95:83:dc:fd:f8:d5:92:06:8c:be:ae:85:fe:65:56:
a9:e5:4d:eb:25:01:c4:76:3a:7d:b3:be:d2:11:6d:
e6:ed:95:3f:b2:52:ee:10:fe:28:37:fb:0a:cd:44:
42:1f:5e:0e:9e:07:ef:15:92:13:8f:a9:0d:54:09:
20:ac:1a:81:56:10:10:85:0d:4c:f8:f6:b1:af:93:
04:34:9f:5d:6f:d6:c6:94:f8:59:93:91:ff:0f:6a:
26:ab:34:9f:2e:6a:bd:77:1b:73:37:3d:fa:b9:f3:
8b:52:82:e8:5e:fc:33:88:c0:fd:15:3a:78:45:ad:
73:49:52:ed:22:74:02:7e:43:f9:92:d6:12:a6:34:
13:1c:16:e8:ec:53:b2:ef:3b:be:99:2d:36:43:74:
c0:80:6d:e5:f0:21:b0:08:60:d5:11:33:4c:d8:4e:
02:ef:cf:77:42:8f:02:92:30:27:6b:24:c6:13:5c:
07:5e:57:fc:98:bc:05:7a:13:4b:37:dc:70:8b:6f:
35:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:81:A0:F1:5A:F6:94:8B:0C:7F:00:0E:70:41:5A:66:53:C8:63:23
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32342d3234203d3e20393834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.154.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:35:d6:f0:8a:cb:b9:b5:57:1f:b5:76:1d:1b:b7:d6:a7:a9:
c8:cf:00:d8:3a:cf:33:0e:ca:11:58:15:ba:ac:80:7c:5e:fd:
cf:d9:54:6b:94:a3:7f:1c:bb:e5:fd:26:8b:28:6a:62:85:a6:
2f:b8:d1:e3:78:c2:53:25:b5:df:7a:04:5e:56:2d:cc:12:8b:
d7:e5:3b:30:24:00:ca:06:e3:31:95:0c:4c:1a:1b:a6:80:d6:
ed:13:8a:26:ed:b4:a5:76:fa:e1:6d:c1:22:5a:cd:5c:c6:3d:
51:01:6b:60:79:91:7a:5d:a9:12:c5:8d:6b:6e:22:80:3b:2c:
aa:68:fc:73:e8:10:21:0f:cb:f7:7d:61:a4:c8:41:35:e0:c9:
28:fd:3a:a3:92:ef:d0:e0:aa:12:68:78:c2:7f:5e:54:4f:0b:
a5:6b:42:5b:d0:4b:6d:5e:49:9b:7a:da:39:6a:70:d2:9f:3f:
0e:f6:33:72:b5:92:e9:25:94:10:88:b5:3a:ae:65:83:0a:cd:
d5:b2:10:77:88:e7:fd:df:e5:c4:3f:46:10:6c:75:cf:82:5a:
8b:b7:49:83:88:ee:81:0d:81:da:21:42:ec:f6:a7:83:f6:ae:
85:da:cc:82:92:b7:e9:47:b8:df:f8:19:2a:71:1d:55:a2:bf:
75:f6:8a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:55 2025 by rpki-client