Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3235312e302f32342d3234203d3e20313338313630.roa
File: 3138352e3231332e3235312e302f32342d3234203d3e20313338313630.roa (raw, json)
Hash identifier: fygAQSb+QwiyUnesqK4IcvvWfRduHnIesYUaMnTC6go=
Subject key identifier: 9A:E7:8A:DD:32:85:B1:80:E1:16:B3:D7:77:93:38:36:00:03:18:A9
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 136CBF648273337D5FB714A7EA1B9C6014449568
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3235312e302f32342d3234203d3e20313338313630.roa
Signing time: Wed 20 Aug 2025 13:15:34 +0000
ROA not before: Wed 20 Aug 2025 13:10:34 +0000
ROA not after: Wed 19 Aug 2026 13:15:34 +0000
asID: 138160
IP address blocks: 185.213.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 21:05:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:6c:bf:64:82:73:33:7d:5f:b7:14:a7:ea:1b:9c:60:14:44:95:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Aug 20 13:10:34 2025 GMT
Not After : Aug 19 13:15:34 2026 GMT
Subject: CN=9AE78ADD3285B180E116B3D777933836000318A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:89:a9:cd:e2:3a:93:73:d7:48:07:49:3c:70:
a1:5a:d0:83:ef:55:c7:eb:34:3e:d0:93:95:2f:88:
31:52:40:af:91:45:9c:b0:96:15:2e:66:d1:5f:6f:
96:71:c5:3e:40:1b:eb:b4:60:f1:b3:4c:12:ab:f8:
17:e5:1b:24:1f:9f:97:6e:95:b0:cc:e6:96:9c:22:
82:5e:2f:3a:66:5b:1a:53:49:84:ac:1b:55:12:05:
ec:49:02:eb:cb:e5:5d:e4:47:2f:c3:15:ec:7a:48:
a8:4f:16:00:4e:6f:a0:ec:6d:e9:e6:af:fe:5b:7d:
db:85:02:10:1f:85:a0:12:17:15:b3:f7:ca:0c:42:
34:00:16:9d:69:3a:4b:71:4f:1e:92:05:18:87:73:
c5:88:51:08:89:74:fc:27:ce:b2:58:e7:68:f1:17:
0d:71:f3:51:43:c3:ba:52:f9:00:25:33:c0:6a:db:
9c:02:2c:59:ea:4e:d3:db:85:11:a5:4a:78:8c:f6:
07:c9:84:8b:f5:8d:28:1d:a9:41:df:8a:cb:2f:e8:
f9:fa:c7:da:01:4c:20:99:d0:b6:95:de:8f:d0:11:
5f:f3:53:b2:c3:c3:71:8f:c6:29:ea:ac:97:58:00:
70:2c:43:22:64:81:b1:64:d2:96:e8:31:3b:e0:d7:
c1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E7:8A:DD:32:85:B1:80:E1:16:B3:D7:77:93:38:36:00:03:18:A9
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3235312e302f32342d3234203d3e20313338313630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.251.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:cb:52:5a:d2:42:4f:2e:12:3f:06:0f:38:69:40:94:ea:95:
8d:26:50:9d:cd:5c:25:b0:c9:0d:1b:76:e9:29:d5:b7:b2:87:
13:a2:85:89:b9:d0:98:fa:58:bf:fb:f9:00:ee:c3:d2:28:4c:
71:9f:a8:a9:85:fd:f2:8b:22:f3:0a:72:04:0d:64:a5:5d:1a:
77:e5:a1:72:62:9e:0e:68:ea:19:62:86:0c:63:85:4f:06:77:
70:1a:3a:ad:ea:41:b8:ea:61:a4:91:c5:94:31:27:cf:27:d0:
5c:67:57:3b:39:ea:d4:ff:5f:ae:09:5e:06:f4:61:b7:31:3f:
49:12:57:e8:21:34:c6:ec:86:cf:14:01:35:bc:3b:f4:6a:4e:
28:be:28:4d:b5:2f:41:73:5f:fc:73:73:d4:fa:e9:d4:75:c0:
5d:74:77:b8:8e:39:64:69:63:d1:f1:cc:0a:c6:a0:6f:23:9d:
0f:24:75:00:be:97:6b:d6:e4:03:9c:68:a6:3a:49:eb:e4:90:
a3:1a:9f:e5:c6:85:4a:4e:31:dd:2c:0e:ab:ff:c5:29:5e:c5:
5c:b2:bc:66:48:07:5e:68:ec:53:bf:9e:9c:d9:c8:71:5f:ee:
c0:91:d3:39:34:dd:98:79:9a:31:4a:6a:7c:75:f1:d7:95:ff:
6d:c3:6a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:39:00 2025 by rpki-client