Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e20333935333734.roa
File: 3138352e32392e3136342e302f32342d3234203d3e20333935333734.roa (raw, json)
Hash identifier: Ae1GzqYWCBBhL7aDNjGJXMgT5PpYsDBflxZPyG+17t4=
Subject key identifier: A5:FA:93:B4:98:46:25:BC:D6:FB:4E:46:A5:79:7B:30:04:29:81:53
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 686790D8FA3878183397147708095B8DB9FFC897
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e20333935333734.roa
Signing time: Mon 22 Sep 2025 12:36:40 +0000
ROA not before: Mon 22 Sep 2025 12:31:40 +0000
ROA not after: Mon 21 Sep 2026 12:36:40 +0000
asID: 395374
IP address blocks: 185.29.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:15:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:67:90:d8:fa:38:78:18:33:97:14:77:08:09:5b:8d:b9:ff:c8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 22 12:31:40 2025 GMT
Not After : Sep 21 12:36:40 2026 GMT
Subject: CN=A5FA93B4984625BCD6FB4E46A5797B3004298153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fd:1f:3c:c1:e4:a5:ee:0a:8f:3a:5b:0d:af:
99:eb:a7:67:a8:44:01:ed:26:bb:b1:35:14:17:13:
a3:39:4e:0b:66:ce:d8:a6:b8:6b:e5:d4:2d:a7:ea:
56:e1:30:c8:c9:c3:61:5b:aa:dc:0f:95:91:52:ec:
c6:82:25:9e:07:08:42:84:53:52:f4:35:91:b6:57:
9c:d9:e8:e9:63:a2:4d:31:6f:d2:42:e1:94:c9:73:
bb:12:cf:3f:b6:f5:65:2f:a9:0f:4f:f1:61:e1:2e:
df:8c:dd:83:2c:48:6b:13:9c:01:9a:ef:84:c9:e0:
a2:6f:f9:6f:d5:01:87:97:2e:2e:68:ce:fe:82:ab:
1e:09:1d:75:94:2e:7d:d9:59:ae:7b:05:8f:92:88:
0d:d2:a1:4d:c1:ef:c1:cb:dc:0d:95:f0:38:18:cc:
0a:69:08:14:3f:a9:53:88:47:40:81:96:75:ca:98:
75:a6:ba:94:2e:3c:9f:df:6c:5f:f8:dc:cf:63:3d:
48:34:27:97:06:31:9a:0d:90:93:a8:1b:13:95:60:
1d:63:0d:f9:9b:dd:ab:30:50:a7:a3:e1:b7:b2:04:
5d:07:c5:64:53:ca:7d:53:d3:71:fc:74:01:65:ba:
72:ef:af:25:ff:4b:f7:35:a2:3a:93:04:4d:78:2f:
14:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FA:93:B4:98:46:25:BC:D6:FB:4E:46:A5:79:7B:30:04:29:81:53
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e20333935333734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.164.0/24
Signature Algorithm: sha256WithRSAEncryption
82:1d:12:bd:e3:58:83:b1:4a:2f:11:12:c9:04:91:0e:99:a2:
40:79:ff:1b:96:46:a1:14:9e:74:97:8c:d3:b7:88:91:46:7b:
1b:0e:41:37:5d:1d:9e:7a:73:90:ed:16:f8:65:6b:77:1a:63:
21:20:db:a4:bf:da:dd:02:45:9b:04:66:99:90:30:51:0b:80:
47:d6:1d:71:a9:2b:42:57:8a:99:48:e8:20:02:89:74:a1:a2:
c3:ba:45:15:e9:94:42:e0:e4:7b:1f:6f:b3:ea:28:26:7f:52:
98:e4:9c:54:e7:e2:a7:c6:4a:8b:da:87:ea:87:04:cb:6b:31:
27:58:4e:9a:41:9c:7a:c0:e7:3a:53:14:3c:92:e3:a4:30:df:
5a:b3:f6:51:21:f1:55:81:17:9a:77:e7:74:93:43:99:fc:ed:
9e:f9:21:d7:68:45:77:d7:de:b5:72:01:b5:26:89:15:73:be:
ea:8f:b7:d8:15:8d:ea:73:8c:91:82:4c:6d:2a:90:b9:f2:5f:
01:a6:6d:d2:af:c8:fa:1d:29:ed:b0:87:b6:8e:9e:cd:f1:a5:
79:86:a8:67:4b:0c:ec:79:06:5b:6b:e8:26:47:d9:cd:d7:97:
b2:21:89:3f:cb:ac:65:98:e4:35:3a:4f:3c:7a:c2:61:4d:bb:
1d:37:cb:f2
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUaGeQ2Po4eBgzlxR3CAlbjbn/yJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNTA5MjIxMjMxNDBaFw0yNjA5MjExMjM2NDBaMDMxMTAvBgNV
BAMTKEE1RkE5M0I0OTg0NjI1QkNENkZCNEU0NkE1Nzk3QjMwMDQyOTgxNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa/R88weSl7gqPOlsNr5nrp2eo
RAHtJruxNRQXE6M5TgtmztimuGvl1C2n6lbhMMjJw2FbqtwPlZFS7MaCJZ4HCEKE
U1L0NZG2V5zZ6Oljok0xb9JC4ZTJc7sSzz+29WUvqQ9P8WHhLt+M3YMsSGsTnAGa
74TJ4KJv+W/VAYeXLi5ozv6Cqx4JHXWULn3ZWa57BY+SiA3SoU3B78HL3A2V8DgY
zAppCBQ/qVOIR0CBlnXKmHWmupQuPJ/fbF/43M9jPUg0J5cGMZoNkJOoGxOVYB1j
Dfmb3aswUKej4beyBF0HxWRTyn1T03H8dAFlunLvryX/S/c1ojqTBE14LxRvAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUpfqTtJhGJbzW+05GpXl7MAQpgVMwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzODM1MmUzMjM5MmUzMTM2
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM5MzUzMzM3MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5HaQwDQYJKoZIhvcNAQELBQADggEBAIIdEr3jWIOxSi8REskEkQ6ZokB5/xuW
RqEUnnSXjNO3iJFGexsOQTddHZ56c5DtFvhla3caYyEg26S/2t0CRZsEZpmQMFEL
gEfWHXGpK0JXiplI6CACiXShosO6RRXplELg5Hsfb7PqKCZ/UpjknFTn4qfGSova
h+qHBMtrMSdYTppBnHrA5zpTFDyS46Qw31qz9lEh8VWBF5p353STQ5n87Z75Iddo
RXfX3rVyAbUmiRVzvuqPt9gVjepzjJGCTG0qkLnyXwGmbdKvyPodKe2wh7aOns3x
pXmGqGdLDOx5Bltr6CZH2c3Xl7IhiT/LrGWY5DU6Tzx6wmFNux03y/I=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:36 2025 by rpki-client